Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json)
Hash identifier: JPi5HoaCU40WPtoI8aPhUW9B8n0cUK8z7qQtwHl3jqc=
Subject key identifier: E3:28:B1:BB:AC:53:75:36:DB:8B:81:14:81:08:70:28:8F:93:31:8E
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial: 1CDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
Manifest number: 1CCE
Signing time: Fri 31 Jan 2025 16:10:16 +0000
Manifest this update: Fri 31 Jan 2025 16:10:16 +0000
Manifest next update: Fri 07 Feb 2025 16:10:16 +0000
Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: TbA0ft9Xay3E9V0b1UvLevQ1CIxnK4TtwMiXdOrTN1c=)
2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7387 (0x1cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Validity
Not Before: Jan 31 16:10:16 2025 GMT
Not After : Feb 7 16:10:16 2025 GMT
Subject: CN=679cf5e8-2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:1a:54:43:4b:dc:55:80:39:fc:01:27:66:
a9:6a:86:61:93:58:18:de:df:9d:ff:71:c3:06:3f:
96:17:bb:45:65:0d:0a:20:d6:42:bf:2b:eb:dd:60:
30:a4:c0:e2:8d:52:f7:de:71:53:44:21:7c:b4:da:
a7:eb:a3:24:15:52:36:cc:10:02:5d:73:6b:13:fa:
e0:4b:ad:62:58:24:6d:d2:a1:0d:81:bd:9c:1f:e7:
0a:b7:3e:78:99:f0:61:b6:bd:7a:dd:bb:bd:d0:28:
cb:39:0c:2e:14:b7:7c:de:a8:cd:8b:e2:e4:d1:b7:
09:dd:b8:bf:4d:81:6a:0e:28:df:05:19:37:d6:c1:
a7:7f:5c:4c:19:36:7d:52:64:94:01:a3:0a:40:48:
6e:a1:01:09:38:56:6c:4f:36:d1:5e:4b:67:1a:31:
98:41:88:df:bc:27:74:0f:38:95:c3:3c:dd:5a:dc:
8e:35:87:94:60:00:ea:fb:67:97:9b:3d:df:2b:65:
ce:14:6c:4e:4a:a1:11:ee:08:03:49:22:67:e5:60:
6d:ea:a7:86:68:62:ad:a2:27:87:a2:fd:e7:84:32:
77:87:84:e7:12:c8:94:5f:51:bc:b4:1b:a7:82:b6:
29:94:5d:e0:fd:9c:a5:dd:35:41:51:78:68:83:fd:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:B1:BB:AC:53:75:36:DB:8B:81:14:81:08:70:28:8F:93:31:8E
X509v3 Authority Key Identifier:
keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:94:18:67:d9:a4:aa:67:90:5b:6b:3b:a5:82:9b:70:c7:7b:
21:80:dc:86:76:cc:e2:fe:ad:33:e8:f3:d4:05:3d:29:0f:2c:
28:f5:58:86:a3:b4:68:04:e5:14:7c:20:83:c9:61:78:e1:54:
1b:b8:ce:c3:78:bf:3f:46:ab:1c:33:1a:28:db:e1:95:8b:75:
de:52:4a:9e:4a:a1:02:1f:eb:23:27:c2:b9:9e:47:11:fc:79:
e3:f5:24:1e:16:90:71:0c:f2:7c:ec:d9:5a:3b:fd:2e:79:44:
b3:0a:ad:08:a0:5b:ab:46:8c:80:d0:b8:e8:6d:24:fb:64:97:
7f:db:7b:35:9f:57:17:4b:a3:0a:a5:24:10:ba:78:8b:55:87:
4b:7b:6e:db:45:1a:2d:6f:33:66:e2:16:46:b7:e0:e5:39:7b:
58:61:36:29:d3:8b:32:27:2b:89:cc:36:50:0c:ea:57:54:e4:
f1:04:d9:5b:c1:12:83:bd:f3:87:64:1b:e5:6f:00:51:56:8b:
36:cd:a8:03:d3:85:80:26:6a:a6:8e:4c:76:04:5b:fc:c8:71:
05:8c:39:05:90:1c:ce:ec:73:1f:8e:ba:66:ac:1d:2c:79:c8:
96:3b:e3:b0:30:ea:b6:cd:d4:32:23:c5:2c:7d:f2:90:0c:1a:
6f:7e:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:18:40 2025 by rpki-client