Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: gGOTRNb99gQrMvHPLpODG/Dxxw/iO/xY8VOdeFjsb4c=
Subject key identifier: 1C:23:CF:2E:76:A9:63:D5:2C:E8:F9:13:E7:AB:A5:2B:97:D8:18:46
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 03F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 00:40:27 +0000
Manifest this update: Fri 31 Jan 2025 00:40:26 +0000
Manifest next update: Fri 07 Feb 2025 00:40:26 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: epyH5Q6aApyuikrUrfGOFrSe0x4DsPUnsNDzfd3asWY=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: OlAhyVv8prXEPY1gdjm2jtj+wnuOnQoHNIDrDUpBehg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Jan 31 00:40:26 2025 GMT
Not After : Feb 7 00:40:26 2025 GMT
Subject: CN=679c1bfa-26d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:8d:09:d8:0c:76:3d:46:fd:4d:8c:6b:2f:
a6:b7:35:40:c9:53:2e:1f:c5:1d:cd:87:77:16:90:
1e:2c:c8:25:9a:a2:9e:9c:f5:46:2a:6c:16:c6:35:
d6:24:a7:14:53:f1:d6:0b:44:9d:1b:67:f9:2c:72:
49:16:af:45:0e:bc:c3:bb:49:e7:50:35:3c:4e:15:
f6:a1:c4:9f:7c:f4:9b:60:08:d6:cc:1e:38:7f:ec:
aa:f5:fb:36:92:ce:17:c4:76:63:87:4b:ab:0d:14:
c7:04:68:b3:90:e8:c9:cb:d6:69:2e:98:06:1e:91:
b2:b9:e8:67:79:f6:11:97:15:9d:21:da:f8:7f:89:
e1:dc:fe:ef:1c:f5:be:f4:cb:b5:14:65:2c:48:1c:
6d:b2:6a:67:b1:8e:3d:60:cb:a2:0c:0d:41:2a:05:
3a:f1:fe:b5:1d:0d:bb:97:65:6f:ad:50:97:08:60:
11:ce:35:1b:ca:b3:02:e0:99:8b:10:c2:0f:ab:a7:
4b:79:af:a5:96:12:32:06:82:fa:b3:98:8f:64:81:
f9:59:d8:36:ce:25:df:68:a5:02:8c:77:46:be:cb:
9b:eb:d2:31:87:28:b8:ec:60:c4:d3:d7:a4:3d:07:
ab:13:32:2e:76:eb:01:e1:99:33:9f:f0:bc:37:34:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:CF:2E:76:A9:63:D5:2C:E8:F9:13:E7:AB:A5:2B:97:D8:18:46
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:5f:16:9f:ff:50:dc:44:de:40:98:80:d0:4f:ad:ab:7e:
35:f4:68:f2:3f:9b:33:cf:b8:71:6b:11:59:d4:55:5e:b4:6f:
c2:a4:00:76:93:9a:3c:a5:73:72:4c:92:df:da:24:6e:07:40:
6d:fd:a9:ce:7d:d4:09:eb:57:90:85:aa:f1:7c:97:8f:49:56:
41:52:2e:5d:49:68:f0:2b:e0:b1:02:e0:c8:cc:e8:15:80:cc:
87:09:62:0b:07:4f:10:d6:a1:df:a8:be:73:d9:9c:3c:5f:d3:
28:85:d9:f1:73:f5:d3:45:20:07:50:af:37:01:b7:f1:45:fd:
06:61:ad:d5:f1:ad:38:2d:a3:ec:b7:56:32:f2:0d:ff:f3:fe:
45:ac:5f:8b:3a:44:87:42:91:f0:78:3f:e2:9f:b1:84:88:54:
ac:c0:6c:a0:8d:ef:a8:b1:db:32:40:08:6e:57:f2:3f:c6:72:
a5:76:12:f3:5b:c5:3f:3a:3c:64:9c:10:66:bd:9c:c5:40:a7:
96:e0:ac:35:08:9f:6f:80:0b:a7:71:a7:aa:df:b1:b9:b4:92:
5c:80:a5:f6:d4:41:f7:cb:d3:c1:19:67:73:51:87:e1:db:44:
6b:80:cc:f8:b8:51:b3:76:54:23:14:38:19:cb:30:82:50:c8:
63:2c:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:44 2025 by rpki-client