Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json)
Hash identifier: HmKW0CQ3smt3Z/NicqEnmxCr2gLa1JBNOXi51klxoco=
Subject key identifier: 8E:9F:8E:0C:EA:20:D6:CA:90:F0:C8:B3:C8:36:7E:28:14:8F:63:3F
Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
Manifest number: 0242
Signing time: Fri 31 Jan 2025 01:56:58 +0000
Manifest this update: Fri 31 Jan 2025 01:56:57 +0000
Manifest next update: Fri 07 Feb 2025 01:56:57 +0000
Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: NvokG46zvsQ2e77tjQsLAlvM7blQz8+mpck9T/eSbN0=)
2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: WqjZAsQr/HLYxK8PcAumByn22k0e0D3wGPxVIBEBQ6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Validity
Not Before: Jan 31 01:56:57 2025 GMT
Not After : Feb 7 01:56:57 2025 GMT
Subject: CN=679c2de9-6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b3:1d:2a:56:2c:85:47:67:4f:a8:7d:f6:40:
ec:5a:ae:46:72:5b:4b:82:ec:29:80:ad:5c:d2:61:
9e:a1:5f:af:8e:24:3a:16:53:0d:cf:94:ce:83:98:
cb:13:c5:9c:e5:5c:99:7b:90:ff:34:ce:f3:0f:10:
b8:29:bd:40:14:ca:3f:1d:38:a4:69:66:f6:ab:a1:
5a:59:2b:ca:b4:f0:67:bf:56:24:8d:5e:3b:96:a6:
cf:2b:44:be:99:6f:c7:aa:da:c3:c7:13:cb:b7:8f:
f3:b5:3f:29:4e:7d:ff:dc:d6:7f:56:53:38:93:29:
10:fb:37:74:85:20:5b:68:3d:52:c3:78:2c:6d:95:
f2:90:d9:83:28:13:17:ce:aa:56:64:1f:54:2d:30:
f8:a7:e1:45:99:cc:1b:03:6b:06:b4:fb:ab:9e:2b:
b9:9e:d6:6e:22:a3:15:90:e0:de:7f:e3:69:c5:b6:
a5:a8:90:34:8a:8c:f6:4f:e5:da:18:a5:f3:bf:39:
2f:af:c1:b3:f6:5c:1a:02:ef:aa:87:45:fe:06:00:
73:a5:40:5c:1c:ab:ba:0b:47:4e:0d:1b:89:31:55:
24:5a:24:16:9c:69:95:94:1a:5b:6f:9b:f1:12:f4:
2c:03:34:9e:1f:bd:72:a5:02:f3:56:4d:a1:f7:c1:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:8E:0C:EA:20:D6:CA:90:F0:C8:B3:C8:36:7E:28:14:8F:63:3F
X509v3 Authority Key Identifier:
keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:16:59:e7:5a:14:51:14:2a:a4:58:0c:44:c1:72:64:3c:
f7:eb:7d:c5:80:c3:66:86:74:25:a9:4a:a8:ed:e2:ab:ab:2b:
86:cc:bc:a8:9d:f3:2c:ae:12:7c:d5:2c:40:15:ba:b1:01:70:
e2:be:5d:56:82:39:03:22:15:e9:e2:71:51:03:3e:83:f1:41:
ce:33:e9:77:bf:72:35:05:96:6f:84:75:bf:cc:84:7f:19:d9:
eb:a3:7e:0c:92:90:b5:18:8d:d1:c4:4d:5b:a9:61:16:17:a4:
d1:63:5c:02:fd:b1:24:df:40:8c:9f:49:cd:a3:aa:37:5b:ed:
be:98:0e:77:7f:51:37:85:a3:e3:3a:84:a4:9e:0c:5a:d5:2e:
05:fa:bf:8b:34:33:f1:88:f8:69:9d:5c:b8:71:51:44:cf:d4:
0b:ca:1f:b9:d9:56:0c:f5:fc:58:8f:1d:d6:8a:b6:62:da:7a:
05:8f:48:d5:4f:cf:3e:63:eb:3b:9b:d9:ee:27:06:60:e4:37:
4b:3c:de:a5:4d:e2:0f:7e:d1:62:3a:09:4a:ed:e1:ff:f0:62:
9d:89:0d:56:71:3f:8c:03:11:b3:9e:b4:2a:4b:a1:f5:d5:ab:
f1:57:d4:da:a9:72:51:fa:50:b4:e3:85:16:ff:92:fe:16:79:
10:e6:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:12 2025 by rpki-client