Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: cvVCz5vgUHG+6ojPLSRg6vRjM8ONfnWbeUzoaT/S7tM=
Subject key identifier: 79:41:74:41:36:86:F9:78:E2:3D:A0:32:35:3A:84:F6:63:00:FA:13
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 060F
Signing time: Thu 30 Jan 2025 22:45:05 +0000
Manifest this update: Thu 30 Jan 2025 22:45:05 +0000
Manifest next update: Thu 06 Feb 2025 22:45:05 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: ZBgxzfBL44zqTXRvpddlBn7Bw61D8VDeCBhcdu1KMk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Jan 30 22:45:05 2025 GMT
Not After : Feb 6 22:45:05 2025 GMT
Subject: CN=679c00f1-0589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:c2:85:c4:35:47:e8:e9:bc:e6:9d:cd:fc:
98:27:c2:eb:c2:58:b9:ed:79:92:0f:90:02:2d:53:
ba:a4:a4:6e:ff:fc:5a:ba:cf:6a:4b:2c:16:be:f7:
16:5f:ae:98:f7:84:08:cf:d4:04:8c:94:56:c0:a8:
fe:b5:7a:4f:46:61:02:62:88:87:fc:50:e4:91:3c:
08:16:fb:b9:a8:9d:c2:84:2f:0d:ce:e5:1f:f2:65:
31:f5:85:02:e3:19:0a:69:9c:96:ca:31:52:d4:1b:
e4:0c:5a:7c:eb:b1:5a:6d:a9:63:d8:05:14:a5:98:
0c:2c:75:a2:85:e9:a3:ce:17:4d:8d:44:40:ed:22:
27:aa:8a:c9:5f:7a:19:76:b6:0a:b8:75:6f:c8:30:
fa:c9:a0:5e:63:c9:43:83:0a:c3:6e:c6:cf:85:e0:
1b:d4:0a:e6:c0:6f:4a:fd:14:55:24:48:39:b1:f8:
e6:9d:56:b7:34:17:df:a1:72:7a:4d:ee:1e:3c:b4:
5d:a4:3f:da:e5:c0:85:24:95:6a:85:75:10:31:e8:
05:41:5d:d5:b5:ce:29:41:66:78:6f:4b:26:29:50:
1d:52:81:e2:be:ae:70:88:91:07:99:c0:a9:d7:44:
5c:27:8c:f6:64:61:1d:09:38:c9:04:b5:48:da:33:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:74:41:36:86:F9:78:E2:3D:A0:32:35:3A:84:F6:63:00:FA:13
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4f:cf:12:7f:d7:57:2c:ed:e1:bf:3e:3b:c9:94:99:9f:cd:
5b:76:cb:5a:a6:10:e3:e1:6b:16:9a:85:f1:10:af:8f:c9:2e:
6d:8d:6b:66:81:d0:45:ea:73:36:97:60:3e:62:26:8c:f1:00:
d5:a3:2c:c9:b1:d2:7c:98:9e:6c:61:6e:6b:c5:4a:d0:da:0d:
51:50:f0:2a:5b:5d:7f:a1:ff:a1:7d:f2:84:58:17:21:91:80:
4e:23:8f:f5:3b:62:55:d3:ed:89:15:36:fa:74:6d:81:22:56:
5f:a8:5e:cf:1b:83:eb:63:33:ee:58:7a:31:4f:23:c1:62:31:
c7:57:bc:59:46:e0:8c:8b:ba:60:45:89:5d:e4:45:fc:be:74:
f6:79:7c:f7:26:c2:0c:e4:dd:d7:45:cb:ca:da:2d:83:14:8b:
12:05:7e:64:2e:56:14:04:e7:c8:a1:7a:9f:30:bc:92:da:56:
e0:75:87:f1:4b:5c:3c:9f:a0:5f:42:79:8c:99:f1:84:42:ee:
4f:01:96:1e:43:18:e3:5a:ae:fc:95:d9:4f:9e:6e:12:b2:96:
a4:a0:2a:bd:26:f8:55:1f:87:1b:33:bf:ab:92:58:b9:a2:0f:
a3:3d:0f:a0:f2:f9:ca:c9:71:61:97:07:16:49:96:c8:71:22:
6d:11:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:19 2025 by rpki-client