Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier: o9BnBe//8Akz1BftRfiE4JGNzPjNd5Rjsu4O6F44WEc=
Subject key identifier: B5:1A:5D:F0:9C:B8:9F:00:F0:B9:9B:1D:4A:E0:DD:F6:4F:12:FC:28
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial: 1DDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number: 1DCB
Signing time: Fri 31 Jan 2025 16:06:33 +0000
Manifest this update: Fri 31 Jan 2025 16:06:32 +0000
Manifest next update: Fri 07 Feb 2025 16:06:32 +0000
Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: y/LY4SrTE+BZUjAxNduAF0gO81OrYG57TCumO4S/CxE=)
2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=)
3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=)
4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=)
5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=)
6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7644 (0x1ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Validity
Not Before: Jan 31 16:06:32 2025 GMT
Not After : Feb 7 16:06:32 2025 GMT
Subject: CN=679cf509-af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:15:52:82:f1:25:14:39:52:cc:e9:c5:85:
7d:01:b6:a6:7e:91:f8:43:af:7d:c0:83:c1:c8:23:
a3:03:09:b2:de:85:9d:bc:32:da:59:c7:a8:8c:0c:
f4:be:47:2e:eb:42:71:25:c4:45:40:86:53:ef:54:
b7:52:a2:fa:80:c7:8a:20:f4:df:5e:77:37:16:5a:
1a:3d:a3:e6:e6:f1:a2:02:0e:a1:29:73:52:ef:16:
32:ba:6a:41:8a:97:35:bc:e7:9f:21:1a:3e:6e:6f:
ff:cd:45:3a:67:ad:a6:a2:3f:04:5b:97:1c:9b:36:
43:b6:f8:3d:32:48:f4:c2:dd:2c:dd:6b:be:fa:d2:
91:da:59:bf:20:a5:3e:8b:12:d9:69:24:3f:8c:26:
ab:16:5d:c5:95:b8:ab:9c:23:57:f6:74:8b:a1:f5:
7b:c3:44:54:fb:46:dd:60:8a:18:1d:91:d4:b0:bb:
15:6e:83:25:49:eb:1a:a4:b7:05:90:90:cd:5a:ca:
5f:51:13:65:15:91:28:89:cd:b7:0d:cd:88:78:32:
a9:34:eb:ca:75:ed:90:2c:b0:87:9d:70:09:4f:dd:
17:02:a8:8c:8e:70:b3:73:9f:99:74:43:60:a5:72:
55:b0:11:c1:66:3c:bc:d1:f3:4f:1a:52:53:27:60:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:5D:F0:9C:B8:9F:00:F0:B9:9B:1D:4A:E0:DD:F6:4F:12:FC:28
X509v3 Authority Key Identifier:
keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:3c:f4:27:bb:44:44:cd:d4:74:9a:4b:76:9d:28:b0:94:c7:
cb:c4:77:93:c1:5a:1b:35:0b:f2:96:3d:0a:e9:70:5e:67:3e:
bf:a7:46:6a:61:44:89:95:64:74:77:0e:c7:aa:20:8b:bf:a3:
5c:cc:9b:35:79:3b:74:74:96:29:e9:2c:bb:af:71:13:18:4d:
77:9c:f7:3f:7c:43:fe:76:16:f8:e8:6a:4f:48:dc:58:69:5f:
87:5c:16:25:f3:66:99:1d:01:b4:eb:f7:57:87:c1:9e:40:0e:
cd:84:97:d5:b9:3f:03:ac:6f:5e:52:fe:68:0b:6c:b4:eb:05:
ef:19:0f:8c:5a:63:94:53:e4:96:bf:ca:e8:b0:35:ef:9b:24:
15:7f:2d:d3:18:63:a9:e3:6b:ad:e5:60:0b:d2:bf:ef:b2:90:
4d:ab:24:39:c2:ea:5a:7f:5f:cd:f1:15:4f:7b:b3:71:89:0f:
0c:29:c1:d1:ca:19:b7:7c:4d:df:d0:0c:d7:0c:cd:9c:81:89:
f5:a8:99:99:15:75:09:8d:bb:3c:26:b8:7c:60:dd:ed:84:06:
fc:dc:fd:50:8b:3c:40:23:3f:66:49:b1:c1:18:3c:44:61:1c:
5b:77:a9:d0:ea:c1:43:f7:ef:1e:6d:d0:d8:6d:7c:43:83:56:
85:3d:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:47:20 2025 by rpki-client