Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File: ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier: t5Ov5As6/7TG0bAMqFc7F7XDWOVtvOiHddJTAL+U73g=
Subject key identifier: E3:7E:7E:57:B3:4C:90:11:B2:F3:DA:91:EB:72:55:2A:54:7A:4B:08
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial: 16CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number: 16C1
Signing time: Fri 31 Jan 2025 16:40:10 +0000
Manifest this update: Fri 31 Jan 2025 16:40:09 +0000
Manifest next update: Fri 07 Feb 2025 16:40:09 +0000
Files and hashes: 1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: lreV0Geq5mL7m3D0dP2nsQqlrSViHAgiMeHxLfrAJ8g=)
2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: RnPGEfV6shc3FzcBRmER7fg9U9kjWKrlb9yCQ0fI2KE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5836 (0x16cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Validity
Not Before: Jan 31 16:40:09 2025 GMT
Not After : Feb 7 16:40:09 2025 GMT
Subject: CN=679cfce9-fc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:2e:67:72:6f:a8:20:fa:1e:36:c3:cc:24:
e7:1e:df:c7:23:51:e2:8b:46:4d:b2:c8:47:f7:4d:
c7:6f:d0:7e:50:3b:b2:be:8b:ff:90:af:10:2e:fb:
87:39:d8:27:51:2a:f4:40:e4:30:db:2e:1e:94:2e:
2a:34:71:a4:ed:4a:a8:a7:09:c5:e4:72:eb:a0:8b:
4a:5d:1c:23:12:e9:2d:64:19:30:6e:f2:dd:27:d0:
b8:aa:ce:e6:41:92:b5:f4:73:a3:29:8b:4d:f9:5b:
73:45:53:74:22:9f:52:ac:1d:83:44:94:df:aa:a3:
03:3b:82:7a:51:36:b0:f8:f4:64:02:2c:83:bd:00:
22:c9:63:93:ca:37:8d:a9:7d:ff:a3:ec:05:a3:70:
48:2a:fe:4a:f2:09:8a:9c:6f:e5:02:15:41:23:84:
34:e4:dd:a2:65:53:5d:17:88:ea:9b:c6:bf:1f:00:
f4:c4:e0:bc:33:8d:cd:f3:96:fb:f2:62:16:ff:fb:
ea:5c:c0:85:33:b4:ba:34:d9:7e:67:cf:d0:67:b9:
74:79:94:1d:66:32:41:8e:bf:ad:2f:1d:08:a2:de:
d6:f0:ab:ce:c5:c9:b0:e2:0e:e9:82:b5:09:c5:d2:
b4:fe:3a:4b:14:e0:24:71:73:22:95:a5:20:03:8f:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7E:7E:57:B3:4C:90:11:B2:F3:DA:91:EB:72:55:2A:54:7A:4B:08
X509v3 Authority Key Identifier:
keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:f1:39:96:97:e5:fa:85:90:cb:5b:d1:81:8a:5e:ba:2e:
96:a8:a0:b6:f6:2b:3b:9b:5f:20:aa:ba:9d:4b:48:fd:df:c4:
fd:80:35:67:62:43:9f:a3:ad:ee:ac:92:a6:1a:b7:4f:cd:3e:
c1:98:90:5f:43:46:36:c0:7d:5d:da:7a:47:2a:b7:ee:fa:77:
44:f1:6d:08:52:0d:c1:37:a7:04:bb:0d:09:c5:68:2e:d2:9e:
59:51:e5:d1:c3:4d:1d:2a:f4:c0:ee:22:ae:25:2c:a4:db:f4:
fd:04:5b:82:bd:7c:9b:38:2e:f4:bf:f6:ff:5b:46:63:d1:3d:
9d:bc:d5:fd:67:66:1c:a9:11:4b:91:de:b9:76:14:2c:13:69:
7e:3c:47:8a:77:2e:e2:6d:0e:a0:7e:46:be:c2:6b:dd:1e:ce:
08:b0:08:f6:0f:09:8e:bf:b8:e5:f2:6b:66:46:80:eb:83:52:
9a:45:e6:41:04:2d:91:e3:35:a2:54:c3:01:04:69:4d:d0:28:
33:80:7f:75:70:77:bc:ab:23:c6:c4:22:39:7e:a9:49:90:c3:
b4:b5:5f:48:42:b4:07:e5:ad:c1:8f:31:70:9e:66:74:75:ce:
e9:ce:6a:b7:8e:10:3d:06:5f:c7:06:4a:04:50:3b:9b:e1:c8:
8c:a6:97:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:07 2025 by rpki-client