Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier: sSEhEvryouNs+Vvk2dnCgSKeEWvxya1FL8fkfBVLNYU=
Subject key identifier: 99:AF:43:C9:B2:8B:EE:FD:32:CD:0A:80:F9:2D:56:84:E3:AB:8B:6F
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 00:18:19 +0000
Manifest this update: Fri 31 Jan 2025 00:18:18 +0000
Manifest next update: Fri 07 Feb 2025 00:18:18 +0000
Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: ZuM1d7oPJZt943Qr2ijS72Kp9lDTTHZgZ/4zDLliifM=)
2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Validity
Not Before: Jan 31 00:18:18 2025 GMT
Not After : Feb 7 00:18:18 2025 GMT
Subject: CN=679c16ca-a585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:5f:79:cf:d7:e1:bb:bb:3d:bd:34:b3:4e:
4d:6b:3c:4c:dc:10:32:9a:72:b7:d6:14:ae:44:aa:
69:ab:1b:f4:5e:41:63:0a:b7:1e:ff:ac:4d:f6:53:
a8:0f:6d:f4:c4:c7:ec:7d:de:73:58:f7:9c:8b:51:
b6:78:dc:ee:50:80:ec:e4:87:12:a6:cf:fb:50:61:
09:26:0b:2f:92:cd:fc:da:b0:9a:8b:2f:20:63:07:
94:37:1a:8c:aa:67:ec:35:f5:c6:80:81:28:d6:aa:
fa:91:f0:d1:85:11:b8:26:a3:e6:42:73:cf:e4:91:
0a:d4:4f:f3:d5:c9:4f:92:ec:c0:f3:d3:20:10:c1:
f0:5a:67:4e:9b:57:4f:e5:ee:ae:d9:f3:af:a2:da:
3f:7e:80:3e:4e:7f:d7:cd:2e:7c:74:b9:23:ab:50:
8c:a5:bf:62:fd:6e:eb:84:87:a9:c1:61:59:4d:65:
d6:3b:ca:bc:c3:72:7d:1a:ba:28:64:c8:30:2c:8d:
5f:8a:17:97:52:da:1a:31:4e:64:9b:79:ad:2f:f5:
f6:c9:c6:35:58:0a:20:82:a8:02:0b:c1:af:a2:83:
5e:d0:34:41:f7:2c:2d:bf:ec:c8:b5:4d:9b:eb:e3:
3b:bc:7f:91:12:1e:51:fb:f9:e4:8f:9c:51:4d:89:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:43:C9:B2:8B:EE:FD:32:CD:0A:80:F9:2D:56:84:E3:AB:8B:6F
X509v3 Authority Key Identifier:
keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:57:6f:cb:24:a4:a3:e4:d0:60:13:36:62:99:c4:4a:1b:
11:a4:6f:44:38:5e:3e:6a:27:ba:03:a6:db:1e:3b:97:fd:ad:
c3:20:b5:d8:c3:2f:7e:22:53:22:e3:10:f1:77:53:ca:43:c5:
7e:3c:4c:a7:b0:c1:b6:96:98:56:d2:43:24:c9:77:a9:fa:2a:
94:ca:96:b5:0f:27:e9:52:5e:de:39:41:94:3c:ae:8e:c1:80:
06:0a:03:6a:7f:04:e8:88:7b:58:a8:3f:60:f2:34:72:c6:aa:
05:0f:d6:22:e1:b5:2d:87:f8:60:a2:09:4a:3a:40:59:f2:84:
11:46:36:f8:09:1d:96:9a:62:21:e7:27:3e:92:46:d2:a4:f4:
90:7e:15:19:71:9d:07:48:79:49:21:73:76:08:67:cc:fe:d1:
f8:37:27:51:ff:07:c6:57:36:6f:bb:00:ac:56:19:6f:34:ca:
f9:bb:ed:3c:ef:80:28:3b:31:76:23:06:50:8b:90:26:9f:0f:
0b:36:d3:c3:2e:41:ee:50:65:43:02:04:b9:64:84:c2:8d:31:
a2:9c:b3:a9:04:34:6c:3b:1b:7f:ed:31:03:73:1c:6d:1f:b8:
bd:f8:20:0f:bb:e5:26:a8:0b:c7:db:2a:65:4d:dd:38:3e:45:
c0:12:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:46 2025 by rpki-client