Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json)
Hash identifier: tLamRxMJz7M/AOworgu0IYIWsKwp++RLUxTgQMgBoLM=
Subject key identifier: A6:55:DB:FA:D6:42:5E:97:7E:F0:E1:81:C4:0C:47:BC:F3:C8:C7:7F
Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
Manifest number: 44
Signing time: Fri 31 Jan 2025 06:26:25 +0000
Manifest this update: Fri 31 Jan 2025 06:26:25 +0000
Manifest next update: Fri 07 Feb 2025 06:26:25 +0000
Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: W9LZ7+dOEVhoujaC43eQgMMnU3d5lTmxx7LYSmFXEzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Validity
Not Before: Jan 31 06:26:25 2025 GMT
Not After : Feb 7 06:26:25 2025 GMT
Subject: CN=679c6d11-a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:d1:2f:05:68:22:d8:f1:5a:a2:f1:17:e9:
89:1b:49:ae:7f:80:d8:5d:85:d7:31:08:6e:74:52:
9a:71:6b:16:4a:5d:e6:96:dd:36:5f:ad:54:80:a8:
e0:34:f1:48:a7:29:83:a3:56:86:67:39:e5:f8:95:
29:7d:61:f5:ba:38:2c:83:7c:4e:90:f5:bc:73:0c:
8a:80:c7:b9:3f:69:e6:34:16:4f:57:e5:bd:1b:e4:
f5:c6:c0:0d:5f:8c:1f:9d:e4:87:3d:b5:a5:cc:5e:
03:fa:bb:93:78:7d:8e:f8:bb:54:7d:e3:ed:42:40:
ea:57:3e:4c:7d:55:84:ef:d0:c2:bb:6f:3e:e7:47:
50:be:53:32:e9:6b:79:14:a5:0a:dc:05:b3:39:69:
dc:9e:eb:1d:42:08:7b:3a:cc:e0:ac:3d:ba:4a:cb:
22:1a:21:9e:0f:fa:ff:7e:90:75:d6:f7:67:e4:c2:
bf:76:f6:06:43:49:3b:3c:df:63:8b:a9:a3:56:b2:
e9:28:fd:63:6e:e9:ae:87:4b:53:4e:45:62:b3:f2:
09:3d:8c:eb:4c:70:77:0c:ff:4a:10:81:17:27:c2:
60:90:b3:b5:f2:13:20:24:0c:4b:07:7f:47:80:05:
2f:23:0d:2f:ca:e1:61:72:0c:3f:fa:bf:01:f5:b1:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:DB:FA:D6:42:5E:97:7E:F0:E1:81:C4:0C:47:BC:F3:C8:C7:7F
X509v3 Authority Key Identifier:
keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:68:56:4a:70:99:c0:a3:8d:76:75:9e:54:d4:9d:ce:05:
9b:05:b8:c8:c2:05:55:24:41:d6:52:8f:b1:15:eb:6a:03:af:
58:e5:e8:8c:3b:6a:be:90:4b:f9:c3:d5:42:f0:34:70:27:b6:
3d:06:db:cd:0c:3a:e0:d5:d8:ec:4a:ab:98:4c:d9:77:03:a8:
dd:4c:6f:5e:70:52:66:81:07:89:2d:c7:5d:20:4b:a0:97:3f:
d7:fa:07:d3:ef:2c:b3:da:7b:c2:88:51:0b:c1:6b:52:1c:5e:
32:98:09:43:b6:98:ba:be:00:fa:95:50:44:b3:0a:f7:05:9b:
ee:cc:7d:27:cc:ef:5a:ab:41:43:92:3c:06:4b:2b:72:54:d8:
17:02:58:e7:6b:b1:f2:76:37:89:1f:e5:62:08:2a:6b:20:dd:
d5:94:23:b9:fc:6e:64:8f:10:29:b5:54:4f:5d:0d:e8:0d:8f:
fb:84:7c:9e:72:bd:0f:6f:e4:a7:d3:0a:86:ee:cd:7f:ba:6a:
a7:ba:09:30:5d:71:56:8f:36:d8:fa:46:de:de:a7:bb:7a:37:
72:ef:04:c8:40:a0:ba:f1:7b:f7:c5:c5:d6:b0:bb:99:ba:bc:
e8:79:9c:f5:fb:f9:65:b9:58:42:51:22:f9:83:f8:72:21:ff:
d7:51:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:59 2025 by rpki-client