Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File: zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier: EEgAiZbeOQQ9gYD8YJ+6PiGm7/F4SobUeQu3Xnc5QJY=
Subject key identifier: 2E:D3:AE:9B:99:10:73:2B:1D:A3:93:F8:A6:1F:4D:FE:28:87:7E:C1
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number: 0181
Signing time: Fri 31 Jan 2025 02:57:31 +0000
Manifest this update: Fri 31 Jan 2025 02:57:31 +0000
Manifest next update: Fri 07 Feb 2025 02:57:31 +0000
Files and hashes: 1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: vDCdE37X0FB7oLKOXBbUbbdPb1xjKKpNbBTklpuMhTM=)
2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: wW1wDfapN4aqyKsyA7zutue+89v5koktR+64VobzRks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Validity
Not Before: Jan 31 02:57:31 2025 GMT
Not After : Feb 7 02:57:31 2025 GMT
Subject: CN=679c3c1b-f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:93:f4:fd:30:4f:ac:3e:dd:bb:23:76:30:
11:7e:79:ef:b0:09:d2:03:7b:97:f8:df:7e:cf:a5:
87:ab:22:72:d3:7a:f0:3c:57:77:f8:44:3a:a7:a1:
dc:f6:af:89:f2:d7:46:f8:05:a2:d1:74:54:e9:fc:
a5:cb:d5:ef:34:85:78:f5:a1:ca:e3:8f:1c:e6:c5:
33:a6:89:84:5b:0b:40:47:46:6e:e5:b8:00:9a:a2:
8b:94:2b:fe:f9:a7:61:66:f3:98:11:6d:57:50:9d:
ea:83:a0:2c:30:bf:06:88:8c:0f:98:43:a7:a1:20:
94:da:2c:80:20:e9:45:bb:f3:76:c6:bc:d8:25:e0:
bd:3a:ba:7f:78:88:b2:98:bc:0e:90:66:e7:59:f3:
23:f0:ae:9d:7e:30:5f:a2:f9:b5:6a:ea:f9:bf:ba:
10:8d:93:89:64:dc:34:a0:93:42:fb:23:47:16:e0:
41:9a:2b:02:9e:be:22:5f:2f:34:2b:ad:fa:d0:d8:
75:ad:3b:f4:b5:1e:6a:40:47:1b:64:b5:ff:c7:d3:
ec:2f:53:92:37:27:00:08:e9:d4:9b:0c:95:d4:c2:
cd:c1:b9:42:3f:e8:3d:7f:c2:49:f0:15:c7:b9:31:
9a:00:b3:ff:02:42:d1:50:da:55:c7:32:3c:f9:9e:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:AE:9B:99:10:73:2B:1D:A3:93:F8:A6:1F:4D:FE:28:87:7E:C1
X509v3 Authority Key Identifier:
keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:d9:92:aa:92:93:5d:53:fe:b0:28:f0:62:49:ee:5e:b9:
98:5e:9b:28:ca:43:11:eb:c5:9b:13:43:51:a5:b2:5d:98:dc:
fb:78:ff:4e:ef:36:52:f0:ed:23:9d:c0:64:19:a1:3b:03:18:
1f:2c:78:93:27:ce:5e:6c:59:8a:4c:98:0c:c8:bf:79:08:2a:
28:43:4a:90:b0:f7:ab:24:57:c6:9e:e7:03:81:73:9c:0c:12:
ef:6f:9f:e9:37:95:4f:85:7f:e2:45:86:60:93:4b:2c:70:ca:
81:d5:dc:23:f7:54:36:fb:b9:85:1c:22:10:e6:57:e7:6a:9a:
f8:5b:8e:d1:e9:d2:3a:38:53:af:72:c0:12:0d:47:7c:a4:c3:
ce:0a:f6:b6:84:53:b9:35:ed:97:57:79:c7:2e:39:48:42:75:
94:ff:69:42:32:b3:ed:ee:a4:97:db:ef:a4:91:c1:72:c4:fb:
cc:ba:05:66:42:ba:41:c5:61:0c:90:d4:56:33:37:4c:ca:bd:
61:52:43:c5:b4:ea:dc:ab:65:e6:98:05:e1:85:0b:8a:2b:09:
a7:26:99:be:b6:64:a0:89:b9:be:d9:86:96:ac:9e:af:70:10:
16:bf:45:b1:9d:6b:a3:e8:61:f0:fb:99:b7:91:d3:2a:22:56:
3b:57:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:05 2025 by rpki-client