Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: dsxpfzipikvyXtox/KnLxOo9zvMDAFVUJ1ZkOc4FSck=
Subject key identifier: FC:E2:87:A8:86:9B:2E:73:6C:67:88:F3:A4:07:59:5D:F8:D2:5A:B7
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 04:56:47 +0000
Manifest this update: Fri 31 Jan 2025 04:56:46 +0000
Manifest next update: Fri 07 Feb 2025 04:56:46 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: 7NrWGFrKWoBZzPoXFFb4HIh0HzD81aIbckdig+6OUKM=)
2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=)
3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 007pZaHi7dzfk1B80jPKtGC0xcoQZrmeiL6AHZuwDA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Jan 31 04:56:46 2025 GMT
Not After : Feb 7 04:56:46 2025 GMT
Subject: CN=679c580e-c20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:27:38:53:c0:f5:81:a4:2c:36:ae:4e:a9:
2f:38:0c:39:7e:af:7a:fb:5e:86:01:42:62:fd:5e:
33:3a:01:82:67:97:92:98:ab:88:58:81:e3:c2:9a:
78:70:7c:a8:e8:a6:a1:2f:d2:16:91:12:8d:3d:29:
fc:a7:00:b5:8f:6f:66:18:09:98:d3:93:37:d9:f8:
46:e2:bf:2b:e9:dd:18:d4:0d:34:da:c4:0e:04:5c:
9a:d8:86:9c:2d:93:14:2f:79:2f:bb:3e:1d:06:3b:
8d:30:cc:5f:d4:dd:f3:e6:7e:09:b2:93:53:44:62:
75:73:70:02:f1:da:05:d1:f8:e4:a5:65:a0:51:a9:
70:07:ef:fe:5f:24:e3:26:7a:57:1d:8d:86:8d:c8:
28:ab:d5:47:a5:f9:12:92:1f:88:bb:bc:1a:86:e3:
25:aa:f8:2c:fc:70:63:3b:6e:4f:55:87:93:d1:4e:
1d:d6:38:f2:8a:67:7b:ea:5b:9d:02:6c:ab:84:a1:
e2:8e:c1:1a:81:67:05:69:f2:3c:c3:a7:e0:06:32:
08:3a:ec:ef:f8:27:f1:26:d2:14:05:fc:4b:1f:34:
e1:cf:56:f1:e0:ca:2c:9f:87:d5:00:7a:79:01:79:
60:9d:35:43:68:d9:51:29:5c:16:03:6c:70:ff:cd:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:87:A8:86:9B:2E:73:6C:67:88:F3:A4:07:59:5D:F8:D2:5A:B7
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:75:c1:38:ed:3f:ef:2b:1a:fb:26:52:4e:02:df:57:81:
6a:06:c7:7d:2d:11:a7:45:97:49:55:e0:19:a8:a8:92:dd:03:
ed:fa:ca:36:ee:18:96:ec:1b:62:df:44:c7:48:9a:0b:47:ca:
c0:ef:75:f2:54:47:1c:64:99:74:fd:c1:78:6b:b4:50:f5:78:
3c:f9:84:f0:f4:bf:15:cc:32:1f:0c:a3:ee:f5:4e:42:d2:64:
73:cf:f9:c5:67:ed:2a:c8:a9:bf:61:ff:c0:f2:b6:a5:d0:f4:
65:d6:51:5a:5f:be:bb:2a:25:b0:af:93:4f:fb:f5:99:80:df:
a6:2b:2f:0a:82:28:32:c3:ba:40:6b:2d:8b:7b:57:50:19:00:
4e:07:21:c1:27:f7:55:1d:22:47:f7:60:e1:07:e1:72:b2:52:
59:5d:e2:5a:9d:27:fd:16:00:49:d8:18:9f:b2:68:c9:7a:6d:
dc:0e:14:79:94:15:9a:3a:9f:b9:06:fa:77:a3:cf:21:06:99:
71:9b:e6:7c:82:a0:65:3d:1d:52:17:99:c3:f1:5b:2a:b3:ea:
11:e2:53:9c:b0:e8:4d:29:a7:7f:6f:26:63:57:6f:54:b5:55:
21:75:e4:bb:c0:9a:47:8b:52:3d:87:a7:26:d1:fd:60:26:e4:
68:e4:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:47 2025 by rpki-client