Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier: 6GPnfKQ2NDOud6kDWJA3eUPDOh4LfOnTRMXqBPJkKiU=
Subject key identifier: E7:B6:88:98:2D:7B:5C:72:49:3C:43:AC:2D:E7:91:3B:CB:8E:0A:62
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number: D9
Signing time: Fri 31 Jan 2025 04:44:27 +0000
Manifest this update: Fri 31 Jan 2025 04:44:27 +0000
Manifest next update: Fri 07 Feb 2025 04:44:27 +0000
Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: WdvMZ4If8lTxwv46wAi/RMdTwWwePbIFqChCVoguBJ4=)
2: 1CFF4196D25D11EE8265DF1BC4F9AE02.roa (hash: seNd3OAiAeZ9JBytXRStouGgZPJUQ4ee1z7JMMEeEDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: Jan 31 04:44:27 2025 GMT
Not After : Feb 7 04:44:27 2025 GMT
Subject: CN=679c552b-7c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:8e:3c:0d:77:c9:1f:60:cf:90:02:15:5a:
ee:f7:cf:50:a3:c0:8f:f9:87:15:da:cb:b5:d3:00:
75:e0:a6:5d:45:91:3f:9d:88:eb:4b:4f:13:af:46:
4a:64:7d:6c:6e:f8:95:9e:0d:50:e0:49:04:0d:e3:
20:c3:f1:cc:6d:86:c2:ec:62:0a:25:c6:db:29:7f:
69:63:45:8e:7f:14:87:f1:5b:97:54:6a:62:8b:7c:
12:c4:0d:4d:2c:54:0a:3d:79:1b:2e:96:55:8f:17:
67:61:ae:83:b6:c9:ee:38:91:fd:76:21:1a:20:e3:
8e:30:3e:d6:b8:22:5b:22:50:f1:d5:27:5f:9d:53:
29:26:86:54:e5:3c:6f:f5:ab:ac:91:15:c3:b9:d9:
39:f9:46:ce:fc:72:f0:4d:23:53:27:9c:27:02:ca:
e2:94:25:70:5f:12:bf:3e:bf:6a:7d:ed:a9:76:73:
73:f0:71:63:a4:48:8e:bb:d6:12:f3:90:1c:e5:a9:
bf:5a:d6:83:d0:a9:96:92:17:00:1f:1a:5a:47:ea:
4c:96:de:46:b5:9c:2d:63:4d:e8:44:77:23:8a:2e:
63:b0:8a:b4:39:54:87:4f:ac:24:59:0c:aa:8d:25:
ac:c5:e3:66:44:a8:83:61:4c:96:76:4d:fa:ff:69:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B6:88:98:2D:7B:5C:72:49:3C:43:AC:2D:E7:91:3B:CB:8E:0A:62
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:7a:af:24:f0:05:4b:95:ad:a6:75:e9:d9:70:92:87:1f:4f:
f3:6b:a9:1f:fc:a4:8a:3c:4b:38:4c:dd:14:21:46:89:83:56:
a9:cb:3f:bd:27:97:09:e3:d8:88:89:c6:67:95:0a:a0:43:c8:
e8:f3:00:55:66:d1:d7:64:4e:c3:8f:8c:b0:8b:76:5b:29:79:
e8:24:12:08:a6:f9:0d:ac:72:bb:fe:8d:9e:9e:1e:54:b4:29:
99:7e:b1:38:24:91:06:f6:5a:a8:f3:c1:79:5c:b8:d1:1e:d7:
ca:4e:7c:b7:5d:42:79:80:07:c5:e6:15:46:f3:54:d9:1b:9d:
4c:f6:e0:90:e2:bb:13:b9:89:dc:1a:6c:31:8b:92:9a:e8:2d:
a4:53:5e:fb:fa:16:4c:f7:e5:fc:22:eb:fb:90:50:d0:5f:58:
19:c6:ab:13:56:57:a3:b3:7b:f9:3e:72:8b:99:b2:d7:af:81:
9b:41:6a:9b:6f:ed:37:e8:ef:2e:41:b4:d7:63:27:37:97:b6:
59:33:48:2e:f6:98:91:4b:31:69:b3:05:32:0f:0f:1a:fb:57:
b4:d1:be:44:a2:77:00:15:7c:ce:47:ea:ba:14:08:44:19:1a:
af:2a:27:db:f2:da:d8:8b:01:41:ec:f4:1c:74:ef:a9:d2:8f:
b3:73:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:51 2025 by rpki-client