Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json)
Hash identifier: 9UOFHQtNu/UXN0+nGUSdro5d3cnzBqWr5t0TgbeV1eY=
Subject key identifier: AD:4D:87:B2:E9:C4:EC:AB:9B:82:3D:97:E0:BE:96:29:54:DC:80:77
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial: 306E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
Manifest number: 3056
Signing time: Fri 31 Jan 2025 15:28:42 +0000
Manifest this update: Fri 31 Jan 2025 15:28:42 +0000
Manifest next update: Fri 07 Feb 2025 15:28:42 +0000
Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: cCazWPViXvzJj4qr9WhSNddXQ6eR2xFF/ymUfXuPwRM=)
2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: RIHl6Xkp1XZPPxS+HyPNCc+Pc796rHw6pr2rD1+TdCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12398 (0x306e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Validity
Not Before: Jan 31 15:28:42 2025 GMT
Not After : Feb 7 15:28:42 2025 GMT
Subject: CN=679cec2a-b4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:a5:c3:d5:fd:92:58:bd:96:0c:23:dc:05:
77:f5:17:6f:1e:58:70:8b:db:34:4c:8b:65:3a:5f:
39:10:5b:29:d7:99:bb:29:29:bb:69:dc:a4:89:97:
26:4d:aa:cc:86:86:c1:94:a4:1b:95:7b:44:04:b6:
4a:7c:78:d8:25:d7:98:22:fa:53:f7:39:4f:47:3c:
40:fa:b4:e2:74:13:df:ac:20:47:e1:a6:1c:3f:41:
01:1c:84:fb:20:ea:dd:9f:8e:b3:4d:16:fa:ae:54:
bc:da:db:45:c6:57:1c:53:77:74:d9:cb:87:ec:94:
30:a7:77:bc:b9:a7:fb:30:e9:2c:a7:b5:c9:c6:69:
cc:2f:61:e7:e6:4b:c3:26:0a:04:d1:f7:fe:09:78:
a5:ed:f6:c9:fd:d3:ce:89:7b:1a:70:06:0f:4d:f5:
3e:e3:42:ed:67:b3:d7:5f:31:99:a4:31:cb:b5:cd:
54:0c:52:b2:d2:dd:8d:e8:bf:f4:d5:54:95:53:b3:
bf:53:71:2d:72:2c:b4:3a:05:1b:bf:c3:8c:a9:ae:
48:8c:e1:fe:7e:cf:51:1c:c5:f4:9b:fc:14:68:35:
35:c7:d3:3e:11:5a:bd:2b:59:42:73:3a:84:0c:11:
2c:b5:e2:d4:18:32:53:7a:32:5d:0c:f7:1f:38:03:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:87:B2:E9:C4:EC:AB:9B:82:3D:97:E0:BE:96:29:54:DC:80:77
X509v3 Authority Key Identifier:
keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a1:72:aa:8d:d4:52:33:11:13:8d:a3:4f:f0:d7:b8:18:f4:
82:50:b2:ce:c7:8c:91:e1:a9:e8:12:ee:f4:94:51:72:ac:dd:
80:0e:f1:96:24:17:ad:1d:e2:a5:b6:1d:0a:26:14:f1:e0:68:
9a:e4:d0:35:b0:e3:8c:18:3c:6d:0c:28:c0:94:d9:1a:74:f5:
ab:dc:2a:99:3e:41:2a:48:eb:15:b0:2f:a0:ad:16:8d:86:ba:
c9:62:68:c1:ab:e9:23:99:0c:a5:82:fa:de:cb:b6:a5:86:51:
48:b7:46:d9:57:71:ac:ae:2c:87:e6:47:f0:57:f3:8f:cc:24:
f1:a3:d8:f0:bc:e6:68:3d:a8:5b:5d:fd:ad:ea:0a:16:2f:77:
0d:42:02:45:5d:f1:40:fa:2f:e3:35:2a:6c:b5:c8:27:29:a9:
65:36:d4:c5:a0:18:a5:ba:b5:45:f9:0a:e6:8b:cb:80:60:c5:
bd:30:26:9b:20:2b:70:27:0e:8a:38:b8:5d:70:96:1a:3e:3f:
df:4e:71:bc:81:60:a0:e4:ac:53:5a:77:c5:70:df:1a:35:9b:
82:09:4d:b3:ff:40:5c:0e:91:6a:ce:13:9a:c9:bb:f6:11:50:
eb:17:a5:c9:5e:7c:0c:cd:2e:b8:f2:2a:97:cf:18:f6:50:5f:
33:f1:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:43 2025 by rpki-client