Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier: t7wdH06cf73t4Cv7EaojJ+u7/zmXjPkcV1PBHYSeBHk=
Subject key identifier: 00:C2:89:5F:F8:AA:89:D6:8E:22:27:C4:B4:62:5E:E7:96:3A:1D:0D
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial: 0B98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number: 0B8C
Signing time: Thu 30 Jan 2025 19:04:09 +0000
Manifest this update: Thu 30 Jan 2025 19:04:08 +0000
Manifest next update: Thu 06 Feb 2025 19:04:08 +0000
Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: j1DDSjP16z7LFz1gNI8pW3H7VaWehz54QJs0WI4qL8I=)
2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: 5w244W1bD1whgankX2pR9uug+6BH9EUGNcEqCnlbObE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2968 (0xb98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Validity
Not Before: Jan 30 19:04:08 2025 GMT
Not After : Feb 6 19:04:08 2025 GMT
Subject: CN=679bcd28-6b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:a3:3f:59:5e:00:ae:dc:de:11:2b:c7:17:
12:6d:c8:c3:46:a3:d9:79:c5:c2:dd:f4:3d:67:14:
66:07:db:2e:9b:a3:69:79:4d:f8:12:df:ce:b1:f1:
25:91:8b:a7:2b:c3:0f:3c:bb:af:d9:47:6d:f4:d5:
1d:bc:a1:90:5c:e7:df:7c:50:72:07:06:0b:5d:41:
fb:84:a2:cc:b0:ae:94:19:85:1e:ca:9a:cb:45:42:
94:18:a1:6a:f5:59:d9:c5:7c:95:b1:f4:0e:6e:2f:
e2:a0:30:ff:9c:a3:2a:e3:4c:01:6b:e1:80:e2:7c:
cd:eb:75:5d:71:26:80:c9:5f:40:e6:3f:43:73:e3:
ae:e4:bf:7a:4c:aa:9a:b2:39:ce:81:84:4c:de:b9:
0b:95:0b:10:9a:17:59:71:ee:09:3c:df:cc:85:c3:
1a:81:43:d9:44:78:31:a7:a2:5f:2c:da:69:38:7c:
ab:86:90:89:a8:9d:b7:f2:68:0a:85:36:1e:ad:64:
84:ff:10:66:50:0a:38:3a:4c:2a:f1:4e:23:e2:68:
64:2c:c9:c7:e9:d9:11:a6:e6:b9:c8:e4:80:b7:d4:
ba:10:3b:dd:06:0d:5f:88:b6:bb:11:8d:da:c2:56:
7f:94:f9:13:0c:1a:a4:0c:62:2c:27:9e:82:98:73:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:89:5F:F8:AA:89:D6:8E:22:27:C4:B4:62:5E:E7:96:3A:1D:0D
X509v3 Authority Key Identifier:
keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5a:c7:19:f5:15:b1:96:22:95:64:7d:a0:c8:41:fb:77:7c:
d0:4a:66:b4:5c:71:ff:e7:bd:dd:fc:1f:4b:ea:f7:bf:b4:e5:
3d:03:54:76:ef:06:ed:61:82:56:b2:71:3b:2f:65:f8:e5:2f:
dd:29:74:02:65:d8:c0:fe:92:69:ca:95:9c:13:54:6a:04:0e:
61:21:51:e1:c5:55:57:7f:43:ce:e8:ff:79:38:98:af:14:08:
b2:c1:fd:70:20:e6:e8:a7:fb:fc:19:6e:e4:b7:ce:77:cc:15:
5b:12:e6:3f:7e:26:d7:3f:dc:5d:02:2c:5d:95:33:e4:0e:74:
df:b5:df:17:4c:00:e6:4f:f9:4d:cd:3d:68:44:58:cd:b7:3e:
72:87:04:44:85:f3:e2:d7:29:ea:e0:51:ad:36:a7:ef:bd:51:
3f:5c:3b:b1:25:15:5f:a7:cd:04:58:ca:07:b1:cd:2e:a2:98:
95:e3:e8:e5:52:9d:56:1a:44:23:6b:2a:89:25:58:66:cb:95:
bc:78:36:81:de:e7:fd:55:08:63:8f:6e:6b:dc:4b:4c:0a:f9:
aa:4a:ee:65:c6:c3:04:25:5e:fb:0e:60:e4:50:b0:da:1f:0f:
1f:fc:d2:ed:71:ef:6c:e6:85:f7:95:29:4a:19:32:7d:c6:97:
e4:66:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:04 2025 by rpki-client