Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier: xhQhcVasuTuxNOo05YfzvOTzJ3fQW0Gu1sXhy3Upgcg=
Subject key identifier: CC:D5:3F:BD:9F:91:44:2A:C0:05:59:80:0A:17:2D:90:E9:0F:5F:5B
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial: 0E00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number: 28FA
Signing time: Fri 31 Jan 2025 16:59:47 +0000
Manifest this update: Fri 31 Jan 2025 16:59:46 +0000
Manifest next update: Fri 07 Feb 2025 16:59:46 +0000
Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: cRb5rG4jY+YwmI/O/4Gj/V0bZyxf4Cux4N+tmEINeU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Validity
Not Before: Jan 31 16:59:46 2025 GMT
Not After : Feb 7 16:59:46 2025 GMT
Subject: CN=679d0183-3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:9b:e5:97:9e:86:d0:49:5c:e3:48:5f:90:
80:c3:4e:fe:e9:a2:0f:07:b7:39:94:e4:69:12:5c:
c1:28:d6:3c:3d:52:1b:f3:6c:d3:1e:60:b3:f6:c8:
dc:4e:37:5e:d2:22:34:14:15:15:9e:44:2d:00:d6:
13:93:59:13:b6:5f:4e:a7:c7:c5:fc:4a:7f:01:1e:
88:07:a9:e5:a5:4f:28:69:88:52:87:04:ed:2c:1d:
63:a9:16:e4:7d:8c:b0:7d:23:f5:8d:0f:96:2c:dc:
a6:7a:dc:6b:12:20:f1:51:79:eb:82:d0:b2:9b:0f:
73:24:34:93:7c:8b:4d:29:bc:5b:ba:49:b4:65:0b:
8a:3c:64:45:a6:b4:2f:3d:3c:c4:a4:1d:c0:e6:f6:
77:bb:3c:2e:d6:87:98:2a:52:c2:59:64:eb:ed:f7:
60:64:09:3c:0f:70:9a:70:0c:fe:72:bc:8d:7b:bb:
53:6c:ee:13:3b:3c:67:fe:f9:7a:9d:d8:5f:b0:5c:
fb:ee:6b:e7:52:84:23:db:4a:d2:83:b8:b0:30:c2:
9e:07:77:77:73:c8:46:92:d8:d6:3f:9e:c5:48:94:
b8:c8:96:c7:44:c2:b0:b7:5f:ff:ca:9c:ec:0f:8a:
64:56:db:a6:d3:01:c5:8b:74:ce:79:94:57:4f:4b:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:3F:BD:9F:91:44:2A:C0:05:59:80:0A:17:2D:90:E9:0F:5F:5B
X509v3 Authority Key Identifier:
keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:8f:ca:d6:af:f6:8e:cd:e5:67:93:ec:67:17:fa:1c:40:bc:
56:04:0b:49:fc:b3:60:1f:0f:a4:b4:4a:7f:55:59:7f:70:c6:
fe:b0:50:9a:e9:b0:ba:fe:da:d7:3d:6d:8a:23:47:26:c6:b9:
67:67:d5:58:69:e0:5f:db:51:48:fa:ff:b3:80:6d:d7:07:ae:
d7:80:08:0e:55:90:3c:16:c0:5e:fb:ac:0f:f2:fe:0b:73:a9:
e0:f0:56:d0:4a:bc:74:03:4c:10:2b:e7:19:e9:80:0a:30:64:
c9:f5:7a:7a:61:bd:97:ac:82:5e:be:8d:53:5e:89:0d:49:33:
cb:8c:89:09:24:ea:cf:4e:6f:97:e0:23:cf:91:7f:6c:09:b6:
af:25:1e:53:c9:43:5d:7d:20:8b:7c:b5:ba:3e:1b:e7:0d:9d:
d3:d2:5e:b2:95:07:62:74:9a:44:e8:61:26:ae:7d:5a:fc:93:
3d:2f:22:4d:35:3d:61:8b:b3:47:1c:2b:f0:94:a4:19:93:3e:
16:2b:5d:c0:3e:d6:a1:5e:59:20:73:77:ed:06:97:2a:d0:4d:
a2:2f:12:04:14:8f:b9:a2:96:30:75:43:bd:3d:68:af:5b:22:
fd:7a:4c:cc:d4:a8:20:66:d9:cb:5f:8b:66:2a:cc:71:0c:12:
f8:fa:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:48 2025 by rpki-client