Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
File: ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json)
Hash identifier: PSIHSr8sBdvNffxnuaOE26ZnTQer8tDkn9Hg4dbfo8o=
Subject key identifier: F4:6B:74:01:64:37:8F:3D:5C:A8:49:C9:D3:7B:B2:87:C5:A9:5C:F8
Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
Certificate issuer: /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Certificate serial: 12F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
Manifest number: 19CD
Signing time: Fri 31 Jan 2025 17:02:29 +0000
Manifest this update: Fri 31 Jan 2025 17:02:28 +0000
Manifest next update: Fri 07 Feb 2025 17:02:28 +0000
Files and hashes: 1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: YIGX1Nx07d4AM8q/R9NGGfbCPYu2IfyZyGxKOrV8/lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4854 (0x12f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Validity
Not Before: Jan 31 17:02:28 2025 GMT
Not After : Feb 7 17:02:28 2025 GMT
Subject: CN=679d0224-83dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:31:31:da:e9:08:e0:d2:3b:bd:93:41:9e:c7:
33:14:1c:dd:39:3f:31:21:e5:a2:6d:3d:69:86:96:
92:34:e4:70:dd:82:41:cc:41:8c:0c:4e:3d:a2:ad:
55:95:75:12:87:b0:24:23:4c:30:d4:97:e6:3b:83:
90:09:0a:42:5d:ba:a8:88:16:ca:83:16:f9:28:6c:
9f:ce:bc:05:cd:77:8c:0b:50:70:d3:b3:84:02:d6:
26:77:cc:f3:a0:98:df:1d:87:03:f9:1f:dd:32:90:
97:db:93:13:8d:5d:42:e6:c0:46:10:78:e0:a4:4b:
5c:07:37:88:1a:26:19:54:dd:af:ff:1d:78:d0:74:
19:0d:2d:f2:ba:de:07:74:36:9e:37:b6:7e:88:57:
09:43:c3:82:cb:7a:46:1a:d7:f2:81:04:b2:07:31:
1e:74:4b:8d:bf:23:1d:96:60:33:a6:9d:a3:bf:de:
64:38:33:62:7a:d8:ff:22:d3:04:59:e5:f4:ba:48:
8a:a5:89:e2:d6:b4:aa:48:dc:24:f4:25:a2:bb:f0:
b4:c4:ec:36:22:40:26:65:78:5c:77:97:e3:d4:64:
87:f3:eb:1b:16:9f:24:93:91:f0:b9:86:21:52:e6:
ec:75:40:f2:5c:d7:00:21:9e:05:49:1f:8e:ba:ba:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:74:01:64:37:8F:3D:5C:A8:49:C9:D3:7B:B2:87:C5:A9:5C:F8
X509v3 Authority Key Identifier:
keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6f:ea:d4:ae:54:9e:55:19:b4:a0:4a:8b:2b:f6:bc:c8:fb:
e4:76:ab:49:19:c6:aa:24:1f:2e:bb:c5:91:0c:f3:58:5f:9a:
aa:a0:7b:2f:0f:8e:65:b7:29:cc:ee:3c:e7:81:ce:2f:59:79:
e3:cf:98:3c:f3:3d:12:54:0f:77:21:f7:9f:fa:25:d2:f6:0b:
ca:8b:53:89:a6:45:83:59:ef:d1:22:78:86:ca:88:81:fb:05:
74:4f:0c:d6:5e:9a:35:c3:df:e8:db:f1:0f:4d:19:ab:6f:4c:
1b:e7:c6:72:4e:01:ee:25:85:72:fa:d7:ec:bb:f5:3f:73:a8:
3e:63:e9:7d:a3:c2:b1:7d:e1:1d:2e:9a:5a:50:66:85:e7:90:
b2:43:a7:d0:ef:0e:b4:06:3b:93:fb:4c:e2:fd:bf:39:47:5c:
38:41:e2:25:28:9b:6f:d5:93:90:3c:49:d3:ae:b6:04:09:c5:
42:4f:89:87:22:d9:81:82:04:48:13:06:38:81:ad:a5:52:74:
b5:89:9d:e4:72:a6:e1:2c:7f:2c:06:4b:22:c5:f7:07:48:52:
0e:eb:16:93:49:dc:82:eb:60:3f:6a:cb:62:a0:0b:3c:58:7e:
5d:76:38:e8:f3:64:38:04:e8:88:b9:89:8c:18:05:40:d9:19:
c4:70:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:04 2025 by rpki-client