Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier: yVofHHV8h5mF6ES3ej8GJSFjF41t9pYJM9EtaJUdoU8=
Subject key identifier: 51:C6:C3:B7:00:65:18:BC:AD:7C:2F:9E:DE:AE:CB:8C:95:A5:A8:AA
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number: 56
Signing time: Thu 30 Jan 2025 22:18:58 +0000
Manifest this update: Thu 30 Jan 2025 22:18:57 +0000
Manifest next update: Thu 06 Feb 2025 22:18:57 +0000
Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: AhTvq8xSk7MrjERd+834k7NQ4RcfcFfE8ilrII3RXcM=)
2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: g+wT6Ez1r4BofdZFTdTULjIDgwJ9CgK12xlHp/5Bj2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Validity
Not Before: Jan 30 22:18:57 2025 GMT
Not After : Feb 6 22:18:57 2025 GMT
Subject: CN=679bfad1-396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:a2:e2:a7:56:71:44:f5:0e:8b:40:46:69:
7c:61:e5:77:75:1e:40:39:86:74:7e:ac:b4:f7:5a:
f8:69:16:88:ec:63:9e:18:7b:26:d6:80:73:bc:7a:
a1:86:1d:5f:69:0a:8b:be:ce:7a:37:1b:d3:7a:8b:
2c:bd:e0:d6:1f:ef:a2:f6:b4:db:43:06:a8:d3:a3:
8f:09:f8:6c:d5:6d:5f:b0:be:e4:d8:fb:a3:3d:61:
73:6b:7d:0a:25:42:af:ae:c3:da:42:02:6d:67:48:
0c:47:66:10:7b:a7:03:39:e1:fc:2c:e4:19:df:de:
bc:8b:5c:6a:c1:3d:6b:46:31:67:66:5d:10:cf:cc:
89:43:37:98:26:85:1a:15:eb:8c:cb:ac:5d:3e:a3:
b1:e2:b1:93:b2:5f:ad:ca:ab:29:e9:51:4f:8a:1d:
1d:04:be:17:ec:37:f6:b2:0a:0c:1a:3b:c4:98:40:
b4:74:53:e7:cb:d7:dc:58:77:b9:39:38:45:41:67:
cf:15:13:87:00:54:0c:f5:95:65:e1:7a:8b:76:5d:
62:fe:f9:a3:a0:c5:14:ee:28:c0:96:20:0b:01:f3:
8e:76:0e:5f:ec:6e:39:89:eb:53:c7:b6:0b:2c:95:
c2:6f:20:ce:f4:42:a4:3c:d4:94:4c:a7:e0:f3:85:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:C3:B7:00:65:18:BC:AD:7C:2F:9E:DE:AE:CB:8C:95:A5:A8:AA
X509v3 Authority Key Identifier:
keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f2:4d:91:0f:a4:e0:b2:a1:5e:a1:aa:e6:7c:f4:84:c4:0f:
fb:91:67:5e:d2:96:aa:df:41:0c:fe:62:83:ca:33:49:15:aa:
c4:49:df:f2:78:be:c5:63:af:6f:84:94:94:b9:b7:63:e5:2a:
94:9a:59:11:9d:02:81:c5:3a:3d:f4:b1:d0:2e:ae:77:2b:af:
3a:04:2f:39:15:3f:5d:86:9d:0e:e9:73:0f:30:5a:73:09:a8:
fb:5f:f7:66:0d:c7:5f:20:65:ba:85:23:18:8f:d0:89:34:a2:
9e:91:6b:50:1d:ba:64:d4:ef:9d:ec:97:af:3d:27:1f:d9:50:
39:62:d6:06:1d:fd:dd:c4:d3:a7:19:75:c1:70:ee:e4:24:20:
ec:15:9c:f7:c8:75:50:1c:ce:c0:67:00:f4:a1:2e:f8:1b:89:
7d:f9:7a:38:62:85:b4:b9:32:25:39:17:fc:85:9e:6e:5e:bf:
89:0e:73:ab:31:1f:12:d0:4e:f1:60:f5:c9:e9:ff:4a:23:4d:
22:6c:e2:a5:16:bb:b9:3d:8f:05:d1:47:d8:60:b1:30:83:6d:
d1:12:11:2b:da:7a:47:72:6b:a8:cb:f4:0a:b7:6b:aa:4c:dc:
da:83:49:61:da:69:c1:21:3c:3d:eb:44:0c:01:76:87:e1:41:
d3:3e:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:27 2025 by rpki-client