Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json)
Hash identifier: +hAk8u76kVJe2GIiVc/4f2ie9S+K+erpK9EyuVhvpJw=
Subject key identifier: 62:E7:1F:27:EB:BC:E5:62:05:B8:EB:BF:6B:FB:67:C6:55:DC:41:7B
Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Certificate serial: 19FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
Manifest number: 19E2
Signing time: Fri 31 Jan 2025 16:23:58 +0000
Manifest this update: Fri 31 Jan 2025 16:23:57 +0000
Manifest next update: Fri 07 Feb 2025 16:23:57 +0000
Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: k/psohIA+DxpbW5Gidplm0avNnA2jftyw1g8Ps9+xfw=)
2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=)
3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6654 (0x19fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Validity
Not Before: Jan 31 16:23:57 2025 GMT
Not After : Feb 7 16:23:57 2025 GMT
Subject: CN=679cf91d-71b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:a8:b3:a5:be:f7:a2:ee:70:8b:5c:12:b5:
78:8e:52:e0:a4:1e:c8:00:75:6e:c4:ef:40:5a:2e:
e8:d1:51:9f:24:56:59:31:7a:a8:d9:a7:c0:03:94:
0e:b2:b1:bf:2d:53:88:8e:f8:20:60:f7:b0:0d:e6:
7d:8f:aa:0c:9d:f5:2b:a7:48:91:e1:03:2f:67:2d:
8a:7f:21:35:60:60:d1:64:84:d1:28:a4:15:5b:7c:
e1:f2:17:03:12:27:b0:55:b4:dd:8c:30:db:cc:1a:
e0:32:c9:ec:a1:5a:ea:f7:84:c4:c2:58:23:22:cb:
54:04:0b:74:3b:e1:69:e3:d0:4b:9b:d7:47:fc:dd:
fc:ac:8d:1a:03:25:83:12:2c:5c:86:ac:d1:ba:22:
44:04:25:7d:a2:e1:dc:fb:05:4b:61:b2:4c:a0:a6:
ad:4e:ef:d4:7b:32:b8:da:04:00:ba:e9:e2:dc:c2:
67:23:45:38:9d:c8:78:13:a7:00:af:b8:64:7a:24:
b7:f7:e5:3c:a9:7c:87:c1:58:7a:01:64:cf:69:48:
be:3b:eb:01:52:7a:21:b2:e6:4b:4d:67:01:a4:c0:
67:2f:fb:74:96:c2:dd:a6:80:82:ae:5f:74:2d:21:
0b:87:10:36:94:5a:74:81:46:4e:9b:84:14:82:0e:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E7:1F:27:EB:BC:E5:62:05:B8:EB:BF:6B:FB:67:C6:55:DC:41:7B
X509v3 Authority Key Identifier:
keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:75:5f:5e:c9:29:9b:2f:f0:ae:40:ff:ac:25:1e:1c:cd:
4d:c4:57:69:2e:94:b1:f9:b6:c2:e9:d7:48:75:40:5f:0e:fa:
e2:06:ee:e5:05:81:1a:13:ab:54:c0:e7:80:49:49:49:f4:23:
10:64:f0:b6:16:0b:39:78:b0:fd:de:23:2d:a7:6c:b2:9b:21:
e6:23:42:59:26:67:ef:95:1d:7d:8a:8e:11:1c:29:4b:4b:ae:
ea:6e:44:6b:81:2c:82:05:c6:fc:09:55:0e:a0:55:64:db:13:
ee:32:b2:1b:b9:48:eb:49:f4:26:17:b8:09:1c:e7:68:eb:36:
3b:d9:b0:8e:a5:43:08:71:08:af:60:1a:ed:02:af:ed:34:38:
d9:1c:53:ee:39:33:62:7a:cd:b3:77:6a:af:e7:6b:88:c2:b6:
96:95:a8:71:ed:b9:88:ea:bd:54:4e:7e:38:5a:0f:47:c2:2e:
8f:47:16:b9:ed:14:5a:41:8b:25:32:cd:8b:f7:ab:b7:a8:70:
5a:7c:90:3e:fe:2b:f4:66:56:7b:68:cc:ee:53:51:5d:34:fa:
ee:32:c0:95:e0:00:bb:ae:77:58:ff:f3:64:3f:a0:c0:28:f6:
3b:e9:ac:5c:fd:36:d8:6f:42:f4:1e:10:1d:20:70:58:30:0d:
58:ef:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:05 2025 by rpki-client