Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json)
Hash identifier: petKgpY2m/FRbqM+AGpIX5TOYS4+DmtX672RW8+tvE8=
Subject key identifier: 1A:94:3A:61:B1:F3:36:B4:2F:CD:AE:79:C9:77:A3:EB:87:C9:17:1D
Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Certificate serial: 0C02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
Manifest number: 0BFC
Signing time: Fri 31 Jan 2025 18:31:25 +0000
Manifest this update: Fri 31 Jan 2025 18:31:25 +0000
Manifest next update: Fri 07 Feb 2025 18:31:25 +0000
Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 29HeD2YdR9KWsHznJkSC5pOLs54PTjP7Dzt4aTTn5TY=)
2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Validity
Not Before: Jan 31 18:31:25 2025 GMT
Not After : Feb 7 18:31:25 2025 GMT
Subject: CN=679d16fd-b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:c8:b8:b0:0c:ff:05:e3:89:9a:bc:89:e9:
97:71:a0:1b:38:97:27:73:a7:53:b6:fb:e9:08:fc:
13:0a:be:04:42:88:cf:4b:c1:b1:0e:2b:ee:11:05:
a4:37:5e:c0:af:a4:0d:78:da:7b:34:9e:0b:e0:ae:
9a:5b:c2:ea:c2:f7:d6:c8:47:5f:f6:8b:f6:b4:88:
bb:fe:97:40:fa:1d:73:d8:4c:56:f2:25:ce:ba:67:
05:7e:20:da:69:af:1c:4f:61:f9:83:80:ac:79:e1:
a9:c7:9f:66:84:8d:d2:36:88:0c:5d:57:ef:a0:de:
71:de:8b:74:a1:1c:e1:c2:e0:4a:ec:1d:6d:12:d7:
14:79:f5:0d:0b:de:56:72:de:bb:63:b4:eb:ec:ff:
7b:1d:80:da:4b:99:40:74:e1:49:e2:63:75:1a:b1:
7e:2a:b0:e7:65:8a:44:3f:e5:41:98:76:ea:0b:c3:
5a:bc:3a:e9:4b:a2:9c:25:2c:69:6e:1f:02:6a:5a:
18:2c:9e:c7:f3:22:a9:5d:6a:70:a7:bb:63:1a:70:
1d:da:2b:35:eb:b0:87:82:fe:f2:7e:e6:f6:20:f9:
3e:c3:f9:ee:8c:9f:36:27:5c:a2:f2:57:3c:2d:12:
cf:5c:59:e0:65:3c:ef:9f:7d:f9:da:f1:f0:7f:c0:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:94:3A:61:B1:F3:36:B4:2F:CD:AE:79:C9:77:A3:EB:87:C9:17:1D
X509v3 Authority Key Identifier:
keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:f6:58:5a:8c:d9:09:92:11:31:c2:1b:7c:79:78:71:a4:
e4:38:05:57:35:59:f4:dc:d0:4d:69:45:ee:d7:0f:b9:02:c8:
1e:c0:44:8b:d7:08:20:eb:41:cf:74:15:dd:f4:ec:0c:1f:b6:
c7:0b:1d:c7:d9:f9:68:58:c0:d7:e3:c7:5d:34:fb:98:12:16:
5f:53:87:76:24:e9:01:ec:c8:e6:f3:1b:14:3e:41:ed:34:c4:
3b:cc:c2:93:d3:91:78:35:80:5c:fe:95:60:f2:aa:63:e4:6e:
4a:28:37:c9:ad:23:7f:fd:f2:57:76:c8:73:30:0d:c8:9e:71:
59:6b:14:d5:b2:d4:94:f8:16:07:81:3a:ad:81:b8:08:09:2b:
61:ed:0f:26:70:d1:8e:bd:1c:0e:72:fc:0f:ff:2f:7a:72:a3:
95:ce:9f:4a:1c:d9:26:93:df:8b:37:c2:98:0b:f5:ab:46:d4:
3d:53:e2:5f:63:bb:a9:4e:fc:0b:24:0d:04:0c:61:34:e5:e1:
5c:04:ec:f0:53:83:be:10:ba:f6:1d:94:95:73:90:b9:f4:94:
35:8f:91:bd:9c:81:5d:e2:bd:bf:b3:87:d3:98:72:4d:03:0c:
bb:18:15:1d:d0:6d:ad:77:e7:77:81:94:af:3a:b2:83:0d:fb:
2c:f8:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:42 2025 by rpki-client