Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier: 1EQgruwjzbVKksBM1M3BdbDEwLmRCA82ZT7Auln8SF0=
Subject key identifier: 87:08:FA:03:7B:23:54:9E:23:0E:D0:2A:3D:6F:93:40:A2:41:F5:B6
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial: 032E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number: 032A
Signing time: Fri 31 Jan 2025 01:11:30 +0000
Manifest this update: Fri 31 Jan 2025 01:11:29 +0000
Manifest next update: Fri 07 Feb 2025 01:11:29 +0000
Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: v3xwwmfqJFJ6xcvWtyn6NVTgFeDCQepNyhhTy5PDrXw=)
2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 95fJ03bboSIkCN0DBXqmsgAZgIidDy4lfSJOy1nx1H8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Validity
Not Before: Jan 31 01:11:29 2025 GMT
Not After : Feb 7 01:11:29 2025 GMT
Subject: CN=679c2341-60e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:19:b8:5a:05:9e:8c:1f:e5:5f:7d:b6:ba:
99:b3:05:06:f6:7b:b0:97:42:8e:09:0c:bf:bb:db:
e3:87:3b:0f:6f:77:9f:04:57:72:b8:5b:6b:cd:1e:
50:46:2c:91:70:17:f8:b3:51:70:00:20:a1:8e:3c:
1d:a9:42:62:c4:85:7c:02:22:38:d0:95:87:b9:19:
20:93:cc:a7:69:43:d5:90:dd:89:80:59:df:db:94:
db:15:ba:dd:5b:22:50:ec:59:61:cc:7e:70:ee:92:
c2:ec:cf:36:73:7f:4d:9b:9f:e9:72:86:eb:36:16:
1c:6e:56:a9:e3:33:1a:bf:37:18:a0:15:5e:f2:49:
2b:70:95:e5:3c:ee:49:c6:57:6b:dd:d1:74:8a:4c:
c4:8f:2c:2a:c0:45:76:1b:b1:c9:b0:1f:50:8d:0f:
70:b4:93:ff:f3:be:06:19:c6:fd:68:41:db:68:ca:
c2:e7:29:ce:e9:c9:bc:98:05:83:00:c5:b9:76:15:
e1:e4:67:52:71:68:d9:ec:5d:b1:cc:f7:67:f9:c9:
c6:a0:93:dd:c8:48:a5:56:11:61:22:cf:76:41:6f:
6d:77:56:77:2e:74:0c:d4:6e:30:d4:2b:13:dc:10:
85:e2:0e:01:bd:11:16:c6:64:cf:2c:56:ce:5a:9b:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:FA:03:7B:23:54:9E:23:0E:D0:2A:3D:6F:93:40:A2:41:F5:B6
X509v3 Authority Key Identifier:
keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a8:3d:f0:ed:9c:61:4b:ef:74:e4:69:16:08:d0:4f:3b:62:
dc:91:bf:68:99:b3:3e:7e:c0:28:5f:e7:98:4e:92:d4:7d:04:
2f:76:5e:fb:ae:12:ea:08:6e:15:25:cf:db:bb:fe:02:9a:bd:
2d:4d:a1:e2:b8:73:88:9d:c0:4d:87:8a:51:22:d6:01:f6:0b:
bf:d1:aa:e2:72:b4:99:01:0b:19:2d:f3:de:1e:a7:9b:32:48:
81:2b:5a:1b:26:16:cf:2c:27:7c:1b:30:14:90:26:ac:0e:92:
1f:16:28:ee:d2:05:01:15:b8:04:7a:da:7d:4a:be:19:cd:73:
ad:cf:8b:3e:64:c3:b4:68:17:9d:30:2b:8c:19:1f:ed:cc:a9:
f3:3a:bd:ca:81:71:f1:0e:e1:c9:66:37:4a:fb:5b:d2:06:66:
09:d3:1a:e9:02:ab:e4:96:a9:83:c0:20:e7:a8:11:5a:e1:d9:
94:7c:80:32:41:7d:ba:fb:fc:7b:e8:ee:80:30:f1:2e:d5:ac:
db:b6:22:28:95:c1:c1:2f:74:65:25:ee:96:9d:43:cb:62:66:
06:91:22:c5:ba:12:57:7d:54:93:59:75:9a:a1:b0:80:94:77:
52:83:8a:d9:53:7b:ef:77:34:3a:95:95:13:64:ff:fb:e0:c4:
97:52:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:23 2025 by rpki-client