Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json)
Hash identifier: eUQNU8riiyqWMHampPvJtbtpPu0gcNTuNRRKtY/jHx0=
Subject key identifier: 79:F9:D1:03:5C:EF:E1:90:A1:DD:D0:2E:E8:76:64:7B:0D:37:16:27
Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64
Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 06:39:44 +0000
Manifest this update: Fri 31 Jan 2025 06:39:44 +0000
Manifest next update: Fri 07 Feb 2025 06:39:44 +0000
Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: NaHNnTgdC49Rb+PVYfHjM9/MInT4JfbkLuKVBWk8CDQ=)
2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: MwIpMdrSL2OUPZhkEFCHw46/9hdWF6RJ27rUbg8XQI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64
Validity
Not Before: Jan 31 06:39:44 2025 GMT
Not After : Feb 7 06:39:44 2025 GMT
Subject: CN=679c7030-4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:e1:41:f1:7e:dc:17:92:47:ec:ad:2d:af:
bb:c1:ea:80:43:b2:bd:cf:6c:11:31:cb:b3:90:13:
b1:15:e9:95:77:82:13:66:e0:c0:50:0d:77:a5:60:
6f:5b:f9:21:e8:15:c5:f2:b0:bd:1f:60:d4:d0:78:
21:24:52:27:d9:3b:16:d2:70:a4:8a:91:1a:38:a2:
c7:71:45:c6:fe:ec:84:b4:1d:88:ac:00:e6:07:28:
1d:89:ce:9e:96:29:13:68:28:bd:5a:a3:d8:22:a6:
23:c9:6a:5e:a5:fc:70:c7:21:b5:e5:63:b6:b4:33:
0b:01:a1:1d:e4:56:31:6f:57:db:af:f9:7e:e7:97:
6f:78:d3:db:1c:d8:f6:e6:1c:8a:23:91:ee:b3:bb:
ab:55:d5:b8:c9:b2:31:66:f6:9d:90:30:1f:85:4d:
38:1d:05:10:fd:48:a7:27:8b:32:6d:41:56:eb:be:
87:16:95:72:dd:a6:a0:08:c2:d5:7c:55:56:f2:bb:
b3:a3:b7:79:e2:3e:a1:d5:55:37:b6:8a:1d:4c:f0:
fe:77:e0:c4:c6:65:81:a3:17:5c:9f:ce:8a:6a:ca:
bd:0a:15:ff:b8:d7:af:81:0d:20:1d:02:5f:c2:24:
d7:1f:fc:f7:97:5e:c1:70:f6:c3:e5:37:81:1a:c7:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:D1:03:5C:EF:E1:90:A1:DD:D0:2E:E8:76:64:7B:0D:37:16:27
X509v3 Authority Key Identifier:
keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a7:23:8d:fd:3e:93:74:c7:14:80:d4:29:49:45:33:25:a5:
bb:a3:fc:f8:7c:65:98:77:e3:49:55:19:40:a2:5a:c0:d9:d4:
08:8f:0b:bc:49:94:59:7f:24:d3:69:73:0f:92:7b:d1:5f:9c:
cc:1c:2b:f0:82:58:82:cb:db:97:b7:f8:e3:d6:f8:9e:d3:cd:
8d:fe:8f:de:79:6c:10:eb:ed:7a:c5:23:e5:89:d9:47:1b:eb:
81:d6:07:a2:86:0b:61:94:ca:5a:85:ea:5e:cc:ed:df:a1:35:
35:94:98:62:69:9f:24:39:0f:15:2a:bf:d7:c2:c2:7e:b7:b8:
23:90:14:19:ba:17:ce:3a:9a:3e:96:b7:b3:1b:05:4f:65:1a:
23:ae:83:1b:48:65:3a:cf:9f:e6:99:8e:9c:d7:43:da:5b:71:
98:a8:d6:c6:2c:ce:f6:a1:d1:8d:97:65:45:6b:78:71:68:ad:
6a:38:d0:53:8e:d9:d4:89:d4:e9:00:e0:5c:d7:9d:10:96:27:
73:93:3a:d4:03:44:e3:52:76:90:81:23:a3:9b:cd:a6:0e:ff:
55:8f:d3:36:c3:5a:03:66:83:c9:8b:10:7f:79:37:1d:1a:f7:
a1:90:10:8e:e5:36:dd:ea:7f:54:49:46:49:e9:bc:c3:7c:34:
f8:dc:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:46 2025 by rpki-client