Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier: 0TpSfOd6CMi6I+C7IYz08m+X8dUYqoTXLOBY03GpMVw=
Subject key identifier: 6A:00:CD:7A:AB:75:67:38:FF:55:61:F8:92:F7:9B:57:EA:9C:9F:AA
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 04B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number: 04A4
Signing time: Fri 31 Jan 2025 00:02:14 +0000
Manifest this update: Fri 31 Jan 2025 00:02:13 +0000
Manifest next update: Fri 07 Feb 2025 00:02:13 +0000
Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: AXFo0QHeA5zmH89C3ehRTQ/jCYPrDo+r1b4+1vLiruQ=)
2: 17E03256B62811EF8D234218C4F9AE02.roa (hash: K58ualcAz/8vUOZws7f1WHAGLYLtETkXGgN3zPvTq4E=)
3: 67624B6088B611EFA5F28A68C4F9AE02.roa (hash: qxNt5X+NJ/lDZV/a3w6QhqphN2TIJWTmHt+XWPeL2Fw=)
4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Jan 31 00:02:13 2025 GMT
Not After : Feb 7 00:02:13 2025 GMT
Subject: CN=679c1305-a6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:0b:e8:b9:d3:f4:c0:b4:08:80:3d:e8:7e:
f9:56:09:1d:df:9f:2c:9d:e0:ca:5c:b7:0a:57:49:
f8:cf:9d:bf:a0:cb:f5:87:a2:3b:e6:21:63:10:da:
60:64:b4:f7:4b:c3:76:78:ea:e1:31:f9:57:bf:ac:
09:08:66:21:75:06:58:b6:81:94:d0:ec:2b:fa:77:
58:14:d0:e6:f1:f8:b9:43:22:f5:bf:ff:34:f0:35:
71:a3:ae:e2:43:7c:20:7b:20:10:89:b7:8b:45:e1:
d8:b8:70:0f:e9:28:90:38:cb:99:da:4f:da:c0:d1:
66:e6:78:b5:64:b1:0e:21:b1:a2:a0:18:26:7f:09:
16:1c:1c:71:88:a8:fd:57:17:85:aa:ac:e1:49:e1:
07:a0:2a:25:31:e3:61:8f:72:70:f5:90:dc:83:dd:
a5:1c:eb:5a:87:80:3a:2e:1c:f5:83:98:ff:f9:06:
fe:14:a1:ba:ba:63:b4:9d:6f:93:6b:4c:38:10:28:
04:6d:f0:b9:64:5f:1b:54:6f:e9:d1:ce:5a:8c:1a:
92:cf:20:80:53:a0:cc:df:dc:37:a4:a1:c5:ae:f2:
e9:f0:4d:d2:12:eb:9c:ec:75:c5:8f:58:88:b5:5c:
7a:eb:bc:9b:bb:ad:ff:de:47:d3:7c:bf:f5:0e:b4:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:00:CD:7A:AB:75:67:38:FF:55:61:F8:92:F7:9B:57:EA:9C:9F:AA
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a3:3e:3d:75:88:ab:3c:a4:04:d4:1d:ca:63:74:d5:46:e8:
0e:41:24:d6:03:dc:f3:55:5c:ca:ad:9a:76:70:7e:2a:5f:0a:
27:10:a5:ab:8b:36:61:06:2f:93:76:62:45:db:b2:dd:c4:64:
4b:58:d5:9c:f3:6c:e1:c0:2d:72:08:3d:ab:73:9c:e3:27:5b:
69:23:20:1c:b8:5f:4b:68:67:55:2c:53:4e:c8:e8:93:2f:b4:
41:3d:91:bf:92:cf:13:48:a6:b9:5a:b2:34:b1:f3:c7:db:5c:
56:a7:6b:05:56:43:60:92:e5:49:37:1b:23:e9:0b:b7:3a:8f:
d6:8c:3a:91:9c:cd:f9:f8:a3:17:aa:18:ba:5a:b0:51:a6:de:
9c:27:81:ac:dc:a5:f2:94:b1:9b:93:f3:bd:b6:16:54:aa:6a:
78:b8:37:f7:57:d2:62:db:12:b0:70:ea:cd:c6:94:1d:11:73:
fe:67:32:48:d9:b1:36:b2:01:a5:54:a5:ff:82:9b:1d:53:a5:
e2:cb:93:67:8c:6b:fd:8e:d6:06:2f:8f:00:dd:9f:37:23:b6:
79:b9:65:4f:de:08:f3:dd:85:1f:d0:a9:f7:1d:e5:3e:d4:ec:
d3:d8:1d:37:3e:af:14:59:9a:e1:a3:50:e6:6a:ac:15:aa:bc:
49:26:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:24 2025 by rpki-client