Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier: gwQX+2ZbA+MWnzpD18/ld3PWtNZjkLqVI6jr5e9i+I8=
Subject key identifier: B4:0C:A6:3C:EE:3B:B6:79:F1:66:F0:F9:AE:D8:19:E1:CC:13:35:03
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:11:33 +0000
Manifest this update: Fri 31 Jan 2025 06:11:33 +0000
Manifest next update: Fri 07 Feb 2025 06:11:33 +0000
Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: dlDjuB9AEgN5SeZ9LxtJC05rC5r2ReKjxJQ0wbn48NA=)
2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Validity
Not Before: Jan 31 06:11:33 2025 GMT
Not After : Feb 7 06:11:33 2025 GMT
Subject: CN=679c6995-ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:5c:d2:33:ca:5a:b6:61:11:af:a2:1e:1e:
d1:62:2d:da:d8:00:fa:ce:1e:77:a6:d7:82:f6:0f:
92:8b:2d:03:38:e2:ce:2d:8b:12:f9:16:42:69:70:
d2:98:e0:8e:ef:26:cb:06:e0:aa:08:2f:eb:fe:44:
d5:a7:34:d9:13:d0:cb:b5:09:01:aa:9d:6f:16:90:
77:02:48:b2:bd:79:5d:e8:07:8a:34:44:85:c2:8b:
ff:ed:ae:a2:68:f7:c6:d0:66:53:fa:a8:d0:14:f2:
f6:f9:97:87:78:d4:56:b6:e5:ea:27:6b:04:bc:97:
2a:e0:11:77:84:df:af:52:57:ef:51:49:27:ce:19:
4c:ab:92:dd:c2:5a:a5:de:5a:26:e2:a3:f3:0d:ee:
0d:f0:e8:c4:fe:da:e8:84:9b:fa:dc:a0:99:9d:40:
a2:e3:56:e6:10:1a:8d:d7:d6:6f:c6:58:22:26:37:
93:b7:11:bf:13:8c:92:fb:eb:a6:3e:2f:52:2b:5c:
9f:83:07:bd:48:27:88:6c:e9:78:9b:ef:6d:35:00:
ae:92:d3:79:7e:8f:c1:d3:0d:5e:c9:4c:51:63:68:
3d:9c:d7:4a:51:80:ff:ec:cc:81:0f:fa:62:47:b1:
93:fe:21:29:1d:fd:e8:4a:73:cd:ff:20:25:25:e9:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:A6:3C:EE:3B:B6:79:F1:66:F0:F9:AE:D8:19:E1:CC:13:35:03
X509v3 Authority Key Identifier:
keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:af:51:4a:9d:38:10:34:7d:60:40:7b:31:5f:da:17:04:61:
bc:5e:b7:20:85:22:f1:fd:94:bc:04:1e:05:84:8a:ef:50:d1:
2f:1e:e0:1f:de:e5:b6:e9:f4:d6:85:cd:97:b8:77:e8:70:8f:
9f:fb:e7:d4:35:b8:e6:f6:b8:b8:4d:1e:f8:cd:3c:3e:4b:a1:
e9:d0:64:15:06:55:83:bc:1d:56:a5:53:30:4d:5d:b0:73:57:
25:9f:79:3e:6e:41:56:72:5a:3a:f1:2f:c1:7f:22:56:0d:d6:
09:d5:3d:5b:94:df:c4:2c:93:90:04:65:80:05:40:06:88:22:
8d:20:62:da:ac:c9:b8:65:09:7c:42:e0:e8:1a:09:22:de:1b:
18:cf:a9:b1:b1:ef:1f:68:d6:33:da:65:39:3f:c3:4a:58:67:
fd:04:49:85:4b:5d:03:b7:f8:fc:da:2d:59:3e:d3:ac:ce:33:
fe:d0:d8:d9:1e:0d:bb:1e:9f:87:9e:e0:15:92:31:68:3f:ed:
01:f7:57:1c:b6:d1:58:74:57:c4:60:80:d9:94:84:9d:02:80:
a3:61:9b:b6:c3:2c:e0:a9:6b:74:b1:f0:fd:1d:ca:2c:cc:12:
aa:2a:a0:3c:60:95:8e:4a:50:3f:0c:35:81:f9:e4:12:5b:da:
d2:c5:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:15 2025 by rpki-client