Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json)
Hash identifier: zxUMXm56CeCr9fQ6a75gs8wvWUDmknOT7TNcC8vVR2I=
Subject key identifier: 5E:D5:05:0A:1E:76:3E:5F:E9:74:45:05:1B:F7:B3:89:2C:F7:FC:5F
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 110E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
Manifest number: 10EF
Signing time: Fri 31 Jan 2025 17:17:21 +0000
Manifest this update: Fri 31 Jan 2025 17:17:20 +0000
Manifest next update: Fri 07 Feb 2025 17:17:20 +0000
Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: yn3GerKdTrFck3n0s5qPJPNKZPfY6HOFBibiBeBucB4=)
2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=)
3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=)
4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=)
5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4366 (0x110e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Validity
Not Before: Jan 31 17:17:20 2025 GMT
Not After : Feb 7 17:17:20 2025 GMT
Subject: CN=679d05a1-f156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:41:51:55:ca:05:09:3b:6e:0b:25:7a:b8:
dc:d8:30:88:ed:a7:65:b1:ac:31:78:b5:77:d3:f4:
32:31:be:1e:17:b5:86:c1:94:70:c5:f6:80:f1:3c:
b1:b3:f0:11:79:84:49:dd:e2:0d:a1:d5:00:a5:46:
43:3a:40:15:f8:d7:26:ef:e6:15:58:b5:9e:65:f7:
6d:18:75:73:c4:9a:99:e6:c3:de:3b:6a:54:e7:ed:
de:05:25:95:8f:d2:36:18:a5:b5:02:c3:4f:2a:0b:
23:3a:8b:ea:8e:6d:99:92:f9:18:42:88:ce:05:3d:
31:1e:08:0f:54:1e:69:53:cd:ed:e8:b3:29:a7:4d:
01:50:66:17:28:56:39:58:8f:84:af:1e:3f:0c:d3:
ba:99:da:72:0e:1e:84:14:52:32:c2:46:6c:43:e9:
b3:3e:fc:43:20:67:a3:dc:46:65:4a:03:9b:95:64:
1f:89:0a:a7:81:0b:75:27:d6:a3:2d:b5:c4:d2:aa:
c5:2e:ed:e5:5f:0f:9a:76:0e:76:17:1b:1b:20:98:
56:7c:e8:4e:01:77:84:12:4c:0c:0f:fb:e9:37:52:
74:cd:41:a5:5c:cd:4e:b1:41:ed:c9:85:de:8f:3a:
e5:ed:0d:d5:35:f9:17:dd:c9:68:cd:a8:21:a1:f5:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:05:0A:1E:76:3E:5F:E9:74:45:05:1B:F7:B3:89:2C:F7:FC:5F
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:2f:2c:e1:f3:8c:c0:38:87:c5:66:46:ee:54:5e:c0:bd:05:
35:38:6f:03:d4:30:5e:3c:34:cb:7b:71:30:1f:a2:28:6e:39:
ec:20:fc:81:22:ce:72:59:8e:68:84:14:59:01:97:67:c0:4a:
c3:86:90:fb:bc:63:13:4a:03:c9:a5:6b:06:23:98:e1:8c:7f:
83:c8:59:cf:6a:f4:79:b2:de:4c:eb:af:ee:9a:3d:76:88:2e:
08:28:50:8d:f3:85:91:9d:c4:0e:bb:95:c6:eb:68:26:7f:6b:
29:e5:77:ee:fb:a0:b9:00:87:2e:99:59:45:05:d8:21:21:cd:
aa:41:bc:b1:40:fd:7a:6d:37:e8:d1:94:c8:c1:97:e6:0d:44:
5a:d8:2e:93:d5:32:54:a6:c8:83:ce:10:29:f7:e5:a1:7b:69:
bc:ba:16:d6:17:4a:2b:2d:00:4f:4f:c3:d7:56:0e:60:6c:fb:
52:63:95:43:e9:4f:b1:6a:af:80:f6:8d:a2:63:aa:49:67:97:
e3:6c:68:23:c8:f3:f1:ad:23:6d:93:06:d0:41:5d:f5:e2:aa:
62:5b:64:d7:14:f6:47:56:85:1b:44:99:15:a4:45:32:c4:43:
75:8f:10:a9:6a:e2:27:5f:bd:bf:80:0d:90:05:f3:0f:6b:2a:
4e:7d:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:38:32 2025 by rpki-client