Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: cSPuHbtdDkEfWmW/UW2wlCRPNgwwJmoPpyvsnJ7tm88=
Subject key identifier: 37:BE:38:5B:22:C1:8E:22:19:67:42:BE:43:F0:64:21:34:29:C9:54
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 06D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 067F
Signing time: Thu 30 Jan 2025 22:44:22 +0000
Manifest this update: Thu 30 Jan 2025 22:44:21 +0000
Manifest next update: Thu 06 Feb 2025 22:44:21 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: sai38ZwTs05CVK+H7X9rCWJjWxqryuHRX/vunOAEHlk=)
2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: gigu9XXG4TciW/baJe+D9FNij/SMJDKtLbxaQE6wPW8=)
3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: FmdbY9QipzaQlUDFsL3jY9YqRtDMRVNSSqRy0Syi7ec=)
4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: g+zMllLE2VCl9M+OB2Fx9FsTbN85M1LU1pE2Ig0HpqA=)
5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: +y+hJ5qJjcNTcDHQRQUIm9QSLwoFCs3tpko5IxlscxY=)
6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: ECS4oxCwGoPittuwiBAwWcmaSVPvRXUwLMLK1Srfnf4=)
7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: +HIWxJiLolDgRpb6PQ9bp+rcmEeyPFvi32O1KjhIdI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Jan 30 22:44:21 2025 GMT
Not After : Feb 6 22:44:21 2025 GMT
Subject: CN=679c00c6-f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:eb:42:d4:13:f4:68:80:f1:28:57:69:53:
93:a1:94:49:2c:b6:c2:cb:3e:35:be:85:c8:2d:4b:
03:a0:0a:f7:46:d1:e8:9c:21:2d:4e:78:34:4e:f5:
08:db:60:74:df:f4:fe:3f:69:6a:45:06:35:12:c7:
b2:87:fb:59:c5:36:e8:98:d4:c6:df:4d:f8:29:ee:
a4:5e:1f:e5:8d:99:aa:19:8e:00:f4:95:91:a7:0f:
fa:6a:7a:d3:8a:1e:99:7d:db:5c:7c:d4:28:2f:a0:
33:b5:c0:33:3a:84:80:62:09:1f:d6:22:94:bb:9a:
b2:87:2a:bf:10:0a:81:df:54:4b:48:f5:c8:80:04:
4e:c4:35:be:88:1c:42:47:1e:a8:1b:79:07:0e:41:
4f:ee:ee:5a:b9:a3:52:96:ba:f4:56:14:f7:c9:a9:
88:05:82:4c:a9:06:bb:96:50:bb:ea:4f:0c:4a:b2:
0f:7c:6e:78:13:ab:c0:4b:c7:e7:35:43:fc:8a:5f:
93:67:bf:85:fa:f2:12:7b:0b:f2:e0:2d:66:d4:2f:
fb:f3:09:2c:51:9f:bc:4a:82:41:86:af:f3:e6:f1:
f9:9c:1e:8b:5a:eb:92:12:ea:69:cf:19:b7:9f:9f:
ee:fa:5f:4a:4c:74:c2:b5:6b:5c:2c:a3:49:38:67:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:38:5B:22:C1:8E:22:19:67:42:BE:43:F0:64:21:34:29:C9:54
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:73:3c:47:c0:04:94:a5:cf:8d:0b:b5:0c:ca:f8:61:ff:
e1:d8:24:4d:fc:44:81:bb:8d:42:2e:41:4e:66:c4:0c:70:8a:
ee:4d:be:52:73:46:4f:96:c2:9d:3f:45:7c:2a:24:6d:68:ad:
a2:87:c6:5f:60:f2:45:e4:66:07:23:0c:fa:79:0f:7b:46:5b:
ff:ab:3f:28:88:d8:6a:64:0a:0e:4d:9a:08:8d:e4:24:2e:e4:
63:cf:59:65:4e:47:5d:3f:d8:5c:63:f3:05:e7:1e:ff:c4:66:
6a:64:5b:b3:09:1f:28:20:e0:9c:cd:b0:e7:17:8f:18:89:aa:
91:62:5d:bb:e7:bf:cc:8b:49:71:27:23:16:08:f9:9c:c6:ab:
01:84:9a:e3:ca:d6:83:8f:df:7a:f9:60:11:e0:2e:fb:29:d8:
88:d2:73:12:76:19:65:56:3a:60:5c:fe:4d:0d:9d:37:94:39:
cf:e8:46:5a:67:8d:9d:53:ce:6b:99:24:d9:aa:b6:68:94:41:
57:fd:c9:9b:0c:07:06:6f:43:13:c0:05:6e:2a:e4:ed:d1:f8:
4f:e8:44:69:16:8f:a4:01:48:89:f4:34:7c:81:6b:aa:bb:da:
c5:f4:5c:a2:50:11:48:43:29:ab:a2:37:d4:5c:08:cc:c9:36:
cf:7a:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:50 2025 by rpki-client