Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json)
Hash identifier: ZpNyoIrGLuyWKifLfwwxvCas3CILf+K+S+HleejSH1Q=
Subject key identifier: 42:4E:29:54:D5:B6:16:50:D3:C0:84:4E:1F:D5:53:8F:25:CD:71:3A
Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Certificate serial: 16E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
Manifest number: 16D6
Signing time: Fri 31 Jan 2025 16:39:26 +0000
Manifest this update: Fri 31 Jan 2025 16:39:25 +0000
Manifest next update: Fri 07 Feb 2025 16:39:25 +0000
Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: sOmgG/7h4c4F8LadSkSThDgd9VkpikP51SKs8/Qtym8=)
2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5856 (0x16e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Validity
Not Before: Jan 31 16:39:25 2025 GMT
Not After : Feb 7 16:39:25 2025 GMT
Subject: CN=679cfcbd-6f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:08:78:a0:4c:c2:03:ac:19:87:1a:ab:86:
2b:fd:5f:6d:ae:f0:06:27:83:53:92:d6:ed:12:4e:
da:19:0a:57:ca:c9:ef:86:45:2b:a0:ef:88:34:e9:
7d:db:90:68:7d:b1:3b:e8:e7:db:ef:ae:07:a0:9a:
0e:df:54:1c:39:54:88:ec:d3:24:06:e8:2d:37:5a:
e8:2b:42:94:4d:de:86:46:22:90:c2:61:e8:6c:29:
06:24:27:c0:be:b1:7e:66:4c:c3:a2:52:9b:2c:88:
2d:c9:72:c4:6b:c0:99:8e:0c:80:54:46:e5:43:df:
28:af:99:0b:fb:37:0b:0d:b3:a1:50:84:74:86:73:
34:62:e7:79:a7:c2:ad:b7:bd:b6:11:dc:99:b3:81:
09:12:fc:b7:c0:59:8f:29:80:5a:1a:a5:32:51:82:
2a:4f:65:4b:ec:95:9c:ef:55:38:6f:7f:b6:b2:21:
0d:6a:3a:b9:32:80:e8:44:69:fb:fe:81:d8:0d:23:
ce:63:2f:9e:aa:74:8c:1b:a7:79:93:f8:83:85:3c:
5b:db:8c:07:61:df:76:e0:1b:91:7f:d9:9f:cc:17:
b0:f0:ce:ff:37:85:8f:ed:f6:5e:d5:6b:64:96:1b:
5a:1a:1e:fd:2b:3b:c7:2f:6d:12:b8:e8:d6:7d:08:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:29:54:D5:B6:16:50:D3:C0:84:4E:1F:D5:53:8F:25:CD:71:3A
X509v3 Authority Key Identifier:
keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:bb:30:86:9e:b6:1c:07:8f:a7:be:93:e0:88:09:6b:6a:
9c:0f:b3:73:20:2b:27:bf:e8:fc:2c:67:c7:22:65:94:25:88:
91:c9:e0:5e:84:c4:29:d4:65:26:8e:13:73:8e:31:64:70:4c:
65:5a:16:d4:5c:6c:61:02:f2:f5:fd:47:bf:d0:78:4c:61:1d:
52:e6:be:1b:c0:60:e6:95:70:a7:41:6d:c0:fa:e0:3d:dd:63:
4d:09:64:e4:ea:68:a3:2d:9c:e4:7f:ac:5b:17:09:90:25:68:
23:5e:53:9b:de:94:9c:39:99:03:09:b2:d9:99:c8:9c:0b:79:
9a:bb:91:c0:6d:70:9c:ac:1c:0e:2c:c1:5d:c3:28:55:89:71:
58:ee:bc:52:a4:7f:52:85:79:15:0a:72:01:93:08:ca:2f:07:
94:3d:7d:7f:c3:41:aa:9a:d9:fb:46:39:b2:1b:ef:69:2f:18:
03:e6:ce:d4:64:55:56:b3:a1:55:5a:8c:66:23:d1:f3:1d:03:
27:8b:3c:95:3c:f6:7b:80:43:0a:61:dd:f3:3a:94:ec:39:70:
36:14:7a:5c:8a:98:e2:a9:d7:aa:ad:16:83:e6:28:e1:dd:93:
37:40:5b:96:d7:be:b4:3b:9d:f8:0a:d7:71:27:89:bc:f5:ef:
0b:3f:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:53 2025 by rpki-client