Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json)
Hash identifier: hHbp2zHdz7xK45pV4gbGyrahjFOacBqBCNbp7Th22jU=
Subject key identifier: 8A:C0:F8:2A:81:41:5A:86:54:F5:D2:FA:02:2A:7A:47:80:E9:CF:76
Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E
Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
Manifest number: CA
Signing time: Fri 31 Jan 2025 04:53:00 +0000
Manifest this update: Fri 31 Jan 2025 04:53:00 +0000
Manifest next update: Fri 07 Feb 2025 04:53:00 +0000
Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: 12HeOV6VPcojiTO4TtLJxPx3qIZvyNvKMprifyMIyWY=)
2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: ewevHTVGmqHpvpOV2d+aqrkd9ftzXTkReJQtB5PG940=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
Validity
Not Before: Jan 31 04:53:00 2025 GMT
Not After : Feb 7 04:53:00 2025 GMT
Subject: CN=679c572c-7d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:e9:b1:51:00:85:c4:ba:d0:4f:24:ad:63:
ab:67:66:64:98:f3:06:fe:00:3a:9f:64:e3:47:81:
aa:65:ea:09:81:e3:9c:f3:74:a0:e8:3b:c2:96:91:
10:d9:6a:ab:d4:67:95:77:c5:39:c4:f7:c1:46:83:
09:cf:db:e4:8b:86:05:d2:69:00:e9:4b:0b:c5:7d:
13:87:ec:21:57:24:12:e1:77:42:ce:fd:24:82:35:
8f:77:6f:69:bb:34:95:72:5a:72:1d:e8:a3:34:a4:
cc:b7:ed:67:98:43:44:e8:e4:9a:f7:26:1b:8c:f2:
18:e8:c8:b5:73:f0:af:14:9e:73:cb:43:b6:7e:0c:
3a:cd:80:52:24:49:6a:1b:35:77:3d:94:c0:42:6b:
8d:6c:f0:29:fd:8b:bf:0d:17:1a:e0:5a:68:ae:d0:
65:10:2a:3d:df:30:f9:d5:d9:10:2e:68:3b:06:35:
f7:e9:c6:37:e8:a1:2a:8c:76:cc:fd:04:70:ec:da:
18:d5:fb:a7:4c:4a:c0:ee:28:2c:17:f1:26:e6:6b:
6f:76:c9:5e:4c:db:08:4e:7e:e4:27:82:48:7d:ba:
c9:c6:54:b3:34:39:5d:4c:5e:79:6f:bf:9a:af:59:
af:9f:67:19:fc:89:2e:ae:7f:44:e7:76:f0:5b:bd:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:F8:2A:81:41:5A:86:54:F5:D2:FA:02:2A:7A:47:80:E9:CF:76
X509v3 Authority Key Identifier:
keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a9:6f:39:90:ed:02:ed:60:4c:6a:8a:57:d7:db:e5:2d:1c:
54:db:ec:61:7f:88:f9:b3:dd:c6:42:a2:de:74:59:9f:f6:4a:
9c:05:fd:86:13:52:df:e7:4c:ad:08:c6:bf:91:ad:91:74:ea:
a5:7d:e6:a4:4d:78:9b:ec:e6:a8:c4:57:0b:15:7b:3f:71:03:
5f:d3:eb:a9:05:5c:58:1a:3f:19:d1:27:76:66:e6:d7:0f:7a:
84:05:38:e7:74:b7:8e:47:c9:0a:0c:42:2c:2a:48:2c:39:94:
b3:b6:d2:20:48:9a:fc:f4:c6:4e:04:70:82:22:0f:62:09:bd:
52:6e:cb:a5:06:9f:2c:9a:d7:de:5d:8f:21:3e:08:d4:99:15:
28:2d:ec:7e:4b:8f:c8:b5:1b:55:94:3a:79:49:aa:42:c1:69:
bf:84:9e:75:b9:25:d2:33:a5:1d:f6:3d:3a:95:1d:e9:b3:2e:
b7:75:a1:5e:93:4c:b2:30:30:57:9f:34:8f:d4:e4:cd:72:8a:
22:89:7c:e3:da:d5:71:3e:34:c4:58:53:79:a0:cb:5b:01:0c:
91:cc:d6:23:3a:96:00:76:a7:5c:c6:70:ed:b3:04:8a:46:0e:
37:39:d6:39:a7:fc:53:2c:30:89:54:13:65:d5:82:fe:12:cd:
7a:c1:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:50 2025 by rpki-client