Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json)
Hash identifier: Fxvs6nhXHIXshwMY2Xz7WUdfAbxWOfC8sQE7JU/jamU=
Subject key identifier: 8F:57:41:FA:75:98:47:F6:1A:90:44:1E:52:74:D7:F0:3D:00:17:48
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
Manifest number: 5D
Signing time: Sat 29 Mar 2025 06:23:49 +0000
Manifest this update: Sat 29 Mar 2025 06:23:48 +0000
Manifest next update: Sat 05 Apr 2025 06:23:48 +0000
Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: ZVBM1luhg1yykF9N5MmuiK1w7rxktNTneOHaoPBwC1Y=)
2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF
Validity
Not Before: Mar 29 06:23:48 2025 GMT
Not After : Apr 5 06:23:48 2025 GMT
Subject: CN=67e791f4-5f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:9b:da:a0:e0:2d:99:eb:5b:7e:eb:a7:d8:
50:25:5f:e0:80:e5:5e:11:01:1a:2e:6a:ec:6c:c2:
8b:1c:93:a6:1b:26:79:75:2d:6b:91:e9:2c:4b:bf:
00:1e:a0:79:80:84:11:43:9f:57:a7:79:c9:aa:12:
4c:54:ff:a6:83:3b:49:e1:47:80:32:26:de:06:5c:
54:7e:12:9d:6b:c5:52:c4:cf:97:c9:65:2e:9e:bb:
38:b0:e4:d3:bf:e3:c0:82:44:8a:29:6d:07:7f:89:
20:25:c5:4a:36:07:1b:37:33:7c:14:47:f4:c0:26:
3b:e9:f0:e2:9d:07:e3:e7:34:3e:d5:a5:cc:19:11:
1c:ef:0a:36:cb:41:fd:da:5e:02:b3:43:f0:67:35:
cc:d7:ac:20:75:c5:cc:bd:3b:b3:26:17:2f:72:a6:
77:0b:ee:64:fe:bf:2e:9e:6f:4f:52:56:9c:fe:9e:
f4:a7:52:46:d3:3f:ad:c7:75:74:5b:35:fd:ce:2c:
c6:2f:f5:ea:e0:83:d9:89:c2:d0:54:4a:a2:a7:54:
b8:f2:01:70:20:9e:cb:6e:c5:da:4e:79:ed:e7:ef:
89:05:68:b6:bd:65:3c:10:93:fb:64:2f:d9:b1:f4:
56:40:fb:ee:70:a9:9b:1b:db:73:2c:82:66:b0:d9:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:57:41:FA:75:98:47:F6:1A:90:44:1E:52:74:D7:F0:3D:00:17:48
X509v3 Authority Key Identifier:
keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:58:ac:2c:b0:d4:35:cf:75:83:5f:58:82:60:24:5c:5f:
5e:5e:52:94:fc:4d:0e:94:ef:7b:3e:c4:77:49:6f:52:3e:7c:
d5:34:e0:d6:f9:6b:1b:6f:4c:e2:32:25:51:23:fb:e3:61:46:
1b:db:39:71:09:38:36:be:65:dc:15:d7:48:80:56:90:5c:b3:
a8:a0:04:97:37:74:32:1e:15:31:78:9f:ca:0d:e0:9a:06:1f:
52:a0:37:99:a9:09:26:25:ec:21:31:98:78:02:af:93:a3:f7:
48:a8:6b:6d:23:45:95:88:09:c2:2c:09:96:f1:ae:d9:14:62:
74:d7:0b:f1:30:67:53:50:11:4a:46:7b:6d:8c:27:87:44:e1:
c2:45:d8:65:f4:17:08:be:a8:f6:d2:ed:68:00:5b:5d:18:a6:
f9:80:d9:10:1e:e5:50:d9:9c:e5:e2:6c:aa:3f:07:fd:36:21:
04:81:14:3e:a1:de:3a:49:54:9d:0b:31:25:9a:9b:07:20:29:
7a:6a:6d:67:a8:1c:cb:28:2f:3e:6a:e7:ec:68:8f:4f:60:64:
62:84:c3:31:b9:a6:29:76:17:6f:b0:1c:e3:65:0d:2b:74:07:
8a:db:66:fa:6f:f0:9e:b0:e3:ab:36:e5:9d:22:e8:a7:93:3b:
cb:a3:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:45 2025 by rpki-client