Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json)
Hash identifier: lGHr0yjLPpOAXxC82MsYmuCEekbPkDSep7bbGkrfmYE=
Subject key identifier: 2B:DE:2C:E8:3E:EB:C6:60:11:AB:78:20:1D:B2:7D:D1:EC:17:0C:3A
Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7
Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
Manifest number: 02FC
Signing time: Sat 29 Mar 2025 01:31:24 +0000
Manifest this update: Sat 29 Mar 2025 01:31:23 +0000
Manifest next update: Sat 05 Apr 2025 01:31:23 +0000
Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: ZNYr+LJ1rn7RkjBRbjUiW0r6R+4mvOezFZe+PMc0TMo=)
2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913791D
Validity
Not Before: Mar 29 01:31:23 2025 GMT
Not After : Apr 5 01:31:23 2025 GMT
Subject: CN=67e74d6b-b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:84:24:6f:c8:ad:87:55:cc:56:a5:04:13:
01:48:2f:42:ae:4d:49:9a:ff:7a:44:18:72:3e:43:
50:63:c8:eb:e7:e3:66:15:49:ed:72:55:b1:dc:1b:
ff:e0:3f:a4:c3:b6:15:1c:12:2e:eb:98:df:ce:a5:
b4:a3:0a:e2:29:bb:41:38:49:1a:56:16:b5:8b:b2:
66:56:ff:2c:c7:bb:c3:d8:b0:ca:c8:e5:99:c9:d7:
a5:46:c3:03:c2:03:68:0e:59:81:c4:e0:eb:24:a0:
87:09:38:d7:e1:19:08:89:e5:ac:61:dc:0e:59:e3:
fe:fc:a0:1f:45:03:50:35:f8:b5:f5:81:42:72:3d:
d0:ac:f5:1c:ed:e1:94:f0:c5:dd:f8:66:c0:31:76:
78:c3:2c:c3:68:28:f2:55:c4:28:8f:2e:36:4b:dd:
de:c0:f8:30:f1:32:ae:81:69:2d:b9:58:a9:f7:fc:
12:26:82:fb:44:da:be:3b:a6:2c:16:87:1e:bb:26:
60:76:d9:80:2d:de:f8:77:a5:3f:ce:1d:d3:9f:fa:
4e:69:a9:e2:5a:46:29:88:a3:48:e7:53:53:68:83:
d0:6f:a2:00:1c:79:f4:a0:3d:11:2f:4f:da:33:5e:
e4:c0:36:43:82:a1:ae:d2:0e:fe:8a:ea:ff:4f:b8:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:2C:E8:3E:EB:C6:60:11:AB:78:20:1D:B2:7D:D1:EC:17:0C:3A
X509v3 Authority Key Identifier:
keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:67:bf:14:f9:2a:d3:79:fb:cc:b0:bf:9d:ae:e9:9c:cf:7d:
26:6a:ff:a9:38:bc:62:87:89:69:00:c3:17:b1:7c:6f:13:b7:
b7:67:48:e3:b0:dd:dc:5d:27:52:48:10:d4:1b:d7:36:aa:34:
79:17:60:df:65:20:93:b4:4e:d6:c0:99:c1:87:f6:e4:f7:ef:
f8:c3:ac:cd:38:30:a8:38:0f:8d:48:bf:be:86:fc:d8:31:a0:
06:6b:5d:11:38:30:8a:ee:64:52:4e:35:b7:17:d4:a2:7a:05:
47:ca:6e:60:7f:18:1e:55:e9:b3:b1:81:b0:98:b4:da:08:48:
f6:f9:10:4c:a8:9b:18:2d:58:7b:be:5d:45:00:81:80:66:84:
bf:8e:47:23:2e:4e:b8:44:4a:99:39:6d:31:ee:22:d3:37:12:
1c:46:28:6e:e7:0a:63:01:33:b5:e7:54:77:14:0c:c3:f5:34:
30:3a:d8:ea:be:89:6f:9b:b6:94:f6:20:db:0e:62:a6:bc:06:
f4:dc:ec:15:c0:8b:46:26:46:70:8c:7e:b7:1e:f3:a6:96:88:
56:f2:ff:cc:e8:7b:a6:bb:1f:e4:4a:5c:15:7e:d3:7e:2b:8f:
a5:5e:e2:6a:c3:98:e1:39:fd:6d:f5:b9:50:7a:06:12:67:c2:
dc:e1:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:28 2025 by rpki-client