Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier: ZynScyadMqlLUB2EUwIqS8+6OuY1db9GKpfx6dlkZSQ=
Subject key identifier: F2:AF:E2:25:EA:C8:31:5E:65:72:90:FA:07:E0:2A:28:2B:23:80:90
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number: 69
Signing time: Sat 29 Mar 2025 06:26:40 +0000
Manifest this update: Sat 29 Mar 2025 06:26:39 +0000
Manifest next update: Sat 05 Apr 2025 06:26:39 +0000
Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: YCSGCM2VJd3CN3qRiBNJviyTdWOPw8bzMTrZNDKUqsU=)
2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: gTljkeOtiLUXIev71WvDZsUroRxts5KzF3IxcDIZHnk=)
3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: rP5j4C0CGZJsw2gJYjo66ntxudPoLAvM82b5Jln8ZuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913819A
Validity
Not Before: Mar 29 06:26:39 2025 GMT
Not After : Apr 5 06:26:39 2025 GMT
Subject: CN=67e792a0-3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:c6:e7:5f:41:6b:ba:ac:f4:e1:05:9f:75:
74:42:32:3c:e2:9e:8e:d8:24:d7:3e:3c:eb:ce:29:
5d:0b:af:fa:5b:8c:d6:f1:dc:4c:ec:58:cc:9e:bc:
1e:56:83:ac:0e:a2:b4:0b:55:d4:7a:d1:18:22:b0:
18:ca:e4:69:79:c7:37:c1:5e:c2:c8:cf:46:9a:14:
1e:ed:ca:a4:f5:1b:e9:e8:dc:59:7b:7e:01:e6:a6:
c0:74:c2:a1:c2:ed:b2:47:c0:14:49:c4:ee:ca:ca:
56:26:48:36:9d:5f:c3:54:b0:b0:12:10:99:4e:a1:
e2:28:bf:48:6d:cb:27:74:b7:fc:a0:7a:58:c4:b6:
f3:e7:2a:c6:51:b5:db:7b:2e:1e:99:4f:36:dd:3d:
57:e8:c8:5f:99:9e:21:3e:57:d4:de:d4:1d:0a:63:
de:30:65:62:bb:e2:bb:c8:3d:22:53:bd:4c:58:5a:
c9:76:e4:e1:76:03:91:ff:41:cb:18:7b:29:9b:9f:
0e:c0:7d:02:72:52:3f:17:ba:10:36:eb:c5:39:5a:
5b:77:13:53:cb:31:19:42:5f:a6:ab:c5:ca:b2:71:
82:44:cd:29:a9:47:e0:19:1a:37:2c:4d:8c:48:72:
62:f3:e2:66:c8:2a:5a:b9:e2:47:56:03:6d:d1:94:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:E2:25:EA:C8:31:5E:65:72:90:FA:07:E0:2A:28:2B:23:80:90
X509v3 Authority Key Identifier:
keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:5a:af:c4:50:23:6f:e9:fe:03:a2:30:fc:50:a4:c0:28:
5d:8b:df:c5:c6:0a:a7:ba:48:9a:bc:c5:4b:a2:21:3d:2d:9a:
ab:16:ad:c4:26:e1:35:d3:99:bb:7d:0c:9c:f1:72:34:68:d9:
83:df:58:26:fd:65:df:21:97:ec:f2:9b:75:65:2d:4f:fd:4d:
27:7d:41:9a:9a:da:43:02:f9:fa:8c:79:f3:1b:88:dc:f7:e1:
3a:6a:13:1d:87:25:b9:90:a2:c3:e7:51:7b:89:73:9e:a2:08:
d3:17:3e:f8:08:29:1c:06:ed:30:3b:42:c7:49:2f:5d:1b:96:
9a:79:a2:4b:68:e8:20:80:32:1c:9c:9b:49:69:67:8c:f7:59:
ca:fc:36:c2:85:7d:1e:c1:b4:78:d4:30:8a:c1:2b:8b:14:c6:
fa:b7:60:55:1a:6f:29:7c:35:36:85:24:60:d7:10:35:62:1c:
98:15:d3:da:97:e3:5f:81:33:00:16:72:3d:82:38:2e:02:68:
0d:c3:2e:5c:7f:69:2e:cc:20:a8:d1:82:19:8e:0c:02:24:48:
4f:fb:cd:f5:88:18:e5:80:79:fd:ee:f8:a0:82:0e:70:dc:72:
2c:24:9b:77:85:1d:ad:e6:e1:47:6e:9e:55:4f:a5:49:91:57:
3c:2a:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:09 2025 by rpki-client