Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: sMqkeMPzQpMIamjSX3rP8/xtXS9r4Bjm7eLVP+ZxPCQ=
Subject key identifier: 3C:22:5A:C0:47:99:7E:4E:A1:D0:76:44:A0:FF:23:5E:4E:42:37:D9
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: CA
Signing time: Sat 29 Mar 2025 05:07:33 +0000
Manifest this update: Sat 29 Mar 2025 05:07:33 +0000
Manifest next update: Sat 05 Apr 2025 05:07:33 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: 6nil5ayItxTHCtHQjFwWcNvtVVrmwK0DAprknIzRk2Q=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E
Validity
Not Before: Mar 29 05:07:33 2025 GMT
Not After : Apr 5 05:07:33 2025 GMT
Subject: CN=67e78015-5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:34:d9:20:53:6e:4c:39:14:e7:d2:f8:c1:
54:03:70:99:04:2f:62:0c:58:fd:bc:b9:0a:b6:87:
fd:9c:f8:df:7c:ad:aa:07:6c:2e:e6:dd:49:f0:e3:
ce:a6:02:39:28:35:b4:98:23:f7:55:5d:45:c3:96:
62:e3:10:7f:fd:8f:41:71:9e:c4:58:ce:d4:f0:8b:
c8:ea:97:d1:22:ff:c7:5e:e3:4f:7c:9a:11:84:9a:
c6:2e:05:c4:92:18:a3:58:ff:05:4f:49:0e:04:61:
f8:e8:f6:2a:45:45:20:50:20:8d:4e:bc:72:c6:4a:
7e:c0:1a:69:c5:0b:b9:c7:7a:cb:1a:93:74:ff:77:
fa:d8:07:3c:22:38:e4:77:b4:e1:07:05:d1:9a:3f:
d5:13:f9:56:4c:58:93:9f:44:ef:3c:bb:96:ac:52:
ef:2a:29:10:6f:38:6b:25:a7:08:35:c2:7a:9d:41:
82:92:59:64:8f:e0:b2:6e:15:ba:3a:65:c9:43:33:
d4:a0:40:fb:b2:15:3b:b2:23:6d:ca:83:f3:58:30:
de:d0:51:81:ef:2a:97:91:cf:55:06:57:6a:c3:38:
7e:ca:8e:f8:c8:26:5c:59:0a:ca:0f:7a:40:e1:44:
f4:d6:77:e9:7c:2c:0c:34:d1:7e:6a:19:d3:e8:9b:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:22:5A:C0:47:99:7E:4E:A1:D0:76:44:A0:FF:23:5E:4E:42:37:D9
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cf:6c:c5:9a:49:01:3f:17:3b:8a:03:83:85:d8:25:7c:f1:
fa:1d:cf:b6:4b:2e:8a:e1:c1:a4:01:cb:6b:99:33:c8:15:f8:
6b:3d:e6:25:39:d6:d7:e3:96:17:b8:4c:2f:e8:4b:37:b2:e5:
3b:b0:11:a1:a2:e7:85:f5:db:fd:4e:c1:cc:f2:1a:ec:d3:40:
38:5d:af:93:d6:25:04:e6:dd:4c:d7:0b:f0:34:ad:f8:26:cc:
62:d5:83:f8:56:d5:fe:6e:d1:0d:b6:c9:7f:07:62:fd:29:6e:
95:ff:1f:8f:36:6a:99:9e:df:d5:53:21:09:e0:03:51:99:1d:
e3:98:67:96:f1:ae:32:9c:c8:4b:72:44:db:a0:b8:60:b2:77:
e7:00:0e:84:4e:d1:c3:95:49:c3:94:84:80:05:f2:1c:04:84:
23:8d:55:67:94:9a:be:de:66:f4:ad:40:02:bf:fa:5e:86:a6:
a8:73:79:b2:fe:42:6e:e1:0f:db:1e:12:e9:1e:9d:fa:d5:56:
62:14:61:3d:5d:c3:17:fe:cc:11:10:5f:99:3e:a8:f9:ce:bb:
0e:42:a3:66:d3:29:e9:5b:29:dd:c0:1f:da:f5:38:71:61:44:
51:b0:59:8b:89:57:49:45:31:e5:f8:d8:60:57:82:6f:74:3c:
f1:0f:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:58 2025 by rpki-client