Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier: MR370wAdj78QlOkbPIZKLlnyDMfVNsPX2N2FH3O+zNU=
Subject key identifier: F2:E1:D6:49:7B:C9:51:D7:C5:8A:21:76:E6:0F:A4:88:E9:E4:A6:2C
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number: 69
Signing time: Sat 29 Mar 2025 06:17:55 +0000
Manifest this update: Sat 29 Mar 2025 06:17:55 +0000
Manifest next update: Sat 05 Apr 2025 06:17:55 +0000
Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: j46/JzRnHh8L02Ad66KKB7NKkqhJi5qRyL86MjnLotM=)
2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: 2HfG6RBJNjp2Sln53/9DqAKwbPABxc8TXP+QorUFDfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932
Validity
Not Before: Mar 29 06:17:55 2025 GMT
Not After : Apr 5 06:17:55 2025 GMT
Subject: CN=67e79093-3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:cd:d6:88:85:06:b7:07:84:ad:9a:84:1f:
a5:87:3e:6d:d5:29:fa:b8:d9:41:61:02:05:cb:31:
97:b2:f3:c8:96:f3:d5:75:fd:be:25:1d:50:d2:6a:
46:af:d1:51:20:e8:34:0a:6c:42:02:03:90:61:ef:
b9:38:42:ce:37:dc:41:83:6f:2d:85:1c:f9:a6:89:
4d:bd:03:6a:22:43:8e:6a:2a:29:e5:6f:3e:e3:49:
b7:14:0d:bb:e4:36:30:1f:83:5e:06:fd:4a:5a:1d:
64:ed:98:d8:fd:2d:b5:c8:40:75:48:43:ee:6f:42:
fe:56:2f:03:06:4e:5b:ba:93:34:1c:23:b8:7b:0a:
21:6e:1e:6d:7c:46:41:ae:fd:24:d6:44:00:c5:32:
22:7a:cc:cf:74:ad:d7:cd:11:f4:79:81:5b:bc:7f:
4a:7f:da:94:54:ab:3c:8a:80:4a:68:80:c5:d1:9c:
ac:c5:ba:fb:f3:0c:99:1b:0b:f0:87:6f:10:6d:50:
2f:ef:f3:dc:0c:62:11:b3:9c:ca:fe:7f:e1:f8:b7:
2b:ec:6c:e1:4d:db:81:bd:2e:8b:f3:db:31:e6:34:
07:23:45:12:17:79:64:88:ec:50:e9:86:57:6b:89:
a8:0f:10:01:85:e9:0d:16:a4:b4:01:53:f6:2c:f6:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:D6:49:7B:C9:51:D7:C5:8A:21:76:E6:0F:A4:88:E9:E4:A6:2C
X509v3 Authority Key Identifier:
keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:19:f8:c3:09:c7:d0:fd:55:2e:3d:de:4c:ac:0c:e8:69:
80:25:ae:74:b7:48:09:a9:9c:99:92:fb:e5:81:ab:b7:50:c4:
58:6b:46:78:e1:9d:9c:a6:02:48:a8:f0:75:64:8f:ff:71:1c:
a8:4f:b7:18:d7:50:0d:58:a9:79:d2:b7:0d:79:b0:ba:54:a4:
89:e1:c6:63:c0:f0:66:8a:a2:db:15:c6:41:d2:84:b2:23:8c:
86:da:02:36:5b:63:0e:33:4a:cc:fa:96:90:00:58:d9:ee:21:
d3:63:40:81:f0:3f:93:78:5e:55:ac:01:e1:38:74:c9:74:3b:
9e:c2:30:f5:d1:7c:73:d4:37:84:a9:d4:07:3f:31:50:12:46:
82:9f:36:87:2c:77:56:6e:ca:45:7c:ae:81:00:2e:ea:70:b4:
e2:fe:02:d6:47:35:c7:c3:0b:25:b9:19:b4:d2:78:54:12:7b:
92:b3:dc:b2:22:d0:35:97:fe:f9:1c:ce:98:65:e9:77:a5:0c:
26:3b:cc:73:a7:1a:52:34:2a:a1:dd:38:92:b8:37:cb:ec:2b:
3b:84:89:d4:d4:aa:44:70:33:46:5d:2c:48:73:8a:90:c1:d4:
f0:32:46:43:b7:ff:21:5b:8e:9d:6e:1c:e9:bf:33:df:ab:94:
61:ce:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:36:14 2025 by rpki-client