Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier: RqaMp6EuPbFTJG96wN3w2YPMFVUF8y0JTk6AXhaNkgY=
Subject key identifier: B2:52:D9:E3:00:03:4E:DB:8A:72:DD:A2:F5:E9:8F:FB:0E:6F:3F:0F
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial: 05C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number: 05BE
Signing time: Fri 28 Mar 2025 23:19:52 +0000
Manifest this update: Fri 28 Mar 2025 23:19:52 +0000
Manifest next update: Fri 04 Apr 2025 23:19:52 +0000
Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: ZrutXCzYhG1oVJPcVOFAj403/VlOQdYmypeurodVCu4=)
2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1475 (0x5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159298
Validity
Not Before: Mar 28 23:19:52 2025 GMT
Not After : Apr 4 23:19:52 2025 GMT
Subject: CN=67e72e98-623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:31:83:55:33:e3:85:c9:93:e4:be:c8:21:
3a:e1:31:da:a7:fe:88:90:e1:a6:f6:a8:9f:5a:30:
d6:65:b6:86:5d:2b:47:48:88:4b:5f:2f:19:27:e2:
52:e3:b3:be:5e:60:69:63:14:9d:b9:b2:5f:b1:24:
6a:07:5b:bb:ae:0f:8c:04:27:35:c6:be:b3:84:cc:
3b:dc:9f:f0:cf:f7:5c:1f:30:15:47:ef:06:c3:cc:
1c:96:ef:45:47:ab:70:3a:f0:8b:77:db:81:7e:68:
f0:99:3f:d3:95:c3:e0:60:ac:95:cb:b0:2b:a2:28:
79:a0:33:e4:87:de:d4:ef:ca:38:40:93:43:1e:34:
e9:15:59:ae:a3:09:4b:17:1f:2e:ed:97:4a:9c:c3:
fb:03:1f:8f:d3:b4:2b:dd:72:d4:54:f9:b1:aa:9b:
97:a2:2d:67:b3:1b:65:9a:92:1f:c5:24:12:b1:f5:
36:19:47:ab:0c:88:02:dd:05:09:cc:5f:73:4d:0b:
c1:11:e5:1c:42:58:6f:29:b6:9c:54:3a:02:96:e4:
93:8a:eb:3e:f2:f3:d2:49:3e:ab:a7:04:c1:0e:9c:
84:87:6a:25:dd:70:c7:3e:32:2f:3f:6d:9f:69:99:
44:12:ff:1f:94:60:46:99:7c:31:c3:07:d7:9c:ee:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:D9:E3:00:03:4E:DB:8A:72:DD:A2:F5:E9:8F:FB:0E:6F:3F:0F
X509v3 Authority Key Identifier:
keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f0:cd:56:d2:f1:3e:78:a4:1c:6d:31:34:28:fa:d4:d9:52:
29:2a:b7:ed:08:fe:54:1e:77:be:eb:de:d1:55:a0:f3:bc:b0:
c0:70:99:cd:a5:80:58:56:a4:d8:b3:c7:4d:13:4a:23:30:3e:
4f:7b:22:99:c5:91:9b:cb:fb:33:8d:6c:77:c9:77:c4:a9:ae:
9d:5a:4e:a1:c6:4b:1d:b6:78:8c:9b:c6:dc:22:9d:42:c4:1f:
db:0b:7d:1c:fa:2a:19:1a:cb:b4:3b:57:07:87:c5:e6:98:69:
73:d3:be:92:09:bf:e4:80:91:cb:5a:f7:96:d4:94:d1:c8:e9:
85:97:d1:75:53:ee:3f:4b:1a:52:00:fb:ee:8a:b0:a3:fd:76:
50:63:dc:15:a9:0d:90:ed:ef:0e:f6:fd:fe:a5:bf:0c:b3:b1:
43:46:95:22:94:7d:89:da:2b:9b:10:ba:75:22:ed:26:b3:0a:
93:87:74:a3:3f:ad:59:18:89:23:13:67:85:0a:86:a9:f7:c9:
3e:e8:c6:c2:75:0b:66:39:f2:df:28:a9:66:82:e7:89:03:5c:
77:b5:91:46:c9:b7:ec:1b:60:3f:34:d8:e2:eb:d3:4d:69:85:
34:7b:98:4a:3f:21:dc:cd:37:81:d9:fd:15:c3:7e:f0:53:d6:
26:76:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:20 2025 by rpki-client