Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier: rrFPjW03ohoseSv/my5SeEG37WM1yhqr63mEysxBa4o=
Subject key identifier: 5D:DF:03:D1:35:CE:90:69:B6:CF:64:23:C9:19:C7:61:3D:26:D1:E5
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number: F0
Signing time: Sat 29 Mar 2025 04:42:17 +0000
Manifest this update: Sat 29 Mar 2025 04:42:16 +0000
Manifest next update: Sat 05 Apr 2025 04:42:16 +0000
Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: h47ndcktlftCU5/P0faFvN9E5qQWgGCcImkbEDUrTco=)
2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: 3JCYdG127llvDq2ItCHcIF18EbtwG2SS2OGY+RRrxS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F6C
Validity
Not Before: Mar 29 04:42:16 2025 GMT
Not After : Apr 5 04:42:16 2025 GMT
Subject: CN=67e77a28-44b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:d7:14:95:b7:da:6d:de:07:04:f4:0f:96:
e0:da:ab:7c:93:b0:0c:cc:a7:5f:e1:83:5c:34:fc:
df:2d:ef:50:74:47:3e:38:ac:c0:7c:a5:05:49:c3:
ae:d3:46:f1:b5:cc:2f:45:ac:7e:06:ef:be:ed:f9:
fa:4c:0f:81:d7:78:cf:25:d7:b6:e9:aa:23:06:81:
f1:60:58:74:5b:99:2b:6a:2d:14:2e:8e:d4:ee:25:
21:64:40:d8:ea:29:72:65:55:c5:88:68:b0:b8:f9:
4c:18:e2:b6:2b:49:c4:d5:9b:e4:76:83:ee:04:e0:
fe:dc:b3:1a:df:73:ee:6d:26:27:bc:29:69:a5:97:
18:b3:f2:07:17:f6:62:a7:01:98:b3:90:ae:72:86:
bd:94:f8:de:7b:48:2a:18:31:fc:71:d7:4f:ca:39:
dd:2a:6b:83:3c:09:37:1a:ba:75:35:c9:f0:45:8b:
56:32:1a:82:3d:bc:5c:fa:9e:35:6c:ae:c8:d1:5a:
ed:2d:25:e2:6e:5f:fd:a4:ae:f1:2d:2e:9c:af:23:
4d:f2:1e:a7:c1:00:f3:df:6c:d5:c5:3e:96:d3:ae:
28:3c:64:5c:72:6b:60:c1:f5:f9:e3:b3:6c:f4:e2:
15:a9:9e:b3:d7:74:62:9c:e5:2f:1d:88:6c:b0:f7:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:03:D1:35:CE:90:69:B6:CF:64:23:C9:19:C7:61:3D:26:D1:E5
X509v3 Authority Key Identifier:
keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cd:d0:07:ab:b3:34:b1:4d:20:95:5b:df:58:19:4f:49:20:
0d:2d:99:86:34:69:31:bf:98:d4:fb:3d:92:b0:98:54:bc:45:
db:6b:39:38:61:46:aa:2e:9e:54:87:b8:88:00:c6:1c:98:35:
74:3b:f1:68:ac:85:0f:8a:20:e6:eb:ea:45:42:70:f8:0c:6e:
3f:e9:5e:2d:04:aa:12:8e:df:25:5b:02:fd:9c:c7:75:07:e0:
bc:b1:34:78:93:18:a2:0a:e4:49:35:8a:5d:d9:fd:2a:ee:27:
7c:46:d7:d8:d9:5a:b8:4f:5c:af:9e:67:9b:0e:09:4e:42:08:
0b:89:7e:bd:f6:47:3e:5e:88:c9:c6:1e:0b:11:85:30:9b:91:
19:59:4f:c5:ed:be:6d:35:46:07:51:29:d8:c5:5a:cf:f8:82:
a3:d8:80:6d:ef:3b:51:d7:bd:0d:eb:e5:ed:71:c1:28:f2:dd:
79:37:8f:af:00:56:fe:52:ff:d3:32:22:88:45:95:96:8e:4f:
cf:b7:35:f8:ad:8f:e7:a2:98:d1:d2:86:5d:1b:28:23:fb:a3:
e3:d1:47:9c:d3:1c:13:5d:12:fe:4b:de:ca:06:b6:b7:b8:2a:
c6:67:a2:08:a7:fd:b8:0b:e3:29:ff:7f:18:c7:cd:ec:23:aa:
6f:3f:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:01:15 2025 by rpki-client