Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json)
Hash identifier: nDOMWGz3HLasCfYpNEm1ohvk4lP8Z/RmNyu3i9KZf3o=
Subject key identifier: 79:F6:F5:FB:10:09:70:1E:CE:BF:31:65:5C:9A:31:0E:0E:FB:D2:75
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 0530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
Manifest number: 0525
Signing time: Fri 28 Mar 2025 23:48:40 +0000
Manifest this update: Fri 28 Mar 2025 23:48:40 +0000
Manifest next update: Fri 04 Apr 2025 23:48:40 +0000
Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: Dy0OJDqgLa5FtL0rEhbH+J+nwyONk4EiHHJz6fdtbKc=)
2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: N3l8NbXI6PWZv8XLkMHP80swkTXCmSPPyHudla60h0Y=)
3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: +s3RfgfZleOkFSX6tECNHJYojBeQ3ve3IeKnyvn0+N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151
Validity
Not Before: Mar 28 23:48:40 2025 GMT
Not After : Apr 4 23:48:40 2025 GMT
Subject: CN=67e73558-6bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:fe:73:f0:03:20:a8:c3:ce:7c:e2:f8:59:
0f:d4:33:53:27:fc:61:f8:13:fa:f4:a2:64:b1:d2:
93:58:f8:fb:52:3b:fa:47:38:15:7c:0a:a0:4a:01:
30:4e:ca:9b:87:7d:90:6b:55:e4:05:7f:a8:11:e2:
a6:fa:64:c6:b9:da:50:78:1c:df:ba:5b:9e:64:d3:
d6:8a:4d:0c:b0:72:f5:bb:7c:bc:bd:3c:ed:ad:1e:
1d:21:91:b6:e8:cf:69:27:16:f8:54:1f:08:e4:70:
cf:39:5f:75:f6:bd:14:9d:74:18:c6:4b:aa:b4:4e:
b1:88:b3:05:fd:57:82:e5:5c:2c:db:7b:a3:b6:70:
23:df:13:95:34:91:b3:d2:3e:ae:18:70:7a:6b:cf:
8e:23:53:b3:81:06:3a:08:a5:95:6f:7c:1f:b8:5e:
1b:e9:58:9d:a2:6c:01:00:cf:98:31:59:f4:dd:53:
78:ef:b1:2c:bf:0e:08:b5:86:6e:4c:3f:ae:fe:12:
b8:b7:05:51:36:83:79:d9:3b:ab:0b:e9:ce:ad:3b:
23:a8:a8:e4:8d:b5:05:cf:8c:04:49:c0:94:79:9f:
dc:09:eb:1e:b6:cc:3c:70:5a:5f:b6:6b:d6:07:59:
5d:f9:b6:43:70:58:72:6f:7c:00:9f:df:c0:28:80:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:F5:FB:10:09:70:1E:CE:BF:31:65:5C:9A:31:0E:0E:FB:D2:75
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:bc:60:ff:09:1a:7a:30:e6:8a:e4:5e:fa:0e:40:4f:8b:6a:
19:35:f9:b9:64:f8:39:5f:50:d4:4b:6c:64:e5:a4:5b:cc:c4:
90:fe:10:fc:57:d2:68:7e:ae:86:7e:ff:81:ae:af:05:db:92:
5a:ef:43:43:3e:cc:f5:3b:06:0f:6a:f9:ee:21:55:18:5e:78:
aa:0f:10:5c:ef:75:3b:ca:d6:a8:6f:d4:bb:14:94:84:c6:b6:
72:90:91:e4:b5:a0:b2:cf:c9:a4:b9:2b:3a:db:8c:3d:61:39:
6e:ad:fe:e0:3d:d8:01:4c:3d:97:3b:2c:06:6a:24:fe:26:8a:
29:90:0f:b8:02:33:5b:9b:00:90:6e:12:b9:7e:da:42:e1:c2:
d0:81:58:e4:f9:9d:e9:3f:2f:91:82:f7:3b:3c:d6:49:1b:2a:
5a:4c:a4:e1:13:e0:d0:f0:ae:8f:84:63:b1:7b:75:f4:e7:d8:
18:d8:92:bd:12:c7:e1:37:27:e4:c9:f4:f0:7e:e3:5b:c9:7b:
eb:af:b7:63:cb:27:4b:ea:31:8b:a2:2a:f0:48:32:e9:53:0f:
22:b6:19:ef:08:bc:41:51:04:49:e7:8e:c6:b5:7a:34:44:cb:
69:eb:81:95:bd:10:18:c3:75:30:da:a7:d7:b9:91:f8:d7:fa:
be:1e:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:26:23 2025 by rpki-client