Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json)
Hash identifier: X6cL/YhqTqI+5TRZrBEm4gyQN5ZHLKnDUW0W9jfzZVk=
Subject key identifier: 3C:94:CF:FF:96:10:1A:6E:A5:74:A9:59:40:CF:0B:4F:47:30:97:2E
Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
Manifest number: 012F
Signing time: Sat 29 Mar 2025 03:58:50 +0000
Manifest this update: Sat 29 Mar 2025 03:58:50 +0000
Manifest next update: Sat 05 Apr 2025 03:58:50 +0000
Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: ct8S1OEoGvzC6cKjFqiAG4kk9ou0dttCgU/tql5TeZM=)
2: 78CAEF00404711EEBE56794DC4F9AE02.roa (hash: LjB+g92HCwppfWiC4D7Vha1hvTw5esNjOr6rwAvYW2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5
Validity
Not Before: Mar 29 03:58:50 2025 GMT
Not After : Apr 5 03:58:50 2025 GMT
Subject: CN=67e76ffa-1623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:4a:eb:b5:e4:99:2d:e4:9f:05:78:82:7b:
3b:39:53:ce:d3:b2:a9:b4:02:f6:01:cd:76:79:d2:
fa:cb:0d:59:01:e4:5a:a5:64:4b:f0:d5:10:85:d8:
75:69:4e:99:93:9a:2e:c1:50:02:aa:c8:a5:15:10:
aa:02:38:5e:ba:2e:90:f3:4e:76:27:5a:5e:d6:6c:
d5:23:44:b7:74:c6:1b:9a:78:0d:53:0c:dd:27:a4:
99:77:6e:21:d9:f4:96:42:a6:e2:22:ca:df:36:b9:
da:3a:2e:37:b6:38:bd:b6:8c:db:35:ae:4b:36:fc:
f6:3a:b9:06:68:f9:5f:8a:ac:c1:e1:20:4b:3a:34:
a5:af:02:a7:7d:e5:04:9e:83:b5:07:46:4d:6e:95:
e4:1e:12:4b:ae:dc:71:ed:b5:f6:a5:c2:8b:10:4c:
91:cb:68:2b:08:48:5a:bb:5b:0e:16:c6:1b:10:d2:
53:89:3e:e3:63:f6:90:46:87:26:c1:a1:a0:c8:3e:
44:02:ed:f7:7d:6f:b0:e6:e2:5e:d6:2a:f7:3d:60:
ac:72:be:39:2b:4c:e0:be:9a:3c:8e:16:93:ff:bb:
db:90:e4:94:43:44:74:2d:4c:6b:bb:31:59:f8:a7:
cc:0e:7d:47:6b:ae:cb:37:48:3b:74:52:32:72:62:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:CF:FF:96:10:1A:6E:A5:74:A9:59:40:CF:0B:4F:47:30:97:2E
X509v3 Authority Key Identifier:
keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:f4:63:3b:6f:6b:0d:cb:1e:32:62:bb:85:4c:e5:b9:40:
8d:36:75:37:9f:ac:6a:10:f9:75:01:f9:ab:f7:64:0d:93:60:
09:e1:48:a9:2e:8a:10:2e:ee:09:0c:54:6a:fb:64:77:77:ca:
5a:a3:e8:f5:01:f6:bc:f3:14:ba:45:9d:90:d2:d0:d2:fc:f9:
d5:3a:b5:38:d2:c2:f7:4f:69:67:34:35:f1:70:fa:ee:ac:21:
33:88:e1:22:84:27:e7:62:b8:ef:cc:91:bd:18:60:06:a2:03:
7d:6b:bf:ab:11:ef:64:c2:68:1a:1e:58:a0:35:49:43:a0:30:
ab:3b:17:df:32:27:ee:85:5b:97:12:1a:f5:c6:b1:69:20:74:
cd:6a:13:73:15:25:f0:c3:4b:78:e3:bd:57:2a:85:c6:6f:06:
8f:02:49:78:72:49:67:90:c0:75:2d:49:0b:fc:e4:c7:95:f1:
ab:a6:67:1e:fb:fe:6d:97:6f:c9:68:40:ed:50:8b:a6:1a:d6:
51:b6:29:ec:5e:1b:0f:61:0d:9f:80:66:85:5d:1b:4d:7a:1d:
83:5a:a0:d1:57:d7:14:99:13:2f:7c:63:59:e8:21:3a:91:d9:
3e:7e:a6:14:f9:7c:6d:3f:0b:41:c7:b8:a2:be:91:37:f8:94:
62:06:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:20:58 2025 by rpki-client