Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json)
Hash identifier: r7mMo/uoDioQjfo0qq3H4MorTz2bE4Yfj/FqGihtHBM=
Subject key identifier: 24:F2:A4:89:F2:C5:82:52:C6:88:34:4B:C4:72:C7:ED:CC:1E:D1:D9
Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55
Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
Manifest number: 7D
Signing time: Sat 29 Mar 2025 06:00:22 +0000
Manifest this update: Sat 29 Mar 2025 06:00:21 +0000
Manifest next update: Sat 05 Apr 2025 06:00:21 +0000
Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: tBPPn4KVbubweA+iGsbMhOML7v2IBMEEQOz2ubkC2bU=)
2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD6D4
Validity
Not Before: Mar 29 06:00:21 2025 GMT
Not After : Apr 5 06:00:21 2025 GMT
Subject: CN=67e78c76-e32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:84:2c:c9:80:28:9c:61:7e:c8:09:39:cf:
cc:69:93:31:97:a9:c0:1c:a5:6f:56:81:e0:1a:9e:
db:fd:7e:ff:1e:1c:7b:d4:bf:f5:76:1a:7d:71:a7:
e6:ae:9a:63:8a:a9:74:e5:28:13:08:40:6d:c4:df:
3a:66:4d:61:8f:e4:83:38:b7:f9:01:8e:56:7b:99:
9a:7a:a2:96:48:00:bb:fe:f6:c4:5b:55:02:20:e8:
2c:d4:fa:37:6d:e2:f8:3a:3e:f9:8d:28:75:b2:34:
9e:e6:4b:41:67:17:2b:aa:28:4a:a3:c7:0d:bb:02:
b4:b7:cc:64:e5:f7:e5:74:0a:28:c6:29:e2:ce:21:
09:9e:4b:87:60:5e:c2:07:e1:56:c6:30:e9:81:3d:
77:83:89:15:9c:18:60:1e:b8:41:0a:e2:0b:6f:ea:
1c:f2:db:33:33:9b:a3:c6:9b:20:d6:ab:ac:a5:b2:
26:9f:0d:b1:40:99:7c:82:e1:fe:89:bc:62:0e:94:
b6:f8:96:3a:5e:36:1a:4d:e9:67:dd:ed:56:4c:56:
62:a6:dd:fe:9b:9b:2e:47:34:93:8b:43:10:02:14:
50:20:68:a7:a9:3c:df:56:53:23:e8:f8:26:2d:29:
ca:19:6f:c1:2a:c2:af:41:f3:ae:14:a6:f4:c5:46:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F2:A4:89:F2:C5:82:52:C6:88:34:4B:C4:72:C7:ED:CC:1E:D1:D9
X509v3 Authority Key Identifier:
keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:36:d2:ce:18:d6:9c:fb:be:54:f1:6c:59:28:25:8d:d4:a1:
e6:13:0a:59:ed:a3:94:e1:2b:3f:6a:c9:d9:83:51:48:e0:3c:
d9:3c:88:61:48:25:96:c6:df:5f:69:fd:8d:2d:54:06:c8:07:
bb:d7:6c:c8:52:cd:50:2d:47:b3:44:ce:b7:cd:b9:7c:29:bb:
d5:8c:03:47:bd:96:41:ad:be:c6:4b:a3:4f:f4:6e:8f:3d:3e:
6f:8c:0e:74:c6:61:9d:8b:de:07:0e:fc:de:c0:22:c4:57:41:
a7:06:7d:89:33:b0:97:c4:62:18:69:04:5b:20:42:2f:e2:1b:
c5:f5:5f:d0:f6:2f:39:1f:d1:9e:2a:ce:b5:f3:21:4b:a1:49:
59:76:94:a4:36:04:d8:1f:8b:07:28:86:c7:33:85:5f:bd:bd:
04:90:ba:e8:f3:28:c3:a9:26:08:da:27:8d:a3:a1:46:40:c3:
00:ed:d0:1a:2c:81:4f:1d:43:37:10:d2:92:a0:d1:d3:2d:14:
a8:b5:a3:cf:bc:f1:28:7c:98:13:57:14:3c:d9:bd:f2:28:ef:
60:17:74:56:13:df:cd:91:2c:94:be:fc:46:2b:c0:3f:16:31:
9f:6d:f7:0e:cb:d4:15:89:27:7d:3d:05:e9:5b:0c:70:6a:6d:
ae:64:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:55:52 2025 by rpki-client