Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json)
Hash identifier: Lz+t+w9MQeUM0RCpJxPIXcKlOMN1qwKTc8CrGyux320=
Subject key identifier: 7B:12:1E:F2:0D:90:9B:69:5D:71:76:58:16:FF:76:EB:3C:C2:B1:CD
Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
Manifest number: 1D
Signing time: Sat 29 Mar 2025 07:13:26 +0000
Manifest this update: Sat 29 Mar 2025 07:13:26 +0000
Manifest next update: Sat 05 Apr 2025 07:13:26 +0000
Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: wmooZw2GeexXQzW57g7VlCK3gsqeEgHEBipv2Gsy6go=)
2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: h0Bd3mrZsqytRvgmEj0DxUL66b35/lpEECIlTQlJZwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEC31
Validity
Not Before: Mar 29 07:13:26 2025 GMT
Not After : Apr 5 07:13:26 2025 GMT
Subject: CN=67e79d96-6168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:f6:6c:14:04:7f:42:00:a3:85:13:f3:88:
01:af:8e:54:a2:69:cd:e5:2e:84:85:e4:0a:28:83:
47:ab:6d:2a:94:3a:fb:2c:ec:a8:54:9f:e5:3c:66:
5f:e8:e9:08:ec:b7:ae:ad:c2:d5:10:3d:72:45:35:
44:0f:f3:7d:a2:17:58:ff:0a:a3:d2:82:10:59:3c:
e0:0a:b3:82:a3:86:3f:00:69:d9:a6:ef:af:13:c2:
a5:60:fa:e9:d8:de:e1:76:bd:28:44:9f:89:7e:3b:
fc:b8:b0:ad:08:b1:c8:7a:58:6a:e5:8d:9d:a2:a0:
74:d8:20:b4:70:7f:6f:1d:40:bd:c0:da:4e:e2:28:
38:b5:41:14:6c:f2:ac:ef:7a:81:5d:35:11:13:bb:
82:3e:b9:64:07:b9:32:61:9f:be:e6:48:ae:66:6b:
00:84:45:a0:ac:44:34:e0:d4:9a:6e:da:c5:98:20:
db:05:ba:0e:94:55:03:ca:94:32:ea:bb:58:b1:db:
04:34:5d:9c:2d:1f:12:5b:11:82:e4:22:4f:51:e5:
8e:89:9b:38:ad:f7:26:1a:5f:07:84:00:cd:94:90:
ce:57:ea:6f:c2:2b:36:da:4a:7a:8c:ea:fd:4f:f3:
dd:92:83:9d:f4:84:b5:6f:67:27:c3:b6:5e:41:96:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:1E:F2:0D:90:9B:69:5D:71:76:58:16:FF:76:EB:3C:C2:B1:CD
X509v3 Authority Key Identifier:
keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:cf:77:5d:b8:ac:18:a1:03:37:71:9f:6d:7e:26:21:94:20:
99:42:ff:40:57:1d:bb:b3:80:92:31:57:55:13:24:ee:33:78:
9c:7b:ae:08:30:c9:99:37:cf:09:b3:92:4c:32:07:66:03:a8:
c6:04:c0:69:cb:cd:f5:2e:64:52:f0:0c:22:00:ec:f8:2a:6d:
24:02:97:0c:f5:a4:91:88:88:3f:a0:07:46:ed:8a:a1:86:93:
29:0d:ce:19:3e:92:d4:79:9d:0c:95:45:60:7e:16:d5:71:9a:
3e:ea:5e:39:d5:24:b9:ef:00:b5:82:31:a7:50:c3:5b:3a:39:
1d:14:e9:e9:65:79:f1:e3:9e:a2:62:1e:08:d2:47:f2:2b:0b:
2c:7a:37:e2:ef:c3:d5:0f:1b:6f:23:d2:d1:5d:8a:c7:89:b3:
f4:1d:62:b2:62:2b:76:b0:fb:d8:ef:73:b1:8d:04:13:58:f3:
f8:1e:6f:f2:b0:ed:17:4c:af:d1:14:c2:f8:8d:ee:53:8f:4a:
b8:ef:22:bf:08:f2:cd:89:c5:64:c9:a9:24:f2:04:92:2a:76:
99:75:51:ef:d7:a7:15:cb:8d:6f:6a:74:cb:1a:2d:79:9e:5c:
fe:cb:21:2c:4c:09:38:8c:93:79:bd:ba:5a:a6:7a:81:28:5e:
5a:61:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:28 2025 by rpki-client