Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier: KnULxbOw6+CLUHlBCkJ46glSlAhUls3dAdBGPsmX2W4=
Subject key identifier: EB:74:E9:C1:79:4B:86:2B:FC:03:1D:0D:FA:CD:3F:5F:48:D1:3A:40
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number: 81
Signing time: Sat 29 Mar 2025 05:58:27 +0000
Manifest this update: Sat 29 Mar 2025 05:58:26 +0000
Manifest next update: Sat 05 Apr 2025 05:58:26 +0000
Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: c7w+gHPACy9SSwGpsio8fIvLXALhncsuifl5aSgLgKk=)
2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F
Validity
Not Before: Mar 29 05:58:26 2025 GMT
Not After : Apr 5 05:58:26 2025 GMT
Subject: CN=67e78c03-e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:d7:fe:ce:b7:09:9f:a4:0d:8a:46:89:36:
ee:42:68:c2:71:36:99:b3:81:ee:ee:19:c4:89:eb:
6e:4b:97:83:6e:75:6f:63:20:24:3f:af:ea:b7:7e:
0d:01:9d:40:6a:c3:e7:ba:ad:25:ec:b7:a9:39:dc:
7a:e1:7f:46:63:36:16:6a:f9:16:05:fc:8f:f1:f3:
e2:a2:51:d1:ce:1a:68:77:4c:f9:2e:22:04:71:61:
22:3d:87:49:21:22:33:b1:03:75:3a:b9:b9:85:fe:
09:96:11:30:22:ab:4d:f2:f4:74:38:f0:57:8f:de:
7c:64:0b:c3:56:b6:7b:ba:a8:1e:1e:bd:e7:da:ee:
87:94:e6:88:9e:13:db:22:e0:35:28:97:99:4e:b8:
f4:5f:76:dc:ae:d3:3c:16:7c:9a:ca:98:1b:8d:72:
ff:69:eb:52:53:c6:8c:2c:90:02:96:f9:fb:b9:b5:
e1:11:4f:31:be:74:5d:d1:8c:c7:ba:1e:5c:18:c1:
de:e6:e9:8a:88:d4:a0:39:9e:00:87:eb:3c:77:0f:
1d:db:df:67:e6:44:b9:5d:39:26:40:2d:e5:1b:d5:
f1:fe:ca:bd:f1:19:88:2a:ce:9e:cd:a0:20:12:c2:
40:27:ee:d7:f7:f8:af:9e:fc:d9:86:d1:2c:64:c6:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:E9:C1:79:4B:86:2B:FC:03:1D:0D:FA:CD:3F:5F:48:D1:3A:40
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:5a:d6:d0:84:f9:55:eb:c3:07:d6:df:00:9a:fa:0d:dc:c3:
08:f8:37:f3:99:f2:08:52:17:b0:e4:86:2d:49:41:58:6a:18:
05:2d:0f:ed:39:0e:51:90:1d:8d:2c:cb:d5:bd:a3:17:8b:ec:
27:19:db:c1:49:9e:0d:eb:9c:b9:22:d2:1e:57:16:2f:f6:ef:
fe:6a:49:bf:e3:09:03:9f:cd:92:7a:14:60:a9:a0:89:6e:0a:
86:f6:fe:35:70:cf:54:e5:12:44:d1:11:d3:70:64:74:3c:ae:
c4:ab:48:19:cc:78:80:57:7a:43:16:39:1d:3c:b9:8e:fd:a9:
2b:af:d1:08:7c:8e:68:14:ee:ae:40:12:12:0b:0a:b7:12:49:
a5:49:65:33:49:ab:16:f8:40:29:44:26:15:0c:39:db:cd:4a:
b0:f8:38:5b:af:dd:9e:5c:99:f9:b6:9a:bf:67:a0:bf:0a:c1:
f2:f4:b2:90:d9:4d:e7:a7:8c:2f:cc:ad:73:ac:5d:f3:d3:10:
d9:a8:a5:8b:1b:c1:63:33:84:22:5a:03:be:1e:cf:58:6c:8d:
d5:a3:a0:94:70:fc:5e:31:e1:fa:4b:ac:ae:0a:7b:b4:63:59:
4d:2a:5d:a3:64:11:65:78:8a:8e:30:56:36:09:7d:2f:fb:70:
75:97:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:48 2025 by rpki-client