Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json)
Hash identifier: wfJLFg9uZLkub8Lzpylue7qO5mezFedQb+kqkoH/LRc=
Subject key identifier: 76:04:0B:59:B9:DB:38:EE:5D:6D:4A:20:FD:29:5B:7B:E5:A3:8F:0B
Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0
Certificate serial: 0BB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
Manifest number: 0BA9
Signing time: Fri 28 Mar 2025 19:08:40 +0000
Manifest this update: Fri 28 Mar 2025 19:08:40 +0000
Manifest next update: Fri 04 Apr 2025 19:08:40 +0000
Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: MWhlvjPALqtR9L8PuyzvUer2FVWQxo4GIZlcA6Cnqas=)
2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: 5w244W1bD1whgankX2pR9uug+6BH9EUGNcEqCnlbObE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3869
Validity
Not Before: Mar 28 19:08:40 2025 GMT
Not After : Apr 4 19:08:40 2025 GMT
Subject: CN=67e6f3b8-4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:21:29:84:5f:65:45:27:ce:e8:7f:57:5f:
ec:3d:68:dc:80:c3:5a:6f:15:f3:12:a6:8c:ec:6e:
4b:6b:3e:f1:2d:0f:d8:e2:6f:8a:bc:e4:dd:aa:ee:
7f:24:21:73:db:99:21:39:78:cf:51:40:66:1e:d3:
3f:a5:5b:88:6f:93:dd:8c:48:01:1c:aa:81:4b:bf:
b0:ed:af:11:f8:68:25:6c:eb:b2:68:04:f0:dd:9b:
fb:81:64:07:0b:5e:5e:f6:82:5e:83:4a:85:e1:70:
64:2b:61:98:ba:a5:2c:08:f3:31:65:64:38:0e:f6:
a9:7f:f0:54:ed:52:e8:15:5d:a7:03:93:b3:90:68:
53:6d:97:76:1a:4a:67:19:ac:ad:e6:09:32:b8:19:
f2:9f:f8:c1:f2:af:da:b4:da:aa:b5:33:93:ab:2f:
82:b3:6e:7f:b6:5c:e4:a9:e2:5c:c0:25:6d:34:5a:
b1:c7:ba:53:a4:25:5e:31:2f:5b:d7:2e:33:57:ca:
88:16:6a:e4:4d:ae:ec:69:c6:58:7d:86:fd:e3:cd:
bf:a3:6f:b8:cf:8d:67:a1:43:22:1f:21:a0:d6:e1:
0b:0a:e2:60:e3:fc:fb:6f:cc:fe:9b:c5:1e:ec:9c:
dc:85:06:b6:91:3a:cc:4c:bf:18:f0:d3:4e:ca:b0:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:0B:59:B9:DB:38:EE:5D:6D:4A:20:FD:29:5B:7B:E5:A3:8F:0B
X509v3 Authority Key Identifier:
keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:5e:fc:70:93:54:cb:61:3b:2e:25:dd:6a:ff:ed:4b:93:b8:
79:75:43:29:c8:9d:bd:d7:5e:af:e4:1f:c5:53:99:5b:10:67:
32:3e:69:6d:98:0c:0a:54:c1:f4:9d:d8:96:b7:35:f1:e6:73:
b0:44:09:33:42:4b:65:b2:a4:cb:d1:9f:54:ea:b3:b4:62:ff:
1a:4b:05:5d:2f:1f:18:30:45:c9:b3:36:0b:c2:7c:a0:f2:4d:
fb:00:8a:28:4d:47:6d:c3:cb:fd:96:02:ac:3a:a1:b7:bb:32:
1f:30:0d:ec:76:14:bd:b7:30:67:7d:d6:c7:85:50:6a:86:12:
62:4e:68:67:09:f6:ab:0f:df:db:9d:2c:97:b4:92:7b:ed:65:
a2:92:3b:0c:67:c6:91:1b:09:92:71:63:62:8b:ac:f9:3d:f8:
25:c9:7b:94:4c:8d:fc:e5:a1:7d:cf:69:38:2b:25:90:20:05:
b7:07:c9:79:51:6f:c1:a3:d9:0f:ad:65:1f:53:8d:69:d3:ea:
f4:51:d3:8e:90:35:f4:0e:4e:72:06:a7:55:df:ce:0b:92:8b:
5b:f3:54:42:41:bc:4d:75:f8:9b:fb:5a:fa:a8:e6:02:e1:02:
de:46:d2:37:7a:ad:eb:72:a8:4a:16:e5:76:16:1b:06:ed:03:
55:ea:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:17 2025 by rpki-client