Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json)
Hash identifier: 7kUM+55LByxpf8b4h2uJYdjctpWs6Sj1vpElp8digwI=
Subject key identifier: 61:15:CF:BE:19:04:44:55:2F:01:D7:4C:8A:DC:E1:A8:6A:48:A2:DF
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
Manifest number: E9
Signing time: Sat 29 Mar 2025 05:00:46 +0000
Manifest this update: Sat 29 Mar 2025 05:00:45 +0000
Manifest next update: Sat 05 Apr 2025 05:00:45 +0000
Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: 37jSNJXpx97dfxEWHtXFzk7gOIInDU+c98S8sQ1sFiE=)
2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=)
3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62
Validity
Not Before: Mar 29 05:00:45 2025 GMT
Not After : Apr 5 05:00:45 2025 GMT
Subject: CN=67e77e7e-dede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:b9:7e:d8:ca:f8:6a:a7:bd:6f:fe:cb:15:
55:6e:f6:be:66:9f:29:fa:eb:64:cc:fe:d7:af:e2:
e9:58:ce:15:ae:66:4c:bd:40:32:25:77:74:55:11:
da:35:e3:12:6c:f3:c0:9d:9c:fd:73:56:0e:6d:d0:
57:77:99:c8:42:41:76:91:bd:4d:82:07:5e:ee:e7:
39:23:fc:bf:d9:59:20:2a:fd:4c:55:97:79:9a:6d:
5f:7d:bf:0d:00:6e:95:08:3d:a8:b8:af:2c:cf:f7:
d0:16:4f:1b:12:29:3c:85:48:3c:d8:f7:24:3c:cb:
a0:94:22:6f:69:24:81:01:0a:f1:99:aa:57:ca:4b:
08:58:4b:46:2d:27:79:51:85:31:44:b9:a9:bd:5f:
3e:06:28:43:e3:e6:de:25:24:90:d1:95:d3:be:98:
98:3f:9c:6c:24:f1:23:80:84:c6:61:99:d9:8d:b6:
13:28:b5:81:d4:7e:cd:8a:85:d7:f2:d5:71:61:f1:
53:96:2e:c0:1e:fb:4e:b8:a4:64:ed:cf:3b:60:ef:
35:9b:fe:52:0a:17:80:bf:3c:ad:70:c5:7e:17:7d:
54:ae:c6:64:89:5c:a8:09:ee:3b:be:ef:d7:a6:63:
4d:a5:f3:c1:d7:2f:2c:7e:05:ee:d0:14:bb:61:e3:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:CF:BE:19:04:44:55:2F:01:D7:4C:8A:DC:E1:A8:6A:48:A2:DF
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:3f:25:2d:55:18:0c:f4:bf:8a:40:c9:7e:d0:49:b6:d5:
db:81:21:89:8a:d4:9f:b0:2d:c2:a5:f3:f5:0d:9f:aa:61:98:
bf:41:e0:81:68:50:7a:d2:1f:d7:8e:36:67:f4:f1:bc:1b:de:
99:83:c7:91:e7:ae:2f:a2:85:c9:53:89:93:f1:69:f7:f9:25:
9e:24:cf:50:f8:77:38:4b:82:dc:a3:28:91:4a:76:9b:15:6a:
33:05:69:b1:84:bd:9f:24:e5:5f:ae:54:1b:7a:f0:40:59:f8:
02:50:eb:50:71:ee:10:aa:ed:70:c8:84:bb:72:8d:6b:5d:6a:
7f:2e:09:77:34:2b:35:b0:8c:44:70:0e:fa:8f:5d:6a:a0:c7:
01:bc:bd:42:a5:2a:7b:15:3a:b8:b2:44:b5:4c:11:2c:bf:b4:
28:47:1a:0e:1e:9d:c0:ca:cb:7c:d8:12:34:a3:5c:22:a4:17:
ca:14:53:70:4c:cb:2b:70:79:83:78:31:e3:7c:a5:3b:98:2e:
e6:65:fe:cb:59:24:c7:82:92:d0:59:e1:9b:41:f0:3c:64:1e:
c7:1c:3a:17:9c:e2:27:0d:f1:09:4d:d5:5c:4e:63:1c:cb:a6:
48:12:70:29:cd:3a:fa:58:5f:20:bd:7a:94:fc:11:8b:44:ff:
1c:62:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:27:10 2025 by rpki-client