
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json)
Hash identifier: qTKl9gFmPGS5BhVRmhu57Edx5BWUJvgjz6LOVbXO/oM=
Subject key identifier: 1F:FD:CF:00:4F:D1:E7:DE:FD:DB:AB:F9:29:55:65:65:0C:A6:2C:91
Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA
Certificate serial: 0C7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
Manifest number: 0C62
Signing time: Fri 28 Mar 2025 18:31:34 +0000
Manifest this update: Fri 28 Mar 2025 18:31:34 +0000
Manifest next update: Fri 04 Apr 2025 18:31:34 +0000
Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: e8+YSL11HdUwuGFeof0fHvptCPKho3JEOnFi+MWXuu0=)
2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=)
3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2364
Validity
Not Before: Mar 28 18:31:34 2025 GMT
Not After : Apr 4 18:31:34 2025 GMT
Subject: CN=67e6eb06-9938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:15:3d:a6:b3:86:87:00:2b:32:eb:2c:eb:
c0:83:fd:16:6c:c1:40:77:7d:0d:cc:6a:40:17:e1:
55:14:54:58:f6:f3:4f:b1:f3:a9:e1:14:5b:05:36:
76:38:94:fa:6a:c5:5e:8a:a7:f3:18:3a:10:f0:2d:
37:ff:1f:9f:92:91:28:f0:13:8b:3e:5f:00:c0:9f:
0b:eb:40:eb:b5:80:e9:de:c0:e2:ae:96:bb:9f:b8:
5b:14:d6:2d:33:c2:0a:d5:5d:79:c4:d4:99:ca:e0:
33:8c:c7:70:9f:7f:22:1e:55:6c:a6:aa:06:20:80:
54:54:46:ff:6b:87:e5:aa:03:e4:a2:c1:8e:e4:61:
e5:36:b4:f9:a2:68:58:e9:d1:0c:07:2c:62:3c:57:
0f:8f:9f:11:de:ec:33:e8:4e:0c:ad:17:0d:35:91:
93:22:67:92:f8:62:1a:4e:9e:eb:69:24:e0:c0:e8:
3f:7d:a6:dd:5c:d8:f4:ad:74:49:65:e0:6a:17:3b:
f9:95:47:d5:9e:2a:2a:d1:1a:25:ab:05:bb:66:47:
97:20:10:0a:8a:c9:9f:37:e8:45:02:a1:41:34:8f:
d9:9a:cc:85:e7:dc:8a:9a:bd:2a:a5:83:d6:0a:f3:
93:bd:4c:43:39:87:4c:5b:d8:07:8c:8b:a0:e2:14:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:CF:00:4F:D1:E7:DE:FD:DB:AB:F9:29:55:65:65:0C:A6:2C:91
X509v3 Authority Key Identifier:
keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:50:e4:a7:0e:8c:62:66:0b:2a:73:c1:3f:67:c8:2c:fd:eb:
1f:4b:00:48:2f:d7:e5:dd:da:f2:9e:44:2b:37:23:ae:09:71:
a3:a2:f1:f3:25:88:1a:48:79:bd:c5:77:7e:60:3a:bc:a3:46:
5f:6b:38:72:55:13:0e:36:f7:46:69:0b:cd:f1:da:58:d1:c1:
fc:f3:96:70:0f:93:f2:91:02:18:ec:c8:7c:f4:ae:f5:60:24:
ff:1b:12:05:f0:ac:73:4e:fb:f7:0e:b4:48:11:a2:ed:a2:6d:
7e:5a:6e:d5:10:d4:53:66:bd:c1:7a:5c:88:59:4d:b5:2f:9a:
2e:fa:b8:b9:76:34:a7:50:eb:b0:62:7e:51:a9:75:ee:d1:58:
c5:54:6a:42:5f:9a:14:0a:c5:83:f1:dc:e2:d9:bd:36:08:aa:
11:70:2c:ad:92:df:97:41:3e:48:f4:9e:10:15:8f:24:95:3f:
d5:a9:e8:4f:12:f2:b5:b1:b4:b8:68:6c:99:7a:6d:41:61:c2:
e5:b0:4e:88:98:61:e7:4f:f8:50:aa:5c:be:19:12:26:02:fc:
80:c5:ff:14:a1:cd:a0:6c:e8:1e:d5:bf:ae:db:c1:9a:aa:7e:
74:e4:30:a8:dc:0a:d8:d7:51:36:3f:78:08:79:3a:7c:22:e3:
82:74:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:30 2025 by rpki-client