Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
File: ZmruIMmoyx9DEkGPHiBXqoprxPs.mft (raw, json)
Hash identifier: gftfvQHC7UI59UUEh0KE9LDhOF77Wj8WxmlBmLq5U30=
Subject key identifier: 04:C8:AF:7A:06:0D:63:04:23:5A:1F:2F:D8:3E:12:09:28:CC:51:BD
Authority key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
Certificate issuer: /CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB
Certificate serial: 03C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
Manifest number: 03BE
Signing time: Sat 29 Mar 2025 00:54:59 +0000
Manifest this update: Sat 29 Mar 2025 00:54:59 +0000
Manifest next update: Sat 05 Apr 2025 00:54:59 +0000
Files and hashes: 1: ZmruIMmoyx9DEkGPHiBXqoprxPs.crl (hash: kxa7gDypSaTwyoDsWcBkd9U6ueqhrbrc2SjgdC7uQyk=)
2: 9B3FD9D2C18E11EF837CF725C4F9AE02.roa (hash: T8pN1fQRsM53LcwYRpi1oxrrg7t8ioozd5kHfEUOQF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9FC0
Validity
Not Before: Mar 29 00:54:59 2025 GMT
Not After : Apr 5 00:54:59 2025 GMT
Subject: CN=67e744e3-e5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:7e:2d:16:91:04:9f:8e:64:25:a5:41:bb:
6e:08:bf:0d:a7:f2:ec:76:54:bb:5e:29:d0:c1:b5:
31:32:e5:03:22:62:03:ff:e1:a7:f0:c6:98:14:9a:
fd:0b:06:69:64:c8:0f:a2:44:3d:f2:f6:94:11:da:
b9:e9:6f:05:25:cb:e9:4f:92:ec:24:e5:39:ff:21:
91:07:04:d6:d2:77:7f:d0:3b:6f:7f:17:77:a6:7a:
09:57:1c:71:5b:b3:c1:f4:66:ef:9b:36:e5:e2:59:
d5:1f:4e:98:3f:65:6c:70:b3:ac:85:ef:3f:a6:99:
38:5a:10:39:75:31:d6:2e:eb:cc:5a:9f:7f:67:2f:
02:95:12:17:b4:a3:ff:05:df:12:e4:b8:f2:d7:08:
26:90:e7:07:12:a8:cc:3a:47:65:14:dd:cd:44:cc:
f7:1b:ce:4a:ce:9a:54:92:cb:54:74:f3:c4:e0:c6:
aa:1a:a5:2b:85:e7:f1:83:76:d6:a5:b0:31:eb:55:
98:23:23:f2:2a:90:d0:70:77:0e:3d:1b:a3:e1:7f:
83:c2:a9:c0:68:1a:31:0c:0b:28:0f:13:96:1c:e1:
92:59:6d:f5:1c:57:20:ec:90:c9:2a:5f:f0:28:c5:
bd:d5:95:5c:c1:1e:c3:ab:85:50:6f:42:a2:94:39:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:AF:7A:06:0D:63:04:23:5A:1F:2F:D8:3E:12:09:28:CC:51:BD
X509v3 Authority Key Identifier:
keyid:66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:1c:b5:f5:e2:e9:25:53:ec:bc:74:dc:b1:92:f9:84:07:
96:0d:fc:4d:9b:40:b8:36:37:88:10:93:dc:12:3f:8b:24:db:
f9:b2:37:db:cc:69:b9:61:1c:73:2d:e2:fc:92:d7:7e:7e:b7:
8a:9b:5d:eb:44:df:45:8a:2d:73:52:61:db:fe:03:ed:3e:e5:
be:f8:a6:b4:2f:1d:69:f9:43:0f:2b:ce:26:9c:56:7c:4a:98:
43:0b:9e:ee:66:0c:93:87:c8:53:b3:83:8c:fb:38:7f:ee:cd:
b9:97:27:94:51:20:dd:5c:79:70:8c:61:6b:20:e9:bf:ec:d3:
d4:57:83:3f:f4:83:b4:f6:2b:b8:95:4d:19:4d:00:83:5d:3b:
04:f0:1e:d5:51:42:20:4c:ee:d5:27:82:4e:4a:f9:eb:ba:32:
68:0f:59:6d:48:75:5d:aa:64:c4:7c:d3:16:15:f6:8a:2c:82:
65:c2:e8:f4:70:e9:e0:98:d9:46:fd:32:3f:f7:31:ab:36:a5:
1e:d8:14:e0:fe:c0:6e:cb:5e:22:71:1c:98:4a:9e:b8:92:b4:
0a:19:ed:5a:9f:d3:95:58:63:33:f5:ad:8c:08:a9:96:50:be:
41:a9:29:cf:f6:53:ff:c3:9a:a7:59:6d:dc:f8:e6:85:05:ab:
21:43:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:36 2025 by rpki-client