Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier: d4p7BToy8RbSo0Ru1YMqVlpnP3LCRtFWkuGef2bvdwU=
Subject key identifier: AE:6F:D3:F8:88:9D:AC:24:86:5D:24:F8:E5:B8:A3:B9:EA:42:8C:55
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial: 1164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number: 115C
Signing time: Fri 28 Mar 2025 17:21:51 +0000
Manifest this update: Fri 28 Mar 2025 17:21:50 +0000
Manifest next update: Fri 04 Apr 2025 17:21:50 +0000
Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: 0ZXv75UlSpbF4t3B8x9c+8feLJqIXgia+Q0nfmZYZhI=)
2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: leXjljNrFgUPywu1Fh/An2qOclMc2UjOvRA+isA8p/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4452 (0x1164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7BD
Validity
Not Before: Mar 28 17:21:50 2025 GMT
Not After : Apr 4 17:21:50 2025 GMT
Subject: CN=67e6daaf-6a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:b3:22:2b:1b:bd:a5:b5:03:d4:e1:9f:d9:
16:b2:f5:49:e4:56:67:35:37:16:5b:05:72:4a:e8:
19:62:8a:00:ae:1a:3d:05:ab:3e:4a:40:a5:11:8f:
7c:9d:9d:0f:df:58:e1:d1:32:d8:2d:67:fc:79:b4:
c6:e7:aa:2f:be:fd:2a:ee:61:ba:97:94:b2:a6:5f:
26:6a:43:00:11:5f:04:07:83:96:80:53:04:84:af:
ce:c0:00:5f:df:23:75:34:47:45:1c:ca:c3:ae:c5:
4e:f0:40:71:a8:38:01:5f:49:5a:2a:25:3d:3a:5c:
08:7a:26:fc:f8:34:cc:0f:fb:97:42:6d:36:2d:28:
9e:a1:77:4a:1b:a9:36:04:ed:85:f7:25:56:18:4d:
6a:ab:9f:49:65:8a:b4:cb:98:78:b3:f1:0d:e2:78:
20:47:26:c9:8a:e8:65:59:b8:9e:58:c7:25:b2:07:
d5:57:9c:07:e6:f0:6d:5e:b6:dd:56:69:38:1d:65:
56:3a:21:b8:3a:b1:6f:07:ea:21:b8:a8:cf:c3:c6:
1c:7a:d8:41:e2:58:24:71:92:b3:67:11:a0:70:a8:
80:30:8e:46:9f:ba:f5:ac:a4:42:4f:a1:8e:61:b3:
78:bd:a8:f1:62:5f:6b:1d:be:d3:d5:92:01:0f:07:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:D3:F8:88:9D:AC:24:86:5D:24:F8:E5:B8:A3:B9:EA:42:8C:55
X509v3 Authority Key Identifier:
keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:ab:d9:68:22:e3:32:74:a4:86:d6:2b:c6:10:ca:eb:17:
ba:16:0b:7e:ed:3c:2e:d8:16:8f:17:b1:cc:ab:14:9d:75:d3:
51:95:c0:52:fa:ff:d9:6c:bd:4d:a7:c8:a0:39:70:ed:40:a9:
11:72:d8:27:40:ee:d7:99:91:25:e9:59:3f:c5:5f:8d:17:70:
67:62:e7:c7:43:e1:63:c2:23:f2:c4:c2:66:43:a6:3b:ae:65:
a1:a3:97:0c:67:f6:53:bd:64:fb:08:25:c3:6b:84:60:e6:fc:
d8:5b:e6:36:6d:9d:2e:45:21:07:40:fc:2a:d9:53:51:05:ce:
7b:ab:61:45:9f:de:40:46:3a:e8:98:94:23:f3:bf:5b:0f:1a:
79:6e:3e:89:24:a9:af:bf:59:80:6c:2b:e5:b6:2a:5d:89:5f:
21:1f:eb:50:ef:2d:f9:fb:72:1a:b1:b0:ca:a8:57:fc:51:e2:
07:de:47:88:a9:86:52:9d:1c:7f:99:1c:81:f4:8f:c1:15:fc:
88:8c:bd:5d:50:d3:2a:64:d3:dc:59:92:8a:3b:65:67:93:32:
4e:63:4d:d3:9f:12:89:e6:22:4a:96:da:ce:1c:1a:28:99:84:
87:cb:71:e7:fe:70:ce:a8:43:1c:d3:a9:ff:03:11:07:70:ce:
0a:93:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:30:34 2025 by rpki-client