Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
File: sZJ_E4KvyIRDDJZerSibw77GS-w.mft (raw, json)
Hash identifier: JB3KjEuMSdc5ef/gefknfhqFa8pFEBqIpoqK96ucdXE=
Subject key identifier: 01:9E:3D:21:73:28:27:DF:E4:A3:B8:49:30:ED:95:DF:83:24:FE:E4
Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
Certificate issuer: /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
Manifest number: E3
Signing time: Sat 29 Mar 2025 04:49:19 +0000
Manifest this update: Sat 29 Mar 2025 04:49:19 +0000
Manifest next update: Sat 05 Apr 2025 04:49:19 +0000
Files and hashes: 1: sZJ_E4KvyIRDDJZerSibw77GS-w.crl (hash: ORq2NTQE1rD9JyszOTtpEKp2YbB7/ZUJnaoHHt8mj88=)
2: B0A65A04B2A711EEA3E1C240C4F9AE02.roa (hash: QoBrjdE7zvAjaiSCN1er3BuillGq1x50DkwdZeeuwBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8F7
Validity
Not Before: Mar 29 04:49:19 2025 GMT
Not After : Apr 5 04:49:19 2025 GMT
Subject: CN=67e77bcf-98b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:4c:ce:ab:d8:77:6c:26:71:a0:3a:13:65:
52:2b:68:60:58:96:40:3c:c3:7f:6e:10:93:97:07:
a1:50:3f:68:2c:df:df:4c:a0:7a:1e:bc:01:7e:43:
58:57:6f:d3:13:ad:41:06:65:2f:a1:bf:68:7d:1b:
b5:57:ba:aa:85:f5:92:00:05:8c:48:31:31:ad:d4:
cb:13:e4:99:3b:c3:ea:43:bb:02:ba:4a:88:44:7b:
56:ba:92:12:9a:b5:e6:37:69:43:05:d5:df:ca:33:
f5:39:25:d0:0d:e2:ce:de:51:62:ef:40:1c:32:7b:
aa:86:e9:ea:fd:67:84:50:8f:13:f7:99:c4:db:1d:
75:a2:e8:77:a1:1b:f5:dd:fd:f2:0e:86:ab:93:b7:
a2:ab:0a:47:f0:4c:88:3e:47:cc:75:2f:f0:44:45:
19:f6:5a:cc:de:87:7e:fd:62:73:fc:05:0b:d1:16:
1b:11:57:d5:9c:10:90:70:92:7a:2a:e8:c5:3d:7c:
73:36:e1:1c:1e:45:c1:a4:76:01:36:6b:88:50:92:
73:20:21:88:13:57:cc:aa:36:8b:c9:f4:be:e4:c3:
3b:71:7b:ea:3e:19:89:70:7e:65:04:34:4d:f7:4b:
b7:84:d5:e8:f8:cd:3f:3b:91:f4:70:e5:da:57:b9:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:3D:21:73:28:27:DF:E4:A3:B8:49:30:ED:95:DF:83:24:FE:E4
X509v3 Authority Key Identifier:
keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:21:61:e0:af:eb:ce:b6:fc:a6:23:c8:b8:fd:7f:c5:73:
f6:00:5c:e8:b3:ec:9a:45:5d:0b:08:84:58:80:b5:6f:de:f6:
54:b2:d9:e8:7b:e2:c7:f3:66:6a:5c:ea:c8:a7:3e:34:f6:b6:
63:6e:48:dd:66:32:67:9d:9e:eb:87:db:d6:bd:a6:20:34:af:
f8:a6:a2:0a:6a:3e:9a:ac:5d:91:7c:7f:8a:16:37:2e:ae:80:
f1:90:c1:00:01:f5:f0:c9:42:ca:44:f9:d8:9d:19:e9:3c:72:
23:cb:f8:02:cd:20:97:50:99:77:52:0a:b0:b4:5f:19:94:b3:
59:ed:bc:b2:da:11:0a:ce:11:a6:8d:24:9b:9b:e6:64:f1:ba:
85:45:1c:d5:a9:9b:0d:75:b4:14:b3:17:fb:19:65:bc:72:6b:
35:aa:8c:3c:c2:5c:9b:3a:10:2f:b8:1d:23:bf:6d:d2:28:9c:
33:44:92:b6:4f:57:70:4c:ef:57:1e:57:78:5e:ed:9a:2c:23:
f9:8c:2b:1b:e1:90:11:af:be:17:dd:3a:36:0a:bd:0a:da:8b:
87:3f:b5:51:e4:07:7c:b3:63:ab:bd:97:4d:19:57:40:ad:ba:
9c:04:3a:1d:cd:c0:88:04:f7:59:53:98:d2:34:ce:8a:c8:f8:
95:94:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:19:42 2025 by rpki-client