Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft
File: zHVip1iMEglcwjP9RsOxHXI91M8.mft (raw, json)
Hash identifier: 16vGZOrjFSogRiqUvttd8Rlh5xPfv6+5/+PfI6K8/Ak=
Subject key identifier: 4B:4A:89:3A:C5:A3:21:BC:05:E6:0C:21:2B:5D:BD:45:4E:2E:91:3E
Authority key identifier: CC:75:62:A7:58:8C:12:09:5C:C2:33:FD:46:C3:B1:1D:72:3D:D4:CF
Certificate issuer: /CN=A915A1D9/serialNumber=CC7562A7588C12095CC233FD46C3B11D723DD4CF
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHVip1iMEglcwjP9RsOxHXI91M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft
Manifest number: 01D3
Signing time: Tue 15 Apr 2025 01:53:11 +0000
Manifest this update: Tue 15 Apr 2025 01:53:10 +0000
Manifest next update: Tue 22 Apr 2025 01:53:10 +0000
Files and hashes: 1: zHVip1iMEglcwjP9RsOxHXI91M8.crl (hash: etQ5K4hWb5lnJW5Bwz75U9GzE0D2zvL3PX9n9veD8rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A1D9, serialNumber=CC7562A7588C12095CC233FD46C3B11D723DD4CF
Validity
Not Before: Apr 15 01:53:10 2025 GMT
Not After : Apr 22 01:53:10 2025 GMT
Subject: CN=67fdbc06-bc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:0f:ec:e4:fb:9e:fc:39:2d:42:d6:76:4e:
6a:7a:79:44:f8:43:a2:03:27:c3:2f:fd:97:f3:52:
a6:73:af:b5:e2:cb:94:53:ac:d6:4b:23:69:22:1b:
88:e8:91:d7:c1:a1:d2:a5:2a:d9:20:42:38:d4:28:
13:ab:40:e5:3a:51:81:72:70:c4:3e:e8:69:8e:d0:
89:b3:b5:0c:de:fa:fa:cb:bb:0c:9a:67:5c:17:fe:
58:ac:e0:d4:af:bd:d7:b9:51:5b:0a:b4:c8:c8:32:
3f:ce:18:d5:02:29:fe:53:8d:22:ea:51:89:9a:74:
21:4f:9b:b0:0d:65:2c:56:04:6e:79:88:f1:2a:8f:
5c:50:3c:98:fd:64:26:ad:e3:32:98:ff:ba:05:8f:
cd:ce:6c:40:a8:39:1f:c4:df:a6:27:df:f2:5c:f3:
9b:4e:58:2f:32:15:de:9d:2b:a7:7f:1d:f3:93:e7:
94:a0:ee:4b:1b:1b:d7:79:ae:78:32:6b:a4:3c:37:
12:48:ba:46:33:9b:67:9c:fa:fc:75:91:a4:5f:fe:
f2:c7:ed:c9:ed:93:6a:7a:41:32:b7:8e:b5:a4:e9:
ec:e6:aa:11:f4:ab:38:6f:f4:fd:d9:d3:01:34:d7:
96:b6:cd:8f:b8:0b:75:06:c8:53:4b:a8:45:4a:30:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:89:3A:C5:A3:21:BC:05:E6:0C:21:2B:5D:BD:45:4E:2E:91:3E
X509v3 Authority Key Identifier:
keyid:CC:75:62:A7:58:8C:12:09:5C:C2:33:FD:46:C3:B1:1D:72:3D:D4:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHVip1iMEglcwjP9RsOxHXI91M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:40:ba:ad:3c:1e:7d:08:6e:2f:86:74:53:24:a5:ce:a4:
af:aa:39:0b:88:7d:6c:cc:02:26:61:83:50:c8:a3:0d:b5:67:
97:7c:2e:a0:26:eb:f6:2c:00:bf:52:3d:1f:9a:70:ba:06:8b:
ac:6f:57:5d:34:04:26:3d:6e:13:23:f9:2c:d6:9f:1d:9c:af:
9c:2f:6f:fa:46:26:ff:f6:49:ce:7a:c1:40:5b:83:2c:13:e0:
e0:fc:9d:06:f0:4c:07:45:3a:77:68:4c:4d:cc:2f:96:ff:73:
f6:92:fe:55:77:ff:a0:1b:66:fe:ce:0e:c9:da:30:7f:18:35:
8c:80:7a:73:0c:1a:48:29:a8:f5:7e:9d:99:ad:dc:3d:2a:9b:
03:ca:46:c5:0b:0d:dd:ef:62:7d:58:c2:8f:cf:8c:5d:6d:f1:
a8:87:55:2c:8d:8d:e9:4f:5e:53:4c:e0:46:1a:ec:28:9d:ab:
e8:68:f4:73:6d:70:c0:f5:73:c5:33:3d:6d:f7:cc:80:51:23:
6d:9b:54:e2:d4:26:1f:53:56:65:d0:3c:a3:b7:01:e4:77:57:
cd:96:37:6d:4d:65:9e:db:ca:fc:1c:48:f8:24:87:87:db:12:
12:9e:ac:16:a9:48:e2:04:c8:0c:76:98:7d:00:7d:84:73:52:
8d:a5:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:05:05 2025 by rpki-client