Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
File: sZJ_E4KvyIRDDJZerSibw77GS-w.mft (raw, json)
Hash identifier: +TqX+0bk0Njwb0EKvqE+ZBrqfXzyPqRY4PzlyiOCQpw=
Subject key identifier: BB:2D:A0:2C:41:82:1A:D7:51:A1:7E:54:62:09:CA:EA:C5:2E:9A:64
Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
Certificate issuer: /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
Manifest number: F1
Signing time: Mon 21 Apr 2025 23:30:00 +0000
Manifest this update: Mon 21 Apr 2025 23:29:59 +0000
Manifest next update: Mon 28 Apr 2025 23:29:59 +0000
Files and hashes: 1: sZJ_E4KvyIRDDJZerSibw77GS-w.crl (hash: Ab1pUIi9LdIvkfwypJq3/1sl2vbxvDJ4P1ln25SteOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8F7, serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
Validity
Not Before: Apr 21 23:29:59 2025 GMT
Not After : Apr 28 23:29:59 2025 GMT
Subject: CN=6806d4f8-9c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:42:2f:9c:0e:ac:9f:d5:bd:d4:42:78:e7:
e1:a9:72:8c:62:45:c9:d0:4f:a2:f7:c2:2d:4d:44:
b3:7b:fc:1d:39:5b:36:1f:26:0c:eb:a0:73:92:14:
75:1f:00:c4:19:6f:a5:f6:9e:51:54:ac:22:89:7e:
c0:69:ab:76:47:2e:ab:d9:0b:39:07:a7:fa:1a:39:
0c:37:b6:90:74:06:18:ea:db:fc:b0:17:c7:41:e6:
cd:73:57:74:54:36:1a:4b:a5:4c:12:9e:f0:fb:42:
88:3e:66:56:32:f7:fa:59:be:4c:b5:9d:63:a3:33:
0f:8e:ea:b9:78:0b:e4:c0:d6:a2:f7:5f:d2:66:11:
58:36:46:d3:02:ee:12:3f:26:c5:97:d9:bf:f8:00:
ed:09:98:d9:c1:0f:d8:57:1c:cb:79:30:c2:77:dc:
a8:fd:13:34:10:21:85:1a:f0:23:80:bc:0d:90:95:
a0:e8:18:c9:fc:b0:00:e2:4f:bd:dc:bc:29:8c:c6:
42:e8:4f:9c:6f:c8:9a:8a:da:94:b4:5b:a5:75:70:
d5:42:a9:ec:54:d8:4e:bb:28:59:7c:ce:9e:e6:44:
50:2d:32:2f:a8:ae:e8:f3:e3:3b:48:f9:99:7a:b1:
1f:3d:e1:4c:b9:77:5a:0b:c3:2e:11:e3:27:1f:11:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:A0:2C:41:82:1A:D7:51:A1:7E:54:62:09:CA:EA:C5:2E:9A:64
X509v3 Authority Key Identifier:
keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:73:14:86:be:ef:07:c4:f4:46:ad:ec:d2:40:40:0c:68:
95:92:c8:a6:07:fc:40:29:0e:71:94:25:12:c9:2e:ba:f8:a9:
79:8f:6d:bd:65:f1:9e:b7:3f:c5:40:12:33:03:7e:95:5c:52:
bd:b4:51:73:fa:06:50:e7:e9:a4:32:70:7f:14:98:e2:f1:ed:
71:fe:64:91:ff:a3:49:cf:3f:3b:b1:70:0e:ab:e6:e3:0d:70:
cd:21:24:0c:fe:a0:27:0a:b9:b0:81:c2:89:8f:c0:3a:4e:d3:
ae:b0:52:a7:f9:15:ee:50:9c:e1:0f:be:af:b8:33:3d:b0:66:
7d:16:38:28:69:a9:e1:51:02:fa:f3:7c:b9:e9:74:3a:35:15:
ce:cb:e0:81:0d:2e:b5:da:8f:12:6b:77:cf:f4:e6:70:46:a9:
4e:e0:4b:84:53:d9:69:c9:5c:3c:09:a2:34:27:b1:1e:db:9f:
d4:23:24:9f:48:59:90:75:de:14:54:9c:f6:c7:61:df:89:29:
a9:61:5a:15:a4:e3:40:e9:11:8b:a2:0d:d9:4f:ff:a8:2e:7f:
ea:08:36:ca:63:af:29:10:ad:c0:b6:e1:6b:19:e7:02:c7:86:
d8:23:80:d1:25:7a:8e:f4:04:c3:17:6a:91:b8:00:be:20:c7:
ce:90:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:47 2025 by rpki-client