Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier: SwRSW84ShsIHP3eSiN9DN0WX1fJtBCOygJZo5n3HRcg=
Subject key identifier: C7:A6:FF:1E:6A:29:4A:64:FC:FE:32:F6:FD:6A:3D:28:61:AB:3A:3D
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number: CF
Signing time: Sat 29 Mar 2025 05:04:35 +0000
Manifest this update: Sat 29 Mar 2025 05:04:34 +0000
Manifest next update: Sat 05 Apr 2025 05:04:34 +0000
Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: 9bTCI9gMH9lhvlSaCtEdJjVflSrA7HIgqRVscUzoQxc=)
2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=)
3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913150F
Validity
Not Before: Mar 29 05:04:34 2025 GMT
Not After : Apr 5 05:04:34 2025 GMT
Subject: CN=67e77f62-a6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:9b:60:00:c7:6e:5b:14:e7:cb:54:27:99:
61:2c:f2:3c:75:a1:f1:08:7c:a9:ac:1a:c6:a3:4a:
a7:f0:4c:d6:01:b9:43:71:81:3e:91:14:f1:fd:91:
c4:39:d2:d6:65:d1:b0:1b:7c:51:a1:79:54:27:08:
ad:ca:50:12:88:5c:26:3c:ec:ac:21:0b:91:4e:8a:
9a:79:e0:75:8c:5b:2d:55:8d:09:8b:33:47:52:57:
24:b7:c2:57:e8:0d:70:10:64:76:85:2e:e3:1f:b6:
d7:03:73:c9:8c:f4:38:b3:5b:48:74:40:ac:3c:79:
70:c0:9f:29:ae:90:cd:7c:aa:8c:55:ce:70:f8:57:
09:41:3e:68:8b:72:a3:9f:b8:01:f6:6a:76:23:e2:
80:a2:d8:b8:75:3e:32:14:87:a9:99:6f:dc:0a:68:
e7:a9:44:cb:a6:a0:43:c3:f9:95:21:70:5a:37:35:
a7:57:06:f6:ab:63:99:ec:08:cb:24:61:82:c0:83:
a0:12:16:f6:8f:fb:20:0e:94:2d:e4:75:e7:34:c8:
81:79:07:62:c1:de:86:f8:f2:d3:47:aa:73:c3:5e:
f9:da:17:0f:78:28:b2:1d:ff:e1:5b:1b:d8:18:54:
23:0d:6a:2f:83:f9:a7:24:25:e5:89:cb:db:6f:35:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:FF:1E:6A:29:4A:64:FC:FE:32:F6:FD:6A:3D:28:61:AB:3A:3D
X509v3 Authority Key Identifier:
keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:60:b9:ec:c4:f9:74:45:2f:d2:6a:ba:45:3d:b2:25:8c:
0a:65:39:ca:88:bd:06:a3:b7:b5:cf:12:b6:f4:84:62:f3:a6:
0f:e4:ce:f9:47:85:46:08:45:ac:49:3b:64:7b:04:4e:51:52:
86:60:7f:0f:8b:9c:4b:cc:f0:ab:15:59:da:dc:25:a2:d5:45:
18:17:4f:2f:06:2f:11:59:ff:af:54:a1:9e:e7:02:3f:33:9b:
f6:1b:22:c1:ee:c8:f6:3a:b5:12:5e:25:32:a9:23:1c:85:16:
7a:37:bb:42:42:26:1d:0c:78:32:f2:88:e1:1a:11:6d:60:3b:
24:d1:a8:f4:09:ca:98:83:52:b9:2e:e1:a7:d4:52:4e:01:b6:
70:39:7b:06:03:22:af:14:d3:86:d5:19:7c:98:cb:f4:c4:a7:
fc:2f:c6:16:64:44:c9:06:a7:82:6b:d0:8f:f5:4f:3d:0d:60:
3c:3b:a9:39:3a:fe:26:ea:a5:f4:c5:32:b2:ef:5a:ae:4b:07:
88:87:43:1d:e1:de:42:3e:0e:78:5b:16:02:f3:80:e6:08:fe:
c9:20:9c:57:21:77:7d:c9:54:8d:09:2d:1a:61:8d:dd:df:0e:
09:1c:e9:db:86:11:1b:72:72:16:e9:ef:25:40:f6:45:98:96:
3d:e6:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:14:09 2025 by rpki-client