Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json)
Hash identifier: G/0jnEJVqTNy2NWA32e7a+DsIqmdlw9in8Cf/v0T6os=
Subject key identifier: 6F:98:5E:8C:E7:6C:0E:0C:EF:81:51:E8:4F:EF:5F:E4:FE:0E:28:0D
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
Manifest number: 032D
Signing time: Sat 29 Mar 2025 01:22:15 +0000
Manifest this update: Sat 29 Mar 2025 01:22:15 +0000
Manifest next update: Sat 05 Apr 2025 01:22:15 +0000
Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: r9q96LwbbOztkKr+HOzY9mPc66+WImxTe3YhaU8t40k=)
2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916593B
Validity
Not Before: Mar 29 01:22:15 2025 GMT
Not After : Apr 5 01:22:15 2025 GMT
Subject: CN=67e74b47-a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:1a:d6:b4:3d:e1:7e:d5:7c:20:90:00:e1:
bd:96:24:44:45:a7:0b:17:e7:18:70:0a:bf:fa:0f:
97:c9:2c:be:62:4f:e5:30:5b:ac:9f:87:83:7d:35:
f0:e2:7a:c7:a0:ae:3e:70:68:ca:9e:f8:9c:83:d7:
d8:0d:f2:96:c9:85:6d:f3:64:6a:5a:64:22:fa:49:
30:a4:81:ae:09:9a:fe:54:d5:f3:ba:f8:c5:d8:e8:
28:8e:1c:ed:64:3a:75:cd:6f:ff:6a:e5:be:b3:16:
8d:9e:0f:7c:89:6a:b2:c5:e7:b4:92:8e:87:f2:79:
72:ed:4f:4b:85:78:0c:59:2f:ae:be:a0:26:d6:01:
01:a0:ee:53:04:ba:a2:3c:82:09:0b:f6:ad:5a:42:
00:bc:b1:f1:9a:53:b6:f7:64:19:90:b9:89:85:e4:
a6:b5:67:6d:1e:38:ab:b3:2e:03:24:b6:aa:6a:90:
8e:a3:ad:8e:1c:8f:2c:51:2e:3c:48:70:9f:fb:a5:
82:8f:da:6e:8e:b6:18:da:0e:98:db:e4:c8:10:ad:
79:4f:cd:d7:2a:18:a6:84:2f:58:1a:28:01:b7:37:
30:ac:30:53:08:1f:97:ed:74:05:44:08:9f:ea:00:
5e:06:44:c2:52:64:df:9f:d5:d5:96:26:4d:bd:11:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:98:5E:8C:E7:6C:0E:0C:EF:81:51:E8:4F:EF:5F:E4:FE:0E:28:0D
X509v3 Authority Key Identifier:
keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:27:4b:65:81:e3:89:93:3a:7a:61:10:a3:b7:d9:57:71:34:
38:70:a7:f2:6b:c3:a7:86:2e:6f:37:e6:d4:08:4d:f3:22:5c:
f1:63:bb:28:95:45:c2:d4:7b:09:0e:85:df:d4:f1:3a:e3:dc:
9f:19:a0:f1:52:d3:0c:61:ac:be:f6:ac:cb:52:c4:44:ab:e8:
4c:c3:a1:1f:3d:a9:e2:f0:02:5e:fa:e8:f3:a1:24:0a:31:16:
66:21:d9:c0:f8:8a:e1:43:89:74:88:e4:be:6d:83:7f:4c:b0:
19:9b:9c:71:ec:e1:40:bb:0e:53:d9:be:8a:bb:a8:92:03:f6:
3c:80:30:14:ad:49:e9:bf:37:08:63:02:93:13:96:30:db:b1:
e4:6b:66:ec:2b:f0:e3:7e:93:b7:60:cc:d7:bf:e4:98:91:73:
ee:36:5f:0d:7e:c3:a1:01:7c:23:79:e9:96:a4:05:68:f3:46:
4d:4e:e8:27:f9:23:2c:84:3b:31:24:86:83:89:5b:94:0f:52:
ac:51:ec:79:e6:ce:d2:53:16:0e:30:7f:b7:fe:32:1c:90:e8:
b3:5a:5b:90:99:4b:df:ac:95:68:c5:a4:f8:9a:76:00:02:2d:
a5:03:d3:07:f9:ba:a8:42:f3:d7:a9:86:01:6e:01:10:3b:9c:
d3:16:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:21 2025 by rpki-client