Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json)
Hash identifier: 9TlmXGUDleTHbF/TFmdnDmZA4lJkL9rnlW3LdoSzGWE=
Subject key identifier: D2:9B:9F:0C:A9:4A:B9:F2:10:E4:31:1F:7F:B6:77:2C:95:FA:7F:8E
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial: 3476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
Manifest number: 346D
Signing time: Fri 28 Mar 2025 14:35:08 +0000
Manifest this update: Fri 28 Mar 2025 14:35:07 +0000
Manifest next update: Fri 04 Apr 2025 14:35:07 +0000
Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: gudGJHHQ9cIWdxU0W+hk4qYh6UQ9DiFwZPkuIUr/vHs=)
2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=)
3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13430 (0x3476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91683D2
Validity
Not Before: Mar 28 14:35:07 2025 GMT
Not After : Apr 4 14:35:07 2025 GMT
Subject: CN=67e6b39c-9be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:f3:55:0c:b8:91:a0:90:5f:01:0f:9b:07:
d0:47:a7:e0:cc:7a:d6:d3:75:45:3c:c2:f6:2e:d2:
10:05:50:8a:89:54:62:72:0e:63:4d:79:1f:76:f9:
2a:fc:be:04:70:a8:77:51:8a:a7:79:c9:e8:a8:3c:
03:38:3d:12:e6:35:1c:fa:86:c5:04:01:c1:4a:f0:
f7:2f:6f:29:9d:c3:73:b1:09:d2:07:a6:7c:a1:24:
8d:1c:40:98:a7:8a:2f:8d:c4:21:25:c8:f4:0f:ef:
74:61:4d:43:77:8a:4f:87:51:df:78:a6:8f:74:cc:
c8:26:43:86:ac:ae:a6:0a:93:ea:f5:40:4e:7f:85:
97:2e:c5:42:13:56:0b:1c:41:0c:77:15:00:ef:38:
f5:ee:90:71:7c:72:a2:8b:68:01:a9:bf:8c:0b:52:
51:a4:57:1d:f1:a0:ee:69:93:23:ba:6c:bf:63:c7:
01:7e:c7:c2:7a:26:57:c1:82:5c:18:5c:2b:0e:a8:
7c:1a:c3:ac:c8:87:99:41:a5:34:dc:fa:1e:ad:f5:
a9:eb:19:5d:1e:8b:be:01:77:d9:d0:b5:57:80:0d:
0f:2f:59:13:32:90:8b:df:46:bb:99:3f:41:4a:41:
f7:b7:e3:67:d2:e3:11:a5:94:eb:25:c6:83:bc:2a:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:9F:0C:A9:4A:B9:F2:10:E4:31:1F:7F:B6:77:2C:95:FA:7F:8E
X509v3 Authority Key Identifier:
keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:7f:bc:bc:70:be:4d:0a:a3:9f:96:f4:d2:3f:49:37:76:
87:5d:6c:a0:4b:b6:46:ea:5e:a6:52:87:c2:f3:bc:0b:b7:2c:
83:ea:15:b0:a7:d7:fb:bc:2d:41:7d:46:39:8e:a2:d1:16:ca:
dc:d8:61:97:11:f1:5c:12:0e:06:47:b4:4e:1e:35:a5:8f:49:
ab:ca:bd:de:fe:46:71:fa:cf:1c:9d:6f:d6:65:8b:d0:fc:65:
78:1a:22:ca:c6:27:f4:88:81:5c:41:1c:8a:fe:46:8d:cf:bc:
0a:39:c7:cc:77:73:30:80:53:8f:5e:9b:f0:f5:c0:77:20:b6:
7c:d0:78:9a:db:b2:1e:10:60:73:ca:fe:d3:b7:be:1c:ed:c0:
cb:fa:7a:74:58:54:28:7b:1a:69:55:03:f5:59:5b:61:6a:e5:
8f:31:f7:2f:60:25:45:30:d8:d3:c3:46:34:8c:44:df:96:d5:
1d:92:d9:62:75:20:74:85:b0:7f:0a:76:e2:49:f7:70:ac:b9:
6f:cb:dc:6d:35:59:cf:bc:49:dd:25:f9:9b:df:e4:49:7a:dc:
26:0c:d8:fa:93:68:c5:34:99:c5:8f:c4:21:e5:72:9a:09:7c:
45:09:e2:3d:53:7e:eb:b2:50:5c:f7:6d:65:e0:dc:de:aa:3d:
99:34:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:16 2025 by rpki-client