Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier: HoaRcx6pTidRoQpf2x3lSCFsHANkVWHf/Rdl0FPh7Qc=
Subject key identifier: 62:07:84:95:B3:22:A6:DC:EA:18:15:93:92:9A:8B:8D:BD:A2:88:24
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial: 34C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number: 349A
Signing time: Fri 28 Mar 2025 14:27:43 +0000
Manifest this update: Fri 28 Mar 2025 14:27:42 +0000
Manifest next update: Fri 04 Apr 2025 14:27:42 +0000
Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: 5m9c1opxZCtzf2jzb8oWNVHTDw6odQfx4v9w19Py17s=)
2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: mhSDrNTd50cS8wLIGVZl7Ze3yEkifRrR2iMHOlgICfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13513 (0x34c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6DD8
Validity
Not Before: Mar 28 14:27:42 2025 GMT
Not After : Apr 4 14:27:42 2025 GMT
Subject: CN=67e6b1df-2f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ea:7a:98:47:a5:10:d3:03:f8:54:e5:53:
6d:4f:c0:51:34:f6:b2:dd:bf:d5:aa:d5:95:bd:8a:
8b:2b:ba:d0:6d:aa:f2:0d:0a:74:c8:90:11:19:65:
d5:33:53:14:6d:c6:4e:c0:e1:ab:83:b9:fc:ef:aa:
36:b3:b1:e0:c2:d5:ae:ae:f3:26:7a:f4:35:9f:32:
23:81:80:ec:3a:ff:27:76:1d:cf:0c:f8:f6:e4:06:
33:c5:a0:dd:76:93:3b:aa:b3:fe:64:35:0d:c9:bf:
13:84:7a:34:e3:8d:ef:93:55:a2:82:1d:59:bc:08:
7f:e7:a8:98:81:22:58:c1:e5:5e:a5:50:1b:4b:0e:
95:cb:44:e9:d1:4f:71:3f:f8:92:a6:e1:75:be:aa:
93:02:a7:75:d7:64:43:58:16:5c:38:70:21:07:3c:
77:4e:96:38:6e:7d:d0:7f:93:a8:a2:73:73:d1:8d:
26:c1:da:e2:50:ac:43:bd:d8:de:af:8b:6c:e7:dc:
44:cd:b8:55:ef:02:38:18:a2:f4:11:55:59:31:c2:
4e:f8:22:7b:6d:4a:08:c3:c5:6f:b7:1c:bc:5a:09:
11:2a:63:98:6f:f5:2b:d2:58:3f:0d:94:f4:45:83:
53:08:21:21:f9:7f:82:ee:5a:05:cc:06:27:fa:6c:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:84:95:B3:22:A6:DC:EA:18:15:93:92:9A:8B:8D:BD:A2:88:24
X509v3 Authority Key Identifier:
keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e5:82:81:10:d3:66:75:43:45:2a:a3:e4:05:e3:45:33:3e:
30:56:fc:dc:e1:c2:dd:91:b7:72:e7:fc:2e:6d:c1:be:8c:bb:
3c:82:2f:8e:98:6e:67:ca:7d:bb:ca:f6:b4:26:23:07:00:1f:
cd:e5:92:1e:73:d5:ea:2c:e0:6b:4c:de:bd:ce:91:c9:a2:24:
c9:85:d9:3e:ba:27:0f:95:d7:1c:31:08:0f:2e:54:b8:3c:41:
c2:79:b3:20:7f:07:f9:40:3c:5a:be:86:c6:df:0b:3e:45:c3:
7e:e7:3a:fd:83:2e:3a:53:8a:62:7e:f5:7e:96:b9:68:31:a1:
3e:80:aa:07:a7:89:f6:52:18:56:76:f7:1a:f3:73:48:c4:55:
0e:b2:01:4e:b6:09:82:7c:1b:19:48:b4:f8:8e:a0:c7:1d:66:
54:00:c2:b8:91:bb:bb:f5:c4:68:0e:6e:93:88:d5:3d:e4:46:
94:c4:96:ce:37:64:a2:c5:55:f2:66:00:40:97:1c:f2:cf:c1:
93:ce:e9:a9:7e:c2:10:10:99:48:58:64:94:0c:d5:de:5f:74:
53:c0:fb:bb:b8:1d:d1:3e:c2:54:a8:5c:b4:df:2f:f4:2f:1f:
9e:13:d4:7c:b2:ce:55:94:e0:13:71:2e:3c:5e:60:a2:a5:c0:
29:87:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:51:32 2025 by rpki-client