Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: G9Q9WMwIQV9gX1lqvBRiln6uWgC9tkezj8C7ys6UJ9g=
Subject key identifier: FD:CA:19:C1:A0:F8:6D:DC:EB:D6:E6:07:67:00:79:23:17:A1:46:E7
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 34C0
Signing time: Fri 28 Mar 2025 14:57:22 +0000
Manifest this update: Fri 28 Mar 2025 14:57:21 +0000
Manifest next update: Fri 04 Apr 2025 14:57:21 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 22OficwL6tPv+7LYGWuqTZXxjgcWi41w7Lrm2qZbiAE=)
2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: GdpPqk3j46qrhM/D3Q+zjZqlqm9OzVhbyylENAX11Ng=)
3: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 5arC7pafcKh/AcWsnn6ZMn4yInbZRBna+RKiehfd8iA=)
4: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: xpjctOic9ALUbvMpVasWFZFNE3OfU+88qrN9oKY4+Dw=)
5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 5S03I75+hNJBuUJ5fNzxs9YO5CLy34Di8bLlb2dNGpY=)
6: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: LZzUQOcRmtmL+1vVju87h7++WY3DSavtT2Wpvh36ohE=)
7: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: syWvSLG7GaKla/rfCIba4Fb9KHufM9emZCvug3k1Tm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978
Validity
Not Before: Mar 28 14:57:21 2025 GMT
Not After : Apr 4 14:57:21 2025 GMT
Subject: CN=67e6b8d2-b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:00:5f:84:e3:05:25:f3:09:53:d5:e1:69:
2c:d8:be:66:54:fb:3f:1a:ba:6e:48:81:c7:5a:ce:
1f:cc:f0:66:4c:e2:55:0d:86:7c:4b:59:08:c2:68:
9e:03:ee:02:b5:ef:1d:3a:5a:04:1d:2b:65:91:06:
23:ed:29:65:ac:78:e8:9e:44:5d:27:29:56:b6:c7:
47:a1:a8:eb:6b:31:be:8a:97:7a:42:c4:c2:ef:ec:
61:24:25:08:5c:3e:a7:1d:ea:12:53:4d:00:fd:0f:
63:35:19:73:23:08:97:55:65:9c:7f:e9:7c:ed:8c:
e4:49:20:77:81:74:ad:96:a5:d9:54:b2:32:63:a6:
32:f2:fc:af:c8:80:b7:ef:73:91:52:2f:c6:49:b3:
0a:1e:c8:3e:4d:d0:96:b6:cc:03:f1:32:f5:e2:e1:
25:25:84:6e:d3:bf:b1:50:fd:4c:fe:4f:f9:12:f6:
5a:5f:c5:98:e6:c7:db:a8:58:17:c8:00:bd:6d:86:
4c:00:b9:8d:d5:75:be:4a:60:93:2e:ec:98:e7:9f:
0c:64:c3:84:34:a7:b0:3c:52:f9:26:c7:fd:b9:af:
7e:d2:03:9d:4d:1a:ae:7e:5e:de:7a:5e:9e:1e:01:
6a:e9:1a:d9:60:e2:1a:a8:c3:59:eb:44:bb:91:03:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:19:C1:A0:F8:6D:DC:EB:D6:E6:07:67:00:79:23:17:A1:46:E7
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1c:ab:27:5d:55:99:60:9f:14:4c:0d:d6:c9:2c:05:e5:1a:
57:36:71:73:93:d5:f7:a6:5e:ab:5b:05:b5:a5:f4:39:d5:95:
c8:8a:8c:3e:8c:87:58:3b:2b:dd:77:b9:a4:af:be:cd:6f:c4:
d1:8c:9c:89:61:b2:e4:48:86:50:de:6d:d8:f5:b3:f9:75:a9:
b7:97:ac:6c:96:f2:74:ea:83:16:f7:9d:17:65:a9:6b:d4:9e:
d7:c2:d0:1c:8d:0a:51:0f:29:2f:56:7d:d2:8c:40:84:dd:31:
3a:0e:5e:11:ee:31:77:4e:46:9c:ed:9b:e8:8d:39:07:78:e8:
9a:f3:e3:73:b0:fd:17:1a:b0:4a:da:98:b2:fc:bb:2a:ec:e0:
86:6c:01:1e:93:6c:53:42:ed:b9:1c:dd:cd:e6:11:27:80:ec:
a9:ab:83:f6:06:49:41:0e:56:4f:2b:f0:05:45:80:15:bf:98:
90:4e:91:2b:0d:b1:71:e3:30:ae:ed:92:43:e9:82:39:3b:35:
82:22:f7:18:11:07:92:5a:70:97:1c:8a:78:d1:9b:50:e9:5f:
1c:51:b1:ef:1a:a7:64:67:b6:b1:53:36:f4:1f:42:0c:a6:3d:
61:8d:12:45:30:af:11:40:38:2d:72:30:82:b6:d5:2f:09:01:
ac:fe:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:12:48 2025 by rpki-client