Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier: elzvfT+KYtUpSJxlC4Oryzmv2YTBXB2qcO0F4ZFcjkA=
Subject key identifier: 10:1A:85:C6:8B:55:0F:74:20:C1:89:35:41:01:D1:AC:28:AB:3A:6C
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number: 0347
Signing time: Sat 29 Mar 2025 01:17:26 +0000
Manifest this update: Sat 29 Mar 2025 01:17:26 +0000
Manifest next update: Sat 05 Apr 2025 01:17:25 +0000
Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: XAwWuUByDVpd1RoXGPJWhONceqoA59q7HPpIE03MhbM=)
2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 95fJ03bboSIkCN0DBXqmsgAZgIidDy4lfSJOy1nx1H8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39A
Validity
Not Before: Mar 29 01:17:26 2025 GMT
Not After : Apr 5 01:17:25 2025 GMT
Subject: CN=67e74a26-8acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:b1:31:93:a3:49:50:22:54:80:d4:aa:50:
65:10:57:64:1f:ce:29:c6:b2:37:52:07:aa:df:2f:
d4:99:ca:8f:e4:44:da:2c:6d:28:cf:5c:72:3f:ac:
d9:93:3d:3d:64:4e:1f:37:ba:e6:17:de:99:e2:24:
4a:93:95:f9:4f:77:c4:24:90:d4:3b:48:85:2f:c8:
0c:be:5f:36:d0:e8:fa:4a:e5:a2:84:e8:72:81:6e:
80:ae:80:5f:31:b5:7a:cb:7e:d3:f6:a6:d4:fa:cd:
b2:01:e3:c9:ce:62:ce:d3:99:e6:75:68:62:48:11:
60:ab:32:21:b6:67:24:d6:ce:02:da:b4:97:c3:37:
e4:4f:42:a8:37:81:0f:fd:83:72:06:2d:26:5c:67:
bd:a0:09:4a:3c:8c:da:f6:74:75:0a:0d:98:63:4c:
2a:8d:7f:e0:a5:77:cd:f2:dc:12:bc:4f:61:87:cd:
c9:11:84:c7:ae:cd:fd:47:65:5e:9b:c6:31:ae:ff:
f3:c5:d6:7f:7e:f9:e6:b8:88:f0:0a:80:4c:38:2c:
f6:8c:61:f5:93:06:eb:33:9d:2f:98:9b:7a:be:22:
85:db:bc:27:fb:9e:da:39:04:e6:a8:8a:f1:43:e1:
a6:f2:4a:3c:95:70:d2:c4:5e:3e:39:04:90:9e:24:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:85:C6:8B:55:0F:74:20:C1:89:35:41:01:D1:AC:28:AB:3A:6C
X509v3 Authority Key Identifier:
keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3f:1a:b0:70:dc:72:a2:35:fc:42:db:b1:aa:c0:de:7b:90:
3d:d3:dc:42:8a:1d:00:af:bb:fa:61:05:a6:6e:db:26:19:6f:
05:6a:33:54:32:c6:0e:05:08:2a:78:8c:45:02:fb:97:d7:c4:
5f:f1:3a:c0:1f:da:82:ce:ed:e3:2e:39:a0:75:c8:3f:7f:fb:
e9:94:61:25:55:c8:dc:b9:3e:13:01:4f:4d:44:bf:c4:8f:fa:
77:98:f3:68:31:5a:21:6d:05:59:55:f6:dd:96:39:f9:d4:4c:
0c:c0:3b:18:39:03:ec:5f:20:5c:42:25:83:70:2c:63:41:1b:
db:d9:90:f0:c6:3e:ef:1f:7a:f0:34:8f:c0:53:35:bc:b5:23:
2d:a0:47:c5:55:ac:b6:72:e4:48:64:8f:23:3f:99:3a:62:69:
7f:e5:c6:a2:a9:69:a9:31:be:3a:77:88:50:46:63:d0:4e:4e:
bb:dc:6b:a0:5a:ae:ba:68:2a:06:e2:b4:d8:f5:1f:07:da:83:
1d:a4:86:f7:9c:44:1a:88:e9:b7:b1:c0:8f:c9:5e:2f:a7:b7:
93:72:b5:75:26:47:53:ca:80:9e:61:85:14:d8:b2:8a:ba:eb:
c5:06:29:75:f8:a1:c0:d5:cc:a7:c2:85:e8:1b:d0:f1:8e:f2:
3d:04:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:10 2025 by rpki-client