Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft
File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json)
Hash identifier: l7BmBMrZtu8hU0X288p+0IcnX2VAyWixIkKvNoiiX20=
Subject key identifier: 0E:83:07:12:AD:4F:7A:67:75:3E:4F:2C:D7:45:51:B5:16:FB:F2:81
Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4
Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4
Certificate serial: 061B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft
Manifest number: 0618
Signing time: Fri 28 Mar 2025 23:02:49 +0000
Manifest this update: Fri 28 Mar 2025 23:02:49 +0000
Manifest next update: Fri 04 Apr 2025 23:02:49 +0000
Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: VpgtQYPIDMVwcExgw4w4A4FxG+OHtGWwDSYo4M35WZI=)
2: 4179AAF0011111F083725446C4F9AE02.roa (hash: Xzs1XHWlFEfF6WrK0eTZDv2ieAflcHwBqgLNzvmzLEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39D
Validity
Not Before: Mar 28 23:02:49 2025 GMT
Not After : Apr 4 23:02:49 2025 GMT
Subject: CN=67e72a99-9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:14:0d:82:72:4e:83:58:02:95:4c:73:65:
9e:9e:44:6e:8f:f2:9f:f2:b4:b8:02:be:c9:80:5c:
3a:2e:b1:6b:5e:50:59:cd:e1:98:a7:31:be:8c:c6:
53:b0:a5:c3:ef:c3:b3:52:f0:3d:7a:0a:08:c8:de:
fa:9b:c8:e9:ea:2f:4f:9d:13:a7:b5:c1:b1:45:12:
2c:16:f8:d8:15:1f:85:c9:55:89:6d:1b:51:94:24:
f8:ce:17:0f:1b:5f:f8:73:02:64:78:07:57:2d:43:
1b:d1:f0:d7:1e:79:2f:19:f1:72:cf:73:c0:7a:ab:
2a:30:92:e3:14:58:48:f2:59:95:d1:71:ec:9c:26:
6f:7e:8b:d4:9f:49:f7:93:a3:58:22:a9:ce:47:6e:
33:96:fb:09:24:2e:09:e6:84:6f:a2:81:ab:0b:d1:
2c:24:98:b8:0b:47:3b:db:fc:1f:4f:95:71:b5:9b:
40:ff:12:5b:11:7a:35:a7:61:c1:8c:10:6b:2f:95:
ec:87:b8:ac:f1:d1:10:fd:ad:43:e1:77:ee:4c:e6:
58:67:4e:27:36:9f:7f:08:31:95:ff:9d:d4:b2:be:
0e:6f:b0:ed:9c:0a:1f:26:9f:77:ea:e3:77:fe:79:
e0:01:9c:ad:83:d9:2f:60:c5:6e:a0:88:9b:23:6a:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:07:12:AD:4F:7A:67:75:3E:4F:2C:D7:45:51:B5:16:FB:F2:81
X509v3 Authority Key Identifier:
keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:8a:73:e0:dc:ca:35:cf:1b:ce:ec:58:41:16:2f:0d:8d:
3a:0c:6f:e9:01:99:54:4e:4a:e3:47:e7:b4:bf:a7:69:39:66:
9d:5d:6e:02:6e:9a:d7:d3:c7:5c:de:41:cb:d6:17:b8:46:8f:
ee:d6:5a:6b:a7:f4:df:f1:dc:ed:d3:8a:a3:e0:ef:29:65:58:
ee:9f:82:72:58:a2:8c:be:61:c5:f5:ee:bb:9d:ea:53:81:ad:
f3:ef:0d:68:d2:2d:80:60:dc:1a:da:c0:5d:ff:49:f6:34:c4:
98:4c:ca:2b:10:2e:6a:1c:2e:25:57:42:16:bd:b7:c8:59:a6:
04:89:9e:a6:e1:8e:12:c7:1d:ae:84:19:1b:d3:97:4d:78:11:
30:0a:56:16:6b:c9:27:8a:51:66:0c:88:7a:c5:ba:1c:15:13:
74:55:f5:c4:74:f3:37:a7:bd:2f:01:75:da:94:06:4f:89:7e:
41:9b:4a:4e:7b:ba:76:05:d4:0d:1f:f3:72:37:f1:e7:8e:12:
cc:44:84:72:46:c1:e9:a0:21:68:b0:47:76:b6:29:b3:e7:4a:
24:02:f2:c8:f5:37:87:5a:6a:6c:e6:f1:a1:7d:3f:02:af:83:
7c:3e:bf:35:33:9e:31:3c:a5:bd:c6:3d:86:49:59:be:1a:bc:
46:a1:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:00:48 2025 by rpki-client