Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier: eiH2FAr9hTtPr/ywJLTFP24bAaEYJgpGQUHKRoA3HhU=
Subject key identifier: C0:7E:02:C4:C0:E5:B8:7C:C4:40:15:3D:54:D0:67:24:89:E7:AD:85
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial: 078E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number: 0788
Signing time: Fri 28 Mar 2025 21:35:08 +0000
Manifest this update: Fri 28 Mar 2025 21:35:08 +0000
Manifest next update: Fri 04 Apr 2025 21:35:08 +0000
Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: Y22kysNmJsCNOP67tYvNcvGSgHHyGEv80zZI7EzZKnE=)
2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD3FB
Validity
Not Before: Mar 28 21:35:08 2025 GMT
Not After : Apr 4 21:35:08 2025 GMT
Subject: CN=67e7160c-f1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:23:36:d4:4a:47:10:e6:e4:ff:b8:23:0a:
d8:a6:55:1b:45:49:75:a9:5d:66:c3:2c:13:e8:2c:
40:29:a2:f8:dd:09:ca:73:22:18:b2:82:cc:73:71:
98:31:aa:06:87:1a:66:0f:9b:a2:57:7c:a5:5c:05:
06:9b:1d:a7:9c:7d:62:74:27:22:b4:aa:32:10:30:
5a:42:9d:92:1b:25:b3:85:a1:4e:7f:c8:f8:69:fd:
f3:8e:89:8d:2a:f4:48:fc:71:99:86:c4:18:0b:44:
8d:31:ec:f5:d9:12:de:67:ce:a5:fa:28:5a:27:f7:
a7:47:2d:64:7f:ef:a7:00:1f:d4:b0:86:2c:68:9b:
3c:3b:4e:44:d5:f3:91:c3:91:f5:75:1d:5c:fa:ff:
9c:c5:2f:53:f3:70:2d:98:72:e2:53:6f:49:dc:a7:
7e:68:60:f1:dd:cd:02:b3:a6:cc:68:b1:13:0a:3f:
82:85:92:8c:84:39:d8:d7:38:94:fc:f1:69:af:6e:
b0:a2:61:64:2a:d8:cb:d9:16:18:30:19:32:10:0c:
8f:ce:1a:34:d0:a0:ff:3f:0a:fb:e9:c9:67:c2:7b:
f3:fe:50:55:36:44:7e:ff:13:e2:ce:be:d8:c1:f7:
a2:d9:c2:c4:de:9b:2f:fe:14:48:2d:97:b2:b1:0c:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:02:C4:C0:E5:B8:7C:C4:40:15:3D:54:D0:67:24:89:E7:AD:85
X509v3 Authority Key Identifier:
keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b9:06:15:ab:01:fb:ac:97:c6:8b:28:6d:93:b5:89:ad:2f:
f8:5c:ed:31:57:f7:1d:25:11:d9:ef:ba:e8:6d:15:fa:04:a0:
87:c3:bd:20:d7:d6:4b:34:7c:0a:ca:13:18:a4:a1:bd:b9:3c:
eb:dd:22:c4:95:7b:af:f7:ba:bb:f5:fc:2a:35:e0:5a:40:c7:
1d:a4:62:39:c1:4f:c0:4f:59:b2:17:aa:7b:7c:ac:60:77:fc:
d9:74:42:d2:6c:f9:23:61:50:c1:0e:a6:a4:c9:b9:e3:0b:c9:
ca:36:b6:8f:c6:43:80:b9:01:78:e9:11:77:04:94:48:a7:85:
42:c7:e7:40:36:82:ae:b5:43:ca:a0:75:10:44:92:6b:b9:fa:
5a:f8:46:94:65:2f:05:d5:9a:cf:7e:4e:97:50:c6:8e:18:56:
34:ae:21:1b:04:e6:99:b3:f8:71:be:57:8b:b1:35:b5:2a:b9:
26:7e:48:55:8d:7f:94:55:2d:5c:3c:fe:8f:59:73:53:0f:1c:
ec:f7:00:22:e7:83:13:65:14:44:62:c6:2a:91:97:f6:6c:0c:
2e:f1:df:94:7e:86:07:e3:ee:5d:ad:c4:95:74:7f:23:da:e3:
0b:bd:7c:2b:b0:b4:c0:b1:08:34:3f:a7:20:3b:80:1c:94:f5:
f8:df:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:04 2025 by rpki-client