Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: v+2x++J7BuP/qkW8g4YDCxUI/NlRhVQ7THSlT+pfAHM=
Subject key identifier: 57:CB:C7:B7:76:60:F0:C1:56:AD:CB:B6:1C:52:46:80:5E:7B:20:75
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: 49
Signing time: Sat 29 Mar 2025 06:42:36 +0000
Manifest this update: Sat 29 Mar 2025 06:42:35 +0000
Manifest next update: Sat 05 Apr 2025 06:42:35 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: InEC23pyKNypd1aVwf5iWK6FtxeIFaLzxchvc+OGv9I=)
2: E77278DCCE6311EFA284E23EC4F9AE02.roa (hash: DpN2zcLRAjgpftEu2Dp5lPwXsj2XxFGFEx1c1E4KncU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537
Validity
Not Before: Mar 29 06:42:35 2025 GMT
Not After : Apr 5 06:42:35 2025 GMT
Subject: CN=67e7965b-38f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:b8:45:e3:b6:80:e9:6b:a0:a4:60:2a:bc:
a7:73:d1:f9:24:5a:33:ad:95:d5:5c:fd:ce:81:9b:
27:4b:05:89:69:80:5e:55:9e:d6:6e:1d:aa:c0:f3:
cb:09:ab:8e:9e:ea:5d:3b:f1:bb:69:04:44:ee:ab:
14:47:20:d7:c2:97:72:5d:dc:b5:6f:b3:6c:b1:ed:
d3:f9:eb:68:48:92:96:37:1e:ad:38:5e:3d:43:75:
e5:09:69:9e:7d:47:d1:dc:d2:7b:27:fe:e7:ac:50:
9b:3e:e0:45:89:05:88:fb:ce:69:1c:3a:c1:87:e2:
90:70:4a:a6:d2:34:b2:5c:37:43:e4:5e:e5:48:c3:
9c:a0:21:ab:82:23:bc:b2:40:bb:53:a6:59:b9:88:
64:bf:04:ce:54:8a:7c:c0:4a:b9:23:21:1d:7a:bb:
85:3d:03:e0:4e:46:37:5b:e7:70:ba:f9:17:b7:29:
8a:f2:01:de:62:c7:24:f9:4b:a1:3d:59:ef:6a:bc:
ed:1e:59:c3:92:b1:43:25:3a:58:5c:d1:66:4f:96:
f4:4a:e2:08:59:51:1e:90:b2:a7:60:d8:fc:06:65:
47:03:da:c8:38:70:cf:e8:67:6d:fc:87:f3:25:a2:
ac:1e:b8:c2:24:0b:ae:cb:eb:98:66:98:bc:a1:35:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:C7:B7:76:60:F0:C1:56:AD:CB:B6:1C:52:46:80:5E:7B:20:75
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:83:a5:27:46:aa:bc:fb:25:20:8c:24:29:d8:4c:59:16:54:
3b:6b:fc:bd:75:a4:91:47:23:ec:b8:b8:1b:e3:e4:f1:4e:3a:
d2:3e:5e:47:24:2a:af:93:41:a0:be:03:f9:bf:43:7f:e2:07:
d3:0d:78:6d:de:0b:60:10:69:05:eb:3b:a7:4f:24:2d:20:d2:
9d:c2:40:d3:3b:db:0b:b0:1b:de:e2:b5:2f:09:af:1d:8f:1c:
55:84:c1:47:40:24:02:0b:3c:65:a6:51:52:01:20:02:95:83:
79:5f:77:d2:f0:10:9f:a1:48:6b:f1:5b:69:ef:20:1a:4e:9b:
29:84:ea:84:fb:36:a1:d1:09:7a:14:f2:89:03:2a:0e:db:f0:
f5:eb:95:84:f2:82:65:ea:7f:3a:55:d1:f6:19:81:3b:61:6b:
2b:2e:c1:df:a3:5a:38:45:86:76:f0:01:ba:8d:c7:42:cd:a5:
6b:32:a4:02:7e:20:99:c6:5b:2c:88:6b:73:f9:30:84:ab:79:
bc:70:3a:e8:84:06:0a:2c:fd:27:09:d3:92:cf:99:20:12:51:
20:44:ba:7a:f0:da:5d:9d:ac:09:80:38:07:54:ea:73:26:3c:
1b:67:4c:48:cb:f2:17:6d:26:c5:08:63:32:71:07:35:b6:00:
f2:ca:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:32:23 2025 by rpki-client