Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier: Kk63nzXRcdAFY0+h+NtJWSVoJtHG+vD+ox6IhfGB3pM=
Subject key identifier: BB:1A:9D:E0:56:20:1D:90:B5:92:29:00:13:1E:C5:7E:74:D4:40:22
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number: 73
Signing time: Sat 29 Mar 2025 06:06:47 +0000
Manifest this update: Sat 29 Mar 2025 06:06:46 +0000
Manifest next update: Sat 05 Apr 2025 06:06:46 +0000
Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: StJPT/ck4HISosiyvY9pI5CZ8/bCM4jSwAgJ/Y+mQAY=)
2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: ap2qykakUMtuugznllb9ElqWzxnqoH122Li4BLMbH9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B
Validity
Not Before: Mar 29 06:06:46 2025 GMT
Not After : Apr 5 06:06:46 2025 GMT
Subject: CN=67e78df6-8af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:e1:7a:eb:c8:cc:52:46:c0:23:9e:a7:95:
83:63:ae:0f:15:ff:88:05:2c:70:02:34:b6:14:25:
c6:8b:48:00:d9:dd:a5:24:fe:de:38:fe:ee:d9:4c:
5f:82:63:5f:4d:71:b4:ec:78:e0:cc:5e:e3:3c:fa:
3c:6d:d6:3f:ea:8f:a4:a4:f5:f1:97:e8:ee:a3:5e:
85:1d:20:49:36:ff:c8:9c:96:8f:a6:d0:ff:cf:e3:
ea:5c:57:00:85:0f:fa:0b:1f:3b:7c:24:9f:a9:fc:
1b:8d:e3:4a:db:e6:97:c2:4b:03:07:aa:f0:11:86:
be:96:b9:92:88:38:85:f5:1d:8d:69:93:b1:ab:97:
1b:35:99:ba:e8:82:8d:b1:1f:a3:8d:7c:ee:de:dd:
20:68:72:8b:f5:dd:28:48:7d:79:8f:b3:65:cf:69:
0a:75:a1:c2:11:cb:32:83:b0:3b:25:35:1f:5c:94:
a4:bf:4b:47:17:a6:2a:3d:fe:df:ee:9e:9e:d2:7a:
e7:5c:c2:01:15:5a:0b:8a:6f:21:5c:d5:4f:5b:27:
b3:a3:88:b9:77:8f:25:b8:2b:3f:b0:66:47:5f:18:
19:40:1a:6a:1b:1a:33:1c:37:54:88:a0:ce:58:61:
c7:1d:50:5d:95:54:2f:b0:37:c7:d6:25:36:27:f4:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:9D:E0:56:20:1D:90:B5:92:29:00:13:1E:C5:7E:74:D4:40:22
X509v3 Authority Key Identifier:
keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:aa:07:61:8c:55:fd:a7:13:1b:83:a3:31:4d:ed:a0:b5:
f1:40:50:30:77:06:46:06:5c:0f:c4:42:d2:91:cc:64:4d:3b:
70:4c:e9:07:c3:ab:5b:0b:bf:5f:05:6a:c9:c0:0a:53:08:fc:
9a:8a:ca:17:3a:36:8b:92:f3:7d:7a:32:92:ca:7e:d4:17:e4:
93:65:10:d1:99:bc:ad:bf:f8:f2:de:9d:e3:a3:01:2a:b6:11:
11:0d:0e:38:aa:44:fd:b8:4c:4f:f9:ee:be:89:75:60:b5:77:
ee:5b:7b:6d:c1:61:43:46:1d:8b:cf:19:02:0b:3d:c8:b8:84:
cd:6f:7b:73:ab:bf:b5:5c:cb:9b:d1:fa:d0:5a:dc:5f:cc:70:
0b:df:df:01:b0:d4:af:f2:04:f3:57:38:a6:ac:8c:bf:97:c8:
a4:d1:33:0c:d0:0c:0b:c5:f7:c3:82:7b:bf:fb:e0:37:00:0d:
e0:e4:cc:a8:13:c4:0d:ce:49:b2:73:1c:48:a5:7f:82:21:b8:
12:5f:1a:ed:5d:ff:b0:02:8b:9a:0c:4a:11:6a:7e:9d:b5:bc:
82:5e:f6:fb:07:29:c5:0e:48:65:bd:64:65:69:4f:75:19:68:
54:a5:9c:f1:f8:41:5c:9e:bd:71:63:91:97:bb:cc:74:ba:de:
4e:b0:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:26 2025 by rpki-client