Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: /+ljRfvabBYcE6p0fTeXQzUtHiyXb+QHsWLKodqXPLs=
Subject key identifier: 37:25:83:92:53:31:60:75:A0:F9:6F:A9:43:7E:D7:22:F3:BF:C4:23
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 346E
Signing time: Fri 28 Mar 2025 14:28:11 +0000
Manifest this update: Fri 28 Mar 2025 14:28:10 +0000
Manifest next update: Fri 04 Apr 2025 14:28:10 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: /SaNNPuN5lmhuRvCXZbftxoX3GijYK84A+Frj1WSD2s=)
2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: t/ROOpg/IwC6W3DYUfJyZ4y/FXhn7ZuftkL+LfoKWRk=)
3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=)
4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=)
5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: wkkagOsbEtkABMZzn1UGFfhIBhIKqyHgBeARkv/JwZI=)
6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13443 (0x3483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350
Validity
Not Before: Mar 28 14:28:10 2025 GMT
Not After : Apr 4 14:28:10 2025 GMT
Subject: CN=67e6b1fa-5b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:ff:17:b6:b2:74:9c:de:2b:90:70:47:23:
b7:94:66:d8:dd:63:a6:51:d2:7b:3d:41:17:2a:95:
48:1c:60:ac:8e:ca:46:ef:3c:cd:93:ff:f8:a5:4e:
fc:63:a6:1d:f9:88:5c:5a:97:4a:fd:9c:1b:e4:1c:
de:a0:61:17:be:6d:ac:c9:4e:03:5d:9b:85:f0:6e:
76:6d:dd:53:44:9f:5c:01:3d:87:41:ff:56:93:c4:
7d:b7:96:d5:09:ae:15:56:97:13:bd:03:3b:29:2d:
e3:bc:b1:c3:09:de:a6:9f:65:dc:53:cc:70:01:ab:
77:e0:41:ff:9f:ec:78:da:3b:ea:5d:5a:28:21:68:
4f:77:42:20:0f:7e:33:1f:14:fd:46:45:61:da:17:
7a:1f:2b:54:8d:f4:0b:22:14:bf:57:e9:a5:5c:21:
c9:d7:bb:73:54:ae:be:ed:7a:22:80:2b:38:9a:12:
48:1e:cb:31:b5:ed:9f:f6:1d:14:eb:7a:12:c8:12:
e0:65:d7:57:6c:d0:12:98:c6:ff:1b:c2:b6:2f:35:
07:cb:55:e7:14:ac:e5:e6:57:5f:4d:ac:00:96:a2:
70:15:4d:7d:39:d0:8a:c1:94:e7:dc:2a:a9:28:1f:
2c:e3:e5:99:b3:85:ec:9b:96:9b:24:de:71:ff:8e:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:83:92:53:31:60:75:A0:F9:6F:A9:43:7E:D7:22:F3:BF:C4:23
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:18:74:53:81:4c:04:3d:60:1c:66:57:8b:19:8c:61:58:e1:
d2:03:c4:da:87:e7:00:02:6d:c8:92:f1:24:92:5f:d3:a2:12:
68:8b:86:87:74:88:fc:96:f2:76:2a:26:22:05:a1:b8:79:e6:
c6:53:06:7f:a5:2c:fb:af:da:47:e4:fa:66:c0:da:5d:3c:6b:
67:4a:4d:a2:58:f7:e2:ad:16:c6:43:53:53:6f:e5:01:ea:b7:
50:2f:08:5a:b7:5d:31:db:90:03:27:fd:dd:db:cb:45:dd:7d:
7e:93:8d:9f:3f:bd:ad:98:06:05:22:28:12:fd:bf:3b:4f:f9:
0e:f7:38:96:b4:44:59:2e:24:4c:26:d6:76:84:fc:5a:bc:e9:
ce:4a:c2:cb:de:ac:fa:0e:c8:60:45:3d:1e:38:1e:08:85:cf:
d1:ab:53:55:75:cc:d2:14:62:40:be:5b:b4:05:99:ba:bb:cf:
38:bf:dd:e3:4f:08:13:21:86:d5:c5:33:a5:40:f9:6c:4b:1e:
59:7e:ba:33:c3:25:20:ce:0d:61:0d:33:43:07:95:11:4d:b2:
db:91:f6:8b:97:bc:7a:18:cd:70:c8:5f:0e:10:16:2d:c3:b2:
82:13:1e:f1:01:91:a8:a5:37:00:7b:6d:f3:5c:67:c3:a9:46:
9a:94:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:11 2025 by rpki-client