Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json)
Hash identifier: aYsdhNt3QX9G4DqlxHFFVSd59buV8f2T9jVY6q6F4AI=
Subject key identifier: BB:8D:EE:FC:1C:2B:05:B5:9F:41:95:09:B7:DD:49:5D:FF:F1:7F:9B
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial: 345A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
Manifest number: 3451
Signing time: Fri 31 Jan 2025 14:36:08 +0000
Manifest this update: Fri 31 Jan 2025 14:36:07 +0000
Manifest next update: Fri 07 Feb 2025 14:36:07 +0000
Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: CMHw6wDXltBQpI0+uh1YFiJ8U6yOLS2eIyv/eec1oX8=)
2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=)
3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13402 (0x345a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Validity
Not Before: Jan 31 14:36:07 2025 GMT
Not After : Feb 7 14:36:07 2025 GMT
Subject: CN=679cdfd8-c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:41:18:88:cb:00:ca:f2:21:9a:44:f7:83:
30:df:b0:7b:b9:42:2d:b2:dd:24:22:b3:c4:dc:a1:
4b:d0:6a:d6:65:4c:f0:f0:19:00:4f:91:df:a5:af:
bd:a6:1a:12:5c:26:aa:ef:07:ff:12:fd:4e:3b:46:
f5:e2:7d:b4:f9:62:04:e5:0e:91:79:66:ea:9d:95:
b1:a0:64:ab:ed:41:c5:71:3c:39:f8:f9:39:95:65:
9e:70:d3:41:a5:2c:cd:4f:e3:d8:e5:e4:4d:c4:94:
8d:c8:34:72:29:c4:1a:2d:33:0d:43:dd:17:0f:6e:
b7:2c:f8:b9:07:01:2e:c9:ae:81:8b:0f:6a:43:3d:
bb:b8:f8:93:b6:e2:fb:39:13:b0:1b:f6:0d:df:53:
23:97:85:21:d6:97:a7:92:3b:c5:70:3b:fe:86:ad:
e0:11:d5:08:6d:3a:d0:3b:d6:ea:aa:ec:3f:de:e0:
2c:0a:22:09:24:dc:c6:6b:2f:73:c3:13:db:3b:a2:
8b:97:44:53:46:30:28:86:c7:45:31:4a:5c:59:47:
39:6a:3d:9a:74:ea:c3:ed:3d:b4:c4:a7:66:6a:e1:
c9:5c:ae:9e:08:a9:3a:e9:68:d2:15:ec:81:62:a5:
26:5c:e9:15:08:51:34:b0:b1:9e:c3:b2:aa:cd:48:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:EE:FC:1C:2B:05:B5:9F:41:95:09:B7:DD:49:5D:FF:F1:7F:9B
X509v3 Authority Key Identifier:
keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:66:31:66:98:55:f5:3f:74:7e:41:37:b0:37:9e:70:66:24:
a6:30:7d:cd:89:98:87:4e:d5:42:e5:f5:6d:c2:ee:35:25:3d:
81:cf:1d:63:23:7c:a3:09:8a:1c:2b:96:1c:1a:8d:36:b3:2a:
52:d1:b2:8c:4a:49:a1:85:6a:c0:af:28:11:8c:6b:19:9f:37:
bf:79:5f:75:01:a8:3d:6f:e4:3d:bb:ac:0a:ed:3e:e4:25:b6:
cd:62:82:a1:5c:cf:a6:c5:5a:b3:d9:bd:ad:dd:09:fe:09:3a:
ad:28:d6:fc:2c:93:76:a2:70:55:b2:5f:72:25:22:e6:c0:75:
63:ba:c8:9e:2f:b2:e7:d0:44:e5:5f:ee:63:96:5b:fe:a5:c0:
10:5f:f1:6e:56:0e:5b:90:81:28:b7:94:65:8c:37:a6:d1:90:
97:a2:52:dd:05:56:4b:86:40:f0:90:d5:6a:35:93:f4:bb:02:
16:b8:42:fa:71:21:03:4b:ce:ff:a5:a9:bf:71:68:f9:24:23:
70:f5:b7:06:de:16:d1:d1:3e:a6:c2:fc:27:fe:9b:73:01:d3:
5c:7b:92:2c:bd:d6:76:a2:05:f0:69:c8:80:a3:e3:53:dc:da:
06:cf:fb:75:c8:5c:5a:62:8c:81:e9:0c:de:28:81:b2:1d:41:
9f:0b:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:01 2025 by rpki-client