Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json)
Hash identifier: 0m5a5E2sGxtuusUZQzLvZNKFCj+9gD7zKhGcbMazH28=
Subject key identifier: 29:D1:DF:D7:A4:3B:30:45:9C:B3:6D:C5:DC:27:1E:73:71:34:28:D0
Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 06:36:29 +0000
Manifest this update: Fri 31 Jan 2025 06:36:29 +0000
Manifest next update: Fri 07 Feb 2025 06:36:29 +0000
Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: uzIVvcugLR0FKfcNKZT+PCevIR3i5OrHqSAgUdbnN74=)
2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: zwx+U9J08Id0maPwN81wQAKGfgxb2cKuo5oynZYPQgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4
Validity
Not Before: Jan 31 06:36:29 2025 GMT
Not After : Feb 7 06:36:29 2025 GMT
Subject: CN=679c6f6d-c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:06:d4:b9:b3:46:8d:51:31:57:83:63:92:
1a:21:ca:10:8e:b7:de:31:7e:cb:d7:26:17:ad:33:
a7:1a:71:75:93:19:27:e2:f6:8b:17:ff:6a:ec:5e:
ba:56:b4:86:ae:64:ba:18:4d:88:06:1f:b8:00:d3:
39:c1:fe:f5:93:bc:4a:27:1b:02:79:de:9d:08:fd:
fe:9f:9f:15:cf:40:5e:1d:e1:81:39:3c:76:9c:ae:
56:eb:78:f2:8e:b6:fc:be:e0:f5:d8:aa:4c:ea:8f:
c1:5c:55:cf:43:42:ff:8c:be:cf:45:f9:ca:3c:c0:
bf:7f:c1:fb:26:6e:af:5e:d5:c6:2d:d4:3c:90:07:
9b:f8:dc:58:37:c1:a8:09:90:39:33:34:0a:06:53:
32:ba:75:61:84:23:68:12:2c:98:11:d1:eb:02:ae:
9e:07:c9:db:a2:37:ca:20:ef:63:b1:4e:86:04:4c:
a2:fa:1f:3a:c1:e1:b5:9c:04:3b:2e:3c:c1:4e:53:
ee:86:db:0d:54:10:dd:c2:5a:06:35:66:75:4c:73:
88:fb:e3:fc:1f:c4:d9:dc:5f:bd:e6:c2:c2:ab:09:
2c:9e:92:9e:a9:a7:35:2d:02:93:1d:fa:80:44:05:
84:7c:21:c1:7c:2d:7c:e8:7c:c1:11:11:c1:ac:a7:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:DF:D7:A4:3B:30:45:9C:B3:6D:C5:DC:27:1E:73:71:34:28:D0
X509v3 Authority Key Identifier:
keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:85:cb:b3:06:f7:70:03:df:13:cc:b9:db:bc:7f:57:1a:
1e:9c:84:34:33:74:9a:95:66:6a:a9:b5:b0:0a:c5:2d:cc:1b:
1a:46:ad:65:66:22:f1:3f:46:b0:7d:9a:e3:40:2a:b9:cd:8c:
32:f8:36:95:6b:35:16:1d:2f:69:3a:1a:33:b4:6c:b3:20:c4:
f4:a1:f1:52:5d:ad:b1:28:b1:d7:37:15:2d:72:b4:a6:fb:56:
40:da:14:1a:f5:bd:38:ed:62:02:a7:3c:27:ec:bc:cd:43:09:
14:6c:ab:db:a6:16:f8:56:91:b4:82:b0:18:c6:ee:d7:4a:d7:
1e:63:b7:e6:b5:10:04:1d:f5:53:93:32:6f:a6:d5:9d:5e:3b:
ab:01:9a:81:5c:c2:92:42:f8:d0:b5:20:9d:64:a8:60:f6:10:
7a:03:f0:21:0d:8d:1e:3b:d7:08:7d:48:e6:37:68:38:23:14:
b6:15:ce:a7:b2:84:65:f4:6f:56:cb:ab:69:8a:cc:46:78:41:
66:ab:e1:7f:69:2c:d8:b0:71:f7:5b:e3:d4:3f:40:d6:4a:13:
7b:da:a7:88:d0:99:50:1a:99:f5:13:27:50:9e:9c:ed:47:a4:
81:fa:3d:d3:42:5e:fc:bb:62:aa:99:fb:fb:00:33:12:08:ff:
bc:60:02:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzdDNDExMC8GA1UEBRMoQjI3NkYxNUE2RDRBOTdDNDgxOTFFOTJCRDE2NjFGMzY4
QkVGMjFFNDAeFw0yNTAxMzEwNjM2MjlaFw0yNTAyMDcwNjM2MjlaMBgxFjAUBgNV
BAMTDTY3OWM2ZjZkLWMzZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC03wbUubNGjVExV4NjkhohyhCOt94xfsvXJhetM6cacXWTGSfi9osX/2rsXrpW
tIauZLoYTYgGH7gA0znB/vWTvEonGwJ53p0I/f6fnxXPQF4d4YE5PHacrlbrePKO
tvy+4PXYqkzqj8FcVc9DQv+Mvs9F+co8wL9/wfsmbq9e1cYt1DyQB5v43Fg3wagJ
kDkzNAoGUzK6dWGEI2gSLJgR0esCrp4HyduiN8og72OxToYETKL6HzrB4bWcBDsu
PMFOU+6G2w1UEN3CWgY1ZnVMc4j74/wfxNncX73mwsKrCSyekp6ppzUtApMd+oBE
BYR8IcF8LXzofMEREcGsp4WVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKdHf16Q7
MEWcs23F3Ccec3E0KNAwHwYDVR0jBBgwFoAUsnbxWm1Kl8SBkekr0WYfNovvIeQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzN0M0L0EyQUJBNzJDOEJE
OTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkll
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc25ieFdtMUtsOFNCa2VrcjBXWWZOb3Z2SWVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz
N0M0L0EyQUJBNzJDOEJEOTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhT
Qmtla3IwV1lmTm92dkllUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB2ahcuzBvdwA98TzLnbvH9XGh6chDQzdJqVZmqptbAKxS3MGxpGrWVm
IvE/RrB9muNAKrnNjDL4NpVrNRYdL2k6GjO0bLMgxPSh8VJdrbEosdc3FS1ytKb7
VkDaFBr1vTjtYgKnPCfsvM1DCRRsq9umFvhWkbSCsBjG7tdK1x5jt+a1EAQd9VOT
Mm+m1Z1eO6sBmoFcwpJC+NC1IJ1kqGD2EHoD8CENjR471wh9SOY3aDgjFLYVzqey
hGX0b1bLq2mKzEZ4QWar4X9pLNiwcfdb49Q/QNZKE3vap4jQmVAamfUTJ1CenO1H
pIH6PdNCXvy7YqqZ+/sAMxII/7xgAt8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:44 2025 by rpki-client