Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: NQa7aKm6Ip5jlLKZ5sc2imCkOxDRJHlVKc2IxfCek98=
Subject key identifier: 7E:F3:50:C3:75:C6:C8:C3:D3:20:D7:49:77:C5:DE:B7:55:07:4E:33
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 0768
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 0760
Signing time: Thu 30 Jan 2025 21:27:42 +0000
Manifest this update: Thu 30 Jan 2025 21:27:42 +0000
Manifest next update: Thu 06 Feb 2025 21:27:42 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: pv/aj+kmeKzFGYqRtSBnKmPsq7ofKxelUCWa42uMnMk=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: Y7eFgzF/UlzHZlIaZMMT6p/6Ir1lnrNlq+1rkd8Vdws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Jan 30 21:27:42 2025 GMT
Not After : Feb 6 21:27:42 2025 GMT
Subject: CN=679beece-4fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:89:85:cd:62:65:76:08:4f:45:fa:4c:81:
16:b5:4b:c1:24:59:9d:00:7e:49:0b:74:24:59:46:
43:85:97:33:10:b0:65:f6:84:64:6c:48:25:8b:7d:
3e:a5:3c:3d:f3:e0:2c:8f:ed:82:ae:5e:32:3c:d0:
c2:3b:57:0e:14:3b:20:bb:e3:9b:ec:d7:a1:16:f6:
df:1b:ef:1b:46:a8:ac:87:e3:da:7d:b9:f8:dc:5e:
34:db:81:eb:64:f2:08:5c:b6:de:59:65:c5:f5:cf:
52:fd:84:a7:d0:22:9b:b9:3d:45:fe:05:49:f2:48:
74:73:a9:23:9b:70:6c:38:a5:3a:cf:e4:39:08:1f:
55:ad:98:bd:66:17:04:4a:ee:49:b6:84:0d:51:3d:
4a:86:f5:2e:f8:76:f4:9f:29:ef:09:0a:56:7c:36:
40:e5:8b:45:3d:2c:54:99:89:7d:1f:f0:0f:8e:41:
9e:fd:06:0c:e9:c8:ea:b3:eb:ff:a0:0f:db:16:bf:
2b:e8:77:11:96:72:f0:65:f6:0e:67:92:7b:2d:12:
f5:b0:f0:18:02:1d:04:68:41:ef:81:75:4e:fc:3b:
80:4e:66:8c:46:4c:39:62:ff:97:2a:19:1e:c2:5d:
7f:5a:fe:46:cb:f5:72:da:60:2a:24:a7:b4:40:e8:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:50:C3:75:C6:C8:C3:D3:20:D7:49:77:C5:DE:B7:55:07:4E:33
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:f9:8f:10:a6:12:ec:c6:1e:0c:6b:f0:97:62:2a:5c:95:
c4:4f:25:17:fb:e4:6d:fd:ba:a4:3b:4b:8b:db:47:d5:f2:e3:
dd:be:5a:9d:43:b7:9d:54:8a:eb:61:04:7d:c9:84:b2:32:e8:
e4:65:5c:08:74:80:5f:bf:2a:13:b7:ab:b2:b5:45:ea:25:5b:
04:dd:79:57:75:f6:74:ca:34:17:ff:f6:16:35:4b:56:5c:d2:
59:1c:50:e2:b2:58:6e:fc:24:f0:8d:f2:6c:25:28:d3:a4:67:
e3:6f:64:fa:31:c2:71:62:bd:48:a9:fd:46:48:ea:1e:0f:ea:
be:a5:7e:a3:8c:ac:ff:b6:0a:dc:76:c6:e0:29:70:cc:d4:56:
cc:62:5e:42:75:9a:41:aa:76:14:5d:2f:63:25:cc:50:16:f9:
7a:ec:86:a9:0d:c5:d0:0e:3c:62:03:dd:1e:d8:53:74:10:84:
9d:fa:25:f1:eb:b0:a8:a0:87:53:fe:2f:16:59:71:e8:96:c9:
cf:df:83:a9:43:4f:7c:17:9b:2b:77:b8:87:2b:dc:d6:c6:0c:
24:dc:b5:37:b7:5e:27:22:c6:82:11:3e:9e:b4:b0:c6:c5:1c:
c9:1b:ee:3c:49:d7:34:ea:72:e8:6d:f4:f3:3a:29:77:bc:40:
ab:38:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:49 2025 by rpki-client