Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File: k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier: SJXlzK//Smxyr2ORimSWTxAAhXiGNtffUNRpvJlW69Y=
Subject key identifier: A5:DA:9C:6E:20:6A:22:C1:C5:4F:99:A9:F4:E6:F8:46:6F:24:C3:EE
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial: 06F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number: 10B7
Signing time: Thu 30 Jan 2025 20:02:48 +0000
Manifest this update: Thu 30 Jan 2025 20:02:47 +0000
Manifest next update: Thu 06 Feb 2025 20:02:47 +0000
Files and hashes: 1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: zzmo4NeNwZvHddiA1k3qZhO0nqku8j9Dh/YWD3+A2c0=)
2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: Th3Fm0yjUG5Nl/BatZiPSivvwDfuH9VTwBhqmmWBVXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Validity
Not Before: Jan 30 20:02:47 2025 GMT
Not After : Feb 6 20:02:47 2025 GMT
Subject: CN=679bdae7-66bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:05:06:74:74:66:91:de:e6:32:14:40:dc:
f4:68:7c:c4:ce:96:0e:f6:5e:37:b7:a5:d6:c7:f0:
a2:72:4a:c2:5b:c7:9a:2d:37:a9:0a:d6:c1:6c:c1:
92:30:97:7c:60:2f:c2:55:86:45:7d:18:67:95:7f:
e5:70:e6:00:84:91:4c:cb:83:79:3b:e3:e3:d1:7a:
c6:55:f5:da:7e:a4:1d:ac:6e:18:d8:63:e2:40:04:
d3:0e:f0:88:a3:6e:25:4e:90:20:b4:cb:aa:88:f7:
9f:74:fc:fa:ac:30:f7:9d:34:78:fe:6b:27:d7:af:
a1:2b:19:f7:d3:0f:73:8a:17:ea:6f:fd:ed:cd:8d:
98:a4:f7:6b:f6:a5:fb:13:7c:b3:f2:2f:bd:61:2f:
ef:fe:cd:f6:85:98:ae:58:ac:0f:c2:f5:e0:72:a2:
2f:35:24:91:8e:6c:56:90:2c:bf:8d:4a:ce:2c:9b:
75:fa:e9:c7:20:95:ca:70:81:0f:47:04:71:fc:67:
d5:6b:ad:c4:55:fc:12:6b:01:2d:5e:6f:96:71:a2:
fe:72:94:4a:ac:2d:97:24:1e:93:07:0d:0a:93:06:
41:d2:00:60:16:7d:ae:11:62:9e:5b:cf:cb:49:b5:
b2:2a:cc:92:e1:c4:33:01:65:65:90:5a:47:51:f9:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:9C:6E:20:6A:22:C1:C5:4F:99:A9:F4:E6:F8:46:6F:24:C3:EE
X509v3 Authority Key Identifier:
keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:bd:56:5a:17:b1:46:97:36:05:28:40:a4:3e:03:36:93:
4f:0d:56:6c:f1:cf:6e:b3:97:36:2c:86:f7:a6:7e:6f:85:8e:
84:2e:35:79:c6:86:fc:1b:56:6c:06:d4:97:b1:24:7a:f5:76:
d1:a6:39:67:c6:99:b3:c6:2e:02:af:44:54:6e:f9:f5:95:07:
d6:05:c9:b0:1d:ce:21:a1:09:c4:1b:57:6c:d0:0c:41:3c:df:
7c:24:fd:8c:c9:20:7f:06:14:7b:61:2a:01:b1:be:b3:7b:ba:
45:e7:1a:3d:ef:43:d6:f3:46:b4:fc:38:09:76:1a:a6:b6:41:
eb:ea:b0:a8:5c:d6:37:a7:d8:e8:70:a3:ec:55:dd:0d:79:0d:
a2:3c:9c:1c:96:3c:5d:22:85:f7:e8:66:1e:3a:81:e4:bc:1e:
26:92:81:56:61:e2:f0:ae:ca:cb:d6:de:48:2f:93:24:73:fc:
10:0a:fe:ad:58:af:a3:65:ba:be:00:3f:b2:6e:f1:32:d9:c0:
dd:23:7d:5e:2c:06:81:14:45:80:10:01:33:a3:26:84:02:16:
ce:2a:06:01:94:8a:40:2c:44:00:ec:97:e5:ac:31:cf:68:2d:
71:a4:4e:72:0d:b5:60:3d:e9:3e:e1:ca:04:f5:5a:7a:f8:3e:
2b:68:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:04 2025 by rpki-client