Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier: ySPlzbdcVWywqbO/tA7H5H+LnQ8btzPI7a4MvawsulQ=
Subject key identifier: 3B:B1:23:E3:4E:85:36:A6:62:77:38:8D:96:95:7F:5E:8B:29:E4:F0
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number: 55
Signing time: Fri 31 Jan 2025 06:14:48 +0000
Manifest this update: Fri 31 Jan 2025 06:14:48 +0000
Manifest next update: Fri 07 Feb 2025 06:14:48 +0000
Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: jzuMosR+u6kLFJznPZr3VcM/Gf5+Ge6w+bt6NbEKx2Q=)
2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W7nBW0WrwwdyBp8pjE1mfPE0OY95LGfcdO49bT/mKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Validity
Not Before: Jan 31 06:14:48 2025 GMT
Not After : Feb 7 06:14:48 2025 GMT
Subject: CN=679c6a58-64aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:0b:c5:63:0d:27:8c:e9:83:0b:f3:e0:24:
5c:ba:7c:50:66:f6:be:51:15:af:b1:e2:fc:d2:6c:
99:29:4f:d2:92:e8:a2:37:5a:da:74:be:bd:e6:d4:
66:5c:b1:b7:8f:4f:0c:ea:92:5b:b6:96:7b:77:ae:
5e:e8:64:8f:23:78:82:34:f3:56:14:d2:33:f1:ff:
2c:ff:12:3e:f4:a9:18:a8:ab:dc:2a:0f:13:55:37:
00:57:38:69:68:0b:15:04:18:74:58:4f:78:6e:c2:
d6:39:d6:ea:c1:59:f1:16:30:9d:f7:4c:8d:f2:d7:
cd:32:bc:e9:c0:c5:34:b7:f1:46:ca:25:46:ac:6c:
1f:3a:70:f7:3e:45:34:50:a0:e1:7e:fb:a0:36:59:
44:8b:1c:be:dd:73:e0:0a:15:c1:84:4f:ca:7f:d8:
eb:55:f7:d9:6b:29:95:21:85:ad:3a:93:85:38:1c:
3e:2e:4a:61:a6:44:55:03:8f:00:f2:c3:a9:e3:06:
16:33:26:8a:a0:e9:e7:2a:dd:b5:bc:38:c1:c4:64:
0d:30:fe:15:4b:9a:4b:45:d9:37:59:3d:98:e4:ef:
9b:1b:4e:bd:4a:df:76:60:a1:d1:1d:1b:08:59:5a:
00:84:a0:59:37:93:9a:e8:67:4c:98:7f:a0:d0:06:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:23:E3:4E:85:36:A6:62:77:38:8D:96:95:7F:5E:8B:29:E4:F0
X509v3 Authority Key Identifier:
keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:d2:a7:df:07:21:47:7d:c4:d5:fc:82:4f:52:08:eb:dd:83:
49:d2:66:f3:1e:6d:a4:f8:21:11:6d:c9:6f:df:06:eb:fa:ec:
17:4a:1d:2a:27:4e:0c:cd:1d:9f:d9:cf:65:ef:d4:13:cd:7c:
c2:42:54:02:0b:95:8c:92:cb:de:97:62:bc:95:c4:65:8e:ef:
74:3c:51:77:ae:e0:7f:60:7c:4c:70:28:55:37:7a:66:6f:4e:
bb:6e:38:43:f2:11:a3:81:b8:e6:47:dc:36:28:d9:f0:b5:2c:
7f:f0:40:06:30:bb:57:0c:ab:d2:5a:5f:84:2b:c2:c3:81:d1:
89:5d:d1:81:0d:bf:c5:0d:26:fa:e2:e3:ec:10:ce:16:59:86:
82:b9:1d:e2:c9:48:1c:08:2a:f9:6f:b4:fe:e2:6b:a7:c2:8e:
1e:c0:87:99:73:a8:b3:81:99:0b:ed:6b:37:a1:3e:74:3c:ba:
05:1a:89:92:15:63:99:0f:8a:90:f5:fe:30:56:fd:ce:2c:1b:
c0:e7:c6:0a:dc:74:97:73:22:cd:d8:ec:ff:51:c0:9e:dd:6f:
9c:6c:b9:93:8f:36:37:2c:26:03:dc:47:52:d2:0a:92:85:47:
00:94:2d:39:7d:f1:b1:22:a2:ce:ec:13:e9:5e:f0:c4:f4:8f:
3d:19:ab:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
N0UxMjExMC8GA1UEBRMoRTlCN0IzRUQzMTczREU0MEZFNEMxRkU2RDhGRTQyQjlD
QkU5QzgzMzAeFw0yNTAxMzEwNjE0NDhaFw0yNTAyMDcwNjE0NDhaMBgxFjAUBgNV
BAMTDTY3OWM2YTU4LTY0YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJAwvFYw0njOmDC/PgJFy6fFBm9r5RFa+x4vzSbJkpT9KS6KI3Wtp0vr3m1GZc
sbePTwzqklu2lnt3rl7oZI8jeII081YU0jPx/yz/Ej70qRioq9wqDxNVNwBXOGlo
CxUEGHRYT3huwtY51urBWfEWMJ33TI3y180yvOnAxTS38UbKJUasbB86cPc+RTRQ
oOF++6A2WUSLHL7dc+AKFcGET8p/2OtV99lrKZUhha06k4U4HD4uSmGmRFUDjwDy
w6njBhYzJoqg6ecq3bW8OMHEZA0w/hVLmktF2TdZPZjk75sbTr1K33ZgodEdGwhZ
WgCEoFk3k5roZ0yYf6DQBn97AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO7Ej406F
NqZidziNlpV/Xosp5PAwHwYDVR0jBBgwFoAU6bez7TFz3kD+TB/m2P5CucvpyDMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3RTEyL0M3MjgwRjM0NUY5
QTExRUZCNDQyQkY3M0M0RjlBRTAyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlE
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNmJlejdURnoza0QtVEJfbTJQNUN1Y3ZweURNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3
RTEyL0M3MjgwRjM0NUY5QTExRUZCNDQyQkY3M0M0RjlBRTAyLzZiZXo3VEZ6M2tE
LVRCX20yUDVDdWN2cHlETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADDSp98HIUd9xNX8gk9SCOvdg0nSZvMebaT4IRFtyW/fBuv67BdKHSon
TgzNHZ/Zz2Xv1BPNfMJCVAILlYySy96XYryVxGWO73Q8UXeu4H9gfExwKFU3emZv
TrtuOEPyEaOBuOZH3DYo2fC1LH/wQAYwu1cMq9JaX4QrwsOB0Yld0YENv8UNJvri
4+wQzhZZhoK5HeLJSBwIKvlvtP7ia6fCjh7Ah5lzqLOBmQvtazehPnQ8ugUaiZIV
Y5kPipD1/jBW/c4sG8DnxgrcdJdzIs3Y7P9RwJ7db5xsuZOPNjcsJgPcR1LSCpKF
RwCULTl98bEios7sE+le8MT0jz0Zq9k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:32 2025 by rpki-client