Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
File: 6UOWsst_yPtsQcUvVcybKV4ZL9o.mft (raw, json)
Hash identifier: dx3j2Gn1+BifU6jYLdDAHp8UoxUVvcZWIIo+gr3Z/Dk=
Subject key identifier: B6:E7:AB:90:D1:80:26:10:73:72:29:95:93:50:BC:86:70:CD:8C:D4
Authority key identifier: E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA
Certificate issuer: /CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
Manifest number: 0695
Signing time: Thu 30 Jan 2025 22:14:42 +0000
Manifest this update: Thu 30 Jan 2025 22:14:41 +0000
Manifest next update: Thu 06 Feb 2025 22:14:41 +0000
Files and hashes: 1: 6UOWsst_yPtsQcUvVcybKV4ZL9o.crl (hash: I3H+jkbOIBloDyhFW3AQBkZ8gUKI4CpMaNzGa2S3dFs=)
2: 37303BC0554111EBAE1AA47BC4F9AE02.roa (hash: Kvg4tPhVoW6NrVk+7NPtj3VAC+IGX1fnXHqvIED30BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA
Validity
Not Before: Jan 30 22:14:41 2025 GMT
Not After : Feb 6 22:14:41 2025 GMT
Subject: CN=679bf9d1-ab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:1a:be:81:a7:b8:97:27:bc:11:52:77:5b:
a9:4a:7b:a5:07:bc:83:09:ad:2a:91:72:db:47:0a:
bd:2a:78:75:51:a3:1b:d1:23:bc:33:a0:ad:70:49:
38:74:6d:8e:7c:00:2e:03:e9:c7:c1:53:22:ca:05:
29:40:c0:ac:b7:29:06:3b:82:fe:00:c3:2a:df:c6:
3c:01:49:f0:30:91:c9:29:85:a7:27:ab:c9:92:2c:
a5:ea:a4:e0:6d:77:40:cc:3a:51:d5:d9:77:f2:ba:
ab:75:be:9b:5c:b2:6d:82:16:62:5f:a1:5a:03:1b:
37:d8:35:92:d8:17:18:2c:78:42:dd:27:68:9a:90:
68:0e:97:ef:ae:2d:30:73:f1:e1:c9:3b:66:e6:9c:
01:ca:de:45:b1:24:8a:63:59:fc:df:1d:6c:29:da:
dd:a2:20:56:ca:99:4c:7e:6d:e6:2f:46:e8:4f:13:
e9:82:1e:43:e0:d4:2f:49:f0:90:3c:cd:0a:09:08:
71:ac:e6:db:79:3f:6b:3f:2c:5e:bc:46:04:81:be:
d2:94:dc:85:49:84:3e:94:55:06:aa:76:98:e5:0f:
d7:e4:cb:dd:0b:ce:3b:f5:78:93:af:8a:ea:64:6e:
92:cb:ad:a6:40:5b:37:0a:68:78:25:3b:13:66:ce:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:AB:90:D1:80:26:10:73:72:29:95:93:50:BC:86:70:CD:8C:D4
X509v3 Authority Key Identifier:
keyid:E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:41:1c:70:02:77:45:c6:c2:c4:88:4b:46:b8:5d:71:8f:
6e:24:3c:41:ed:05:a9:bc:73:70:94:8c:0e:16:9f:98:83:7c:
e3:dc:2f:a5:64:dc:ae:53:35:a5:f2:8c:28:44:14:82:71:2f:
36:b1:b6:44:00:ee:5f:a3:42:8a:ff:99:45:5c:13:5a:6d:ad:
07:fd:ac:ca:1d:4a:15:43:d7:78:b2:da:09:dc:ad:47:39:d7:
af:96:ba:5b:34:c9:b9:ce:0d:4a:e1:ca:90:fb:46:3b:ea:d3:
2d:fb:35:d7:44:1d:ec:1b:42:79:51:5a:db:eb:55:07:96:d4:
8d:f0:75:c1:ce:58:08:b4:33:79:43:68:ba:31:a9:2d:ba:22:
dd:2d:d3:8b:a1:ba:1f:5d:95:6a:8e:97:62:84:44:8d:5a:60:
e3:c7:a9:f6:62:65:1d:c1:90:d7:93:19:2e:0e:bc:4a:05:1c:
0e:54:03:28:3d:dc:e9:ae:bd:f0:4a:97:f4:ea:5f:9f:b1:83:
ee:ab:9c:cc:c8:01:89:8d:20:fb:40:3b:e7:08:f7:64:35:bc:
bf:dc:bf:1a:16:80:37:3b:b2:f0:b7:08:4e:52:8a:df:ce:c0:
c0:df:77:24:cf:02:8b:3b:59:6e:4e:4e:4b:ab:f4:d9:b1:da:
97:97:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:24 2025 by rpki-client