Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier: O3jOO8skNJZ/QowpMx9rXiHxmH5amU25E6TVlvpiV1Q=
Subject key identifier: 7B:68:C4:F0:18:72:4A:9B:9C:05:03:EF:BA:7C:63:FD:1B:51:88:F7
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial: 0CC1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number: 0CB7
Signing time: Fri 31 Jan 2025 18:07:08 +0000
Manifest this update: Fri 31 Jan 2025 18:07:07 +0000
Manifest next update: Fri 07 Feb 2025 18:07:07 +0000
Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: OESdu/e45M+nQfTAEVvSIir4Oj0R9ddvPrgKpFhF7Gs=)
2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: Gk9fLK1w1PhazvKtIKN9AYlf9o1o2jXmZMjpuJtNJp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Validity
Not Before: Jan 31 18:07:07 2025 GMT
Not After : Feb 7 18:07:07 2025 GMT
Subject: CN=679d114c-7cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:e1:10:e5:57:f8:cb:e8:39:57:29:7a:66:
f0:0c:3d:56:8b:7c:94:c7:24:ca:fc:cc:a5:b1:35:
84:68:7c:42:db:6e:86:39:41:a3:07:96:39:75:c8:
84:91:c3:4b:d5:77:b4:d2:76:d7:4a:6c:76:62:e9:
e3:03:c3:61:a0:68:5d:9a:01:4d:e3:a5:d9:9b:65:
f8:94:df:90:4a:c6:0e:42:19:78:5c:ca:40:e0:32:
2b:3d:74:6d:da:dc:6e:83:ed:5b:a4:c6:b1:c2:5c:
2d:fb:93:b7:41:7f:38:96:0d:0f:1b:36:bd:fe:6b:
44:29:dc:aa:07:fa:3a:a7:c2:53:f6:9a:60:67:ad:
26:4c:e8:4c:b0:ab:f3:ea:d1:6f:1b:15:9d:90:80:
13:5f:3d:e8:1e:2e:3d:0c:00:51:f4:01:f2:0b:f5:
60:af:2a:05:80:07:eb:b9:82:b0:3a:75:bc:a2:fb:
b1:c7:73:61:fe:fe:44:cc:e6:00:15:2b:c2:f4:e7:
87:38:3c:31:43:c4:dd:bb:d0:e5:9a:e4:ab:ca:5d:
32:9b:eb:5f:41:de:9a:df:52:a9:3d:6d:c8:fd:b8:
19:4a:4d:13:f5:a7:75:ef:11:7c:b4:cf:74:8e:63:
d0:70:ee:9d:e6:a4:ec:0b:44:3c:1d:e9:69:67:54:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:C4:F0:18:72:4A:9B:9C:05:03:EF:BA:7C:63:FD:1B:51:88:F7
X509v3 Authority Key Identifier:
keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:62:74:5b:a3:dc:1e:12:81:85:61:ee:58:2f:1b:7a:02:01:
7e:8e:55:3d:d9:4b:9f:ad:97:8b:ae:b9:32:25:49:71:c4:e0:
a4:98:0a:59:f5:2c:c1:37:bd:e9:b6:ca:87:91:1f:cf:90:6f:
ad:77:c8:a7:62:fb:58:6c:c7:a3:ec:15:39:31:dc:cc:72:f0:
02:2a:b0:dd:ae:26:03:1c:1f:e2:df:f2:bb:01:2b:b1:3b:21:
79:a7:f0:e0:08:97:0a:f2:39:b6:3d:aa:6a:fe:5c:7a:84:03:
f8:be:04:10:2f:b1:34:24:5f:e0:03:57:65:b4:80:be:e8:1b:
dd:d9:35:fb:5c:27:a0:f3:3b:3e:48:da:6c:bc:08:a8:27:b8:
f4:85:80:c6:76:c3:a1:eb:af:4c:c6:bf:4a:ae:10:3e:9b:84:
b7:aa:c6:25:4b:fc:40:1a:b8:8f:11:32:96:9d:7f:b4:d3:fd:
a2:36:f3:0d:ea:c4:b6:90:fb:e7:42:a2:46:c0:b2:92:44:45:
93:23:e9:26:85:97:cc:52:51:32:3f:85:91:ce:17:fc:68:3c:
92:22:48:cc:23:e2:53:11:a6:1a:81:52:b1:a7:3d:8b:11:bd:
76:08:c5:71:ce:e2:2d:6d:2a:e2:10:24:3d:11:37:8b:19:cf:
0e:8a:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:59 2025 by rpki-client