Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: nNYyJ5yuK3My3S+lyHvUerzKWlOpsBwLLSiLcXGuS7A=
Subject key identifier: E9:B8:D2:3C:CC:7D:4F:4B:DB:92:73:A1:5C:1C:27:12:27:97:36:3D
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 02EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 02E2
Signing time: Fri 31 Jan 2025 01:25:32 +0000
Manifest this update: Fri 31 Jan 2025 01:25:31 +0000
Manifest next update: Fri 07 Feb 2025 01:25:31 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: tEMmiDC5yRyQRp1j6E9UU9oUuaEzhDfN3GhAihr3vss=)
2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=)
3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Jan 31 01:25:31 2025 GMT
Not After : Feb 7 01:25:31 2025 GMT
Subject: CN=679c268c-226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:ae:35:37:30:2b:20:e0:4d:ad:1a:e0:4d:
54:b9:88:80:0a:30:19:bc:66:ce:83:11:01:a8:ac:
be:55:f0:c3:2f:57:f8:90:61:ee:2f:a5:5b:3a:e8:
e0:48:74:8b:37:89:cb:24:6e:5e:09:b1:b8:8f:0f:
59:04:65:2e:af:43:2c:cb:90:08:b6:ba:aa:03:eb:
27:a9:12:1b:bf:73:31:c1:32:6f:c6:e5:8e:74:46:
43:5c:e0:b8:62:5e:6e:67:f7:44:29:04:74:d8:e4:
b3:07:49:f7:e2:f6:88:10:71:c9:c9:5a:0a:80:70:
c1:f8:ef:fc:5c:1a:83:fc:e1:d9:99:c1:10:b0:a7:
5d:84:74:2a:7e:4a:9c:68:a6:03:2b:8d:b4:49:9c:
67:97:8e:aa:93:ff:eb:89:15:fb:d8:d1:8d:db:26:
9b:7a:18:20:23:69:52:e2:10:68:6c:73:98:4e:e1:
53:94:8e:af:cc:0c:2c:43:52:3b:9b:3a:e3:46:4e:
be:e8:5f:3a:89:c1:c1:b1:3a:11:dc:15:d5:0f:71:
9c:2b:f4:e7:d6:cb:73:bb:e2:36:84:cf:ae:2a:d5:
91:85:8e:44:a0:f3:dd:b0:15:db:b6:3c:36:b8:3d:
70:6d:63:49:d4:5a:86:97:9a:33:38:cd:77:fc:5e:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:D2:3C:CC:7D:4F:4B:DB:92:73:A1:5C:1C:27:12:27:97:36:3D
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:4f:5a:dc:60:6d:22:50:d5:cb:f8:4d:3f:66:70:d9:38:7f:
5a:7c:9e:ec:f9:c7:85:fa:be:66:f8:1d:e9:8d:85:f9:dd:c7:
b1:18:56:49:bd:cb:14:7e:29:68:d5:26:f7:72:4f:36:61:d8:
ae:6f:74:a5:ed:5a:38:46:2e:61:03:f2:4d:39:93:bc:bd:63:
aa:7e:17:d5:26:78:a4:61:74:d2:d1:42:de:31:f7:e7:2b:d4:
12:8f:59:ee:d7:7d:52:e2:c4:3b:be:9a:2e:e3:47:04:2a:34:
90:7a:4c:78:00:c7:96:9b:42:15:dc:fd:76:4e:a2:cc:b5:12:
c4:59:c2:d6:18:82:0f:50:b1:bd:e2:7b:e2:35:52:26:bf:fa:
65:93:b5:ca:45:09:90:3e:de:da:be:cd:4b:f6:9d:5a:a8:3b:
4c:d5:06:09:69:6c:44:21:b1:e1:26:30:19:3d:e2:1f:49:63:
08:d7:cf:15:be:52:0e:c0:e1:84:d6:4a:73:1b:4b:5a:07:5b:
e8:84:ac:b9:49:e7:ff:56:02:d7:4f:22:69:7d:3a:a1:3d:fa:
25:02:f3:b2:aa:a6:a1:3f:12:4f:24:7d:af:89:87:ba:5e:65:
29:6a:08:b3:39:d4:0b:5c:7d:76:a5:21:7f:f6:f4:83:3d:d0:
3f:f9:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:28 2025 by rpki-client