Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json)
Hash identifier: DkTaM+do/ASnBvsAhUEx1IuclUUufEYFBtpuhFMy46M=
Subject key identifier: BA:F2:5C:E4:A0:2D:B7:1E:C7:74:AC:A2:AE:37:92:57:6A:BC:3C:1B
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial: 3452
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
Manifest number: 344C
Signing time: Fri 31 Jan 2025 14:40:42 +0000
Manifest this update: Fri 31 Jan 2025 14:40:41 +0000
Manifest next update: Fri 07 Feb 2025 14:40:41 +0000
Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: iF9sCeL+4LqahbXjPF6ffHZICOXwPSR17tlsY5b1qUg=)
2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: jI5iigQ8cUJcsIOhuxWoRnC6qmQEBFHvEIO07FBDO0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Validity
Not Before: Jan 31 14:40:41 2025 GMT
Not After : Feb 7 14:40:41 2025 GMT
Subject: CN=679ce0e9-5b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:02:c0:5a:ec:20:86:ca:b7:5b:bf:59:13:
3c:1f:44:d9:0b:2e:77:36:9e:76:94:1b:71:e3:40:
f5:7b:48:a9:05:09:a8:ab:7e:22:a7:7e:b2:3c:b8:
d8:2d:6f:ab:e3:a1:06:f4:6d:ad:11:44:61:07:1f:
c4:c5:d9:ab:22:e0:dc:9b:f9:b6:65:47:43:87:f8:
a2:f7:20:c7:e6:c2:e2:c0:d6:0d:8e:98:94:f5:2b:
07:8b:10:97:71:3d:7c:fb:d3:6f:8d:61:9a:7b:ef:
d7:60:24:22:0b:3c:6f:30:7b:4e:a2:17:74:e0:54:
54:0b:04:e0:5c:27:a7:aa:4d:a8:94:3d:57:7d:d3:
7c:86:e9:9c:e0:f3:1f:fd:b3:14:88:16:de:22:53:
13:73:a9:90:80:c0:cc:33:fc:40:cc:d1:67:8a:2c:
fe:f2:e1:b9:65:2c:bd:d4:c5:99:21:c5:45:99:7f:
31:44:69:5b:57:22:76:d6:64:c0:0a:97:9c:a8:26:
f0:b2:3f:d0:cd:6d:79:3c:db:6c:4e:8c:24:83:08:
33:7f:78:1a:d2:c1:9a:f4:33:87:8e:ed:72:df:be:
7b:37:91:50:9e:d4:f9:f0:eb:7b:fd:ec:21:5e:8f:
9c:f6:bd:d5:9c:fd:f1:fc:7f:d1:4f:5a:1d:fd:33:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:5C:E4:A0:2D:B7:1E:C7:74:AC:A2:AE:37:92:57:6A:BC:3C:1B
X509v3 Authority Key Identifier:
keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:56:ab:df:13:12:91:04:ce:cf:b1:f5:94:ac:7b:48:aa:
f3:4f:06:f6:35:7e:7f:82:4e:c4:e5:1d:97:a9:73:2a:0d:9d:
cb:b3:9d:88:3b:e6:61:56:17:bf:f6:ce:20:4a:ce:7d:e2:c8:
ad:40:4d:5a:7e:40:66:c1:38:29:d1:6f:86:1a:a4:f8:fe:3a:
8f:f3:77:0c:39:33:fd:57:a1:73:8c:28:f2:b7:31:aa:e2:a2:
87:73:e4:fa:a4:8d:7a:c9:cd:11:0a:43:12:91:50:7e:5a:b7:
0b:ba:8e:22:ce:9a:d9:9a:7e:9c:92:c0:d5:ee:73:1b:41:b1:
a4:73:9a:0b:c8:dc:80:b7:59:3f:8d:6d:b7:c6:cb:15:ca:e8:
b2:cd:35:0f:52:cb:a2:54:14:7c:9c:4f:20:9b:b7:03:c5:4d:
15:1f:d2:bd:ea:2c:8b:29:9e:e2:e1:4d:33:32:fc:9a:fc:e2:
bf:5b:84:79:43:de:e1:d0:5e:ec:83:2e:6d:c4:92:9c:e3:ab:
20:c1:92:ad:47:23:e9:dd:78:74:d7:b7:e4:4f:bc:34:77:41:
5b:4a:e7:8a:28:22:47:7a:ac:0d:6e:11:fa:9e:90:9c:43:48:
bd:9d:63:69:7e:da:69:f9:2a:5a:50:99:67:12:9e:2a:c9:47:
d5:da:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:23 2025 by rpki-client