Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier: VzG9M1EPc24XJtv7YsHMVymELcUGTWnzseEpe8UCuSY=
Subject key identifier: DA:B1:20:A9:BE:C7:C8:8A:52:1C:BD:7E:35:1A:28:DB:EE:51:10:C5
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number: C9
Signing time: Fri 31 Jan 2025 04:52:06 +0000
Manifest this update: Fri 31 Jan 2025 04:52:06 +0000
Manifest next update: Fri 07 Feb 2025 04:52:06 +0000
Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: Q00SHfgv+npphysoAv9Q2Ti+mgbeJuA6DWlZw/vx5HY=)
2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 9KgUBwn7ZxB41N0G+ybbb26vRb4/nvvRfm6F0NtcKGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Validity
Not Before: Jan 31 04:52:06 2025 GMT
Not After : Feb 7 04:52:06 2025 GMT
Subject: CN=679c56f6-9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:fb:92:8f:92:7d:34:d0:e8:d8:5a:dc:7f:
f2:88:dd:8a:df:db:f1:e9:c3:7e:e4:c7:a1:1e:c5:
73:8c:3d:9b:ab:28:3e:34:10:38:2d:5a:14:35:dc:
23:a5:cf:5a:c2:02:d4:84:f3:be:88:39:9e:7b:7f:
bc:01:53:19:23:a7:c4:c0:20:0c:79:28:bf:35:fa:
c3:02:57:21:c6:40:0d:59:6c:fa:cf:61:90:84:f1:
97:07:19:bd:31:87:8a:31:0b:70:28:b3:2d:d1:01:
26:eb:b6:ac:bf:37:8a:aa:6d:45:53:e3:e4:39:3e:
72:1e:0a:da:1a:c0:ec:b8:ae:f2:25:f9:68:e0:1d:
6c:97:e6:a0:bd:ea:9d:ff:c0:37:d5:e4:d6:50:a4:
0d:9e:2d:95:8a:15:75:4e:78:bd:aa:f3:3b:a0:fa:
88:60:a3:82:9b:50:f8:ad:15:06:69:de:01:81:33:
55:79:5d:af:79:a8:4b:92:b8:5a:9f:4a:e2:70:22:
a3:38:90:3b:d5:f2:c4:d3:65:f4:26:87:8e:a9:66:
cd:d6:04:fc:bc:69:ae:29:bf:52:f7:22:6c:8a:4d:
79:bc:d7:6c:32:ea:f4:61:cf:7c:78:49:cf:a2:8b:
81:9f:66:64:05:ba:91:07:17:c4:98:46:7e:12:d9:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:20:A9:BE:C7:C8:8A:52:1C:BD:7E:35:1A:28:DB:EE:51:10:C5
X509v3 Authority Key Identifier:
keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:60:13:1f:aa:01:1c:9e:b1:7f:08:24:3b:65:5e:c7:fb:a4:
27:fd:db:bf:37:19:59:31:be:dc:fd:e3:ee:51:c5:32:b5:29:
63:ab:2b:c8:a1:5d:be:ba:22:d6:15:cd:e2:ad:26:61:65:88:
b6:94:d3:07:2b:6a:70:ec:33:1a:a9:ce:5c:8b:aa:71:0b:a6:
a8:bb:98:94:1a:f4:85:ea:e6:09:60:f5:10:d1:e2:22:8a:56:
2d:98:07:33:7f:ec:6e:b4:5b:ce:c2:6b:50:0d:a9:2b:ef:5c:
99:4d:c5:0c:61:33:68:4b:3c:e5:41:32:34:7b:8e:c7:fd:f3:
7f:4d:10:41:38:ae:4d:3b:8e:33:58:f7:b8:c3:31:2c:cd:6b:
31:6d:40:00:73:d9:31:48:3e:b4:fe:f5:09:9b:ba:dd:54:4a:
0c:f5:dc:df:3e:c4:26:64:2e:dc:62:87:6e:06:76:9a:23:18:
da:f3:93:f3:d0:cb:47:1c:d5:be:d6:5e:2f:a1:23:6f:62:35:
e3:6c:09:90:4f:2d:8c:d5:c2:a9:49:d4:db:b5:7e:42:87:c1:
7c:2c:b0:dd:cc:27:3b:46:eb:47:80:cf:0e:35:bf:02:e7:2b:
d7:d8:8e:f4:78:90:e7:9d:d8:92:90:af:60:f1:d8:a9:93:23:
6f:c7:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:18 2025 by rpki-client