Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier: VOPOMKDxFFHIMhlFCc7WIMbda0haSg0QzQQZsWX8wDM=
Subject key identifier: BF:20:00:0A:30:A9:09:FB:3B:23:45:C0:94:9D:0E:31:47:DB:41:36
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number: 019D
Signing time: Fri 31 Jan 2025 02:36:05 +0000
Manifest this update: Fri 31 Jan 2025 02:36:05 +0000
Manifest next update: Fri 07 Feb 2025 02:36:05 +0000
Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: LVzVDCTBUByzWHfZfMON2AEcjUOJgMexm/gepf3D3bQ=)
2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Validity
Not Before: Jan 31 02:36:05 2025 GMT
Not After : Feb 7 02:36:05 2025 GMT
Subject: CN=679c3715-6f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:b5:13:17:51:af:e5:ee:e4:af:ad:93:e8:
47:66:65:10:a8:99:f5:25:d0:c3:b0:b1:d3:83:11:
7a:3a:b9:ec:ed:1c:5c:cb:16:19:55:51:08:d0:26:
5d:e6:c8:08:26:d9:93:8d:be:d6:b8:a6:b3:7a:9f:
be:83:04:c1:a6:f9:bb:4c:e6:00:4c:52:8a:17:86:
b5:40:f0:0c:ed:1d:a4:ef:00:c8:a6:80:75:b7:ef:
d8:d8:25:4c:54:46:24:bc:93:97:4b:b7:c3:94:84:
bc:d9:c9:fe:37:ec:e0:b6:9a:7c:1e:24:ba:88:b7:
33:59:b2:0a:b0:fa:83:c5:1e:4a:03:21:aa:1a:90:
58:e0:8e:6b:25:d3:39:5e:6b:05:a9:8b:bf:9e:8e:
14:ab:1f:36:1f:32:ee:72:b0:f8:ba:57:65:18:1d:
e4:88:88:12:37:59:a6:c5:b2:98:21:d7:b5:5d:1d:
1e:70:78:34:e7:7f:6b:ec:79:93:d0:16:2f:c1:d5:
3c:69:ad:1b:1e:d5:37:63:11:1a:64:77:2b:16:f7:
dd:52:e1:19:b2:36:ac:70:84:4a:89:1a:d5:11:62:
bd:c5:33:31:f7:50:93:d1:2e:b4:1e:64:ea:7f:1e:
b7:55:06:79:ca:c5:0a:99:ff:4e:3c:fe:f4:44:94:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:00:0A:30:A9:09:FB:3B:23:45:C0:94:9D:0E:31:47:DB:41:36
X509v3 Authority Key Identifier:
keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:2f:e0:27:64:a0:a7:23:64:90:a2:aa:6d:95:ba:de:3f:
3c:81:60:0e:ac:58:40:31:8a:9f:ef:17:ae:d7:26:53:d9:f7:
14:0a:10:50:01:24:7e:43:0c:9c:fa:15:f6:fb:b2:47:d7:69:
49:0e:f1:e9:ef:a8:ca:d6:8b:84:62:9b:2e:38:2b:70:e3:ab:
75:22:a8:63:93:6d:7a:b4:3f:3d:9d:03:1d:e6:89:39:89:12:
df:8b:a7:c2:09:c7:55:70:dd:e7:9f:74:01:59:12:21:64:35:
7e:44:47:b4:ef:97:8e:3e:fa:fb:26:0d:2b:11:5d:4f:44:6b:
48:ee:15:e6:ce:81:13:06:7f:d1:14:a9:4c:02:bf:ec:02:01:
7b:e1:bb:54:e2:c7:5b:c1:eb:d6:2c:4b:9e:d0:b1:3c:44:d5:
96:8f:69:2a:97:0b:5e:5c:79:fa:62:09:e1:40:e0:4c:47:9b:
20:32:d4:f6:9f:09:98:22:a0:fc:02:5d:03:38:ad:1b:ce:af:
95:2f:cf:d3:a1:2b:8a:70:aa:f5:0c:fe:c1:85:6b:60:6e:25:
3c:d3:6f:f1:b7:c7:94:33:2a:5a:11:aa:2f:43:8a:59:a0:76:
d4:47:b5:ee:a7:b5:ba:2e:02:cb:b5:a0:fb:04:2f:5e:f1:9e:
0c:bb:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:38:27 2025 by rpki-client