Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
File: G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json)
Hash identifier: HUfRrcubeON7m7KW/87yBwaHLREILAs8X1rl8orNSL4=
Subject key identifier: D3:16:CD:8C:BD:47:74:E8:42:6C:8C:E0:B5:18:3F:86:DA:66:EE:BB
Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 05:56:44 +0000
Manifest this update: Fri 31 Jan 2025 05:56:43 +0000
Manifest next update: Fri 07 Feb 2025 05:56:43 +0000
Files and hashes: 1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: cRObyKur+qundusDE/bvrGPUWoWnXqyIwE8+gOBYb4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Validity
Not Before: Jan 31 05:56:43 2025 GMT
Not After : Feb 7 05:56:43 2025 GMT
Subject: CN=679c661b-804b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:72:af:6e:cc:2d:ec:aa:f4:61:54:7f:35:
1c:71:f4:5c:8a:68:1a:38:0e:4b:55:a4:f0:5b:21:
68:58:d7:9e:b9:a2:c0:7b:d0:90:77:cf:18:1b:8c:
95:d1:cd:c1:7f:f3:93:29:ed:26:bd:dd:a7:aa:63:
1b:33:b9:df:6e:85:7e:b7:0b:7d:1b:7a:1d:ab:10:
ee:79:1e:eb:3d:4f:35:63:d4:7a:14:56:73:04:00:
69:d0:3f:27:02:d6:1e:76:32:6b:7f:1f:70:67:7a:
32:b8:9f:25:f4:31:e1:35:ef:82:0d:81:d4:02:37:
7f:f7:5e:d8:db:33:7d:12:9e:c7:c7:91:e1:3c:e4:
92:98:35:4b:48:22:6d:a6:1e:44:dc:69:d0:b0:c1:
15:3f:e9:62:e8:e5:3d:f7:1c:7e:9a:d3:1d:82:8c:
bc:db:83:8b:17:b1:10:cb:ec:39:2a:71:6b:41:f9:
53:34:17:26:bf:a4:0f:27:5b:e3:09:6e:89:45:8f:
d7:12:ea:95:ba:04:66:68:b2:c0:4a:51:76:74:49:
82:66:03:b0:47:42:6f:2e:ca:dd:d2:bb:04:5d:bd:
41:ba:8c:4a:29:64:eb:e4:41:18:00:6b:4c:0d:62:
7e:06:ce:5f:8a:75:7d:bf:56:99:85:98:12:9d:0e:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:CD:8C:BD:47:74:E8:42:6C:8C:E0:B5:18:3F:86:DA:66:EE:BB
X509v3 Authority Key Identifier:
keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:e2:72:c9:67:54:03:f2:a6:74:1a:6c:af:7b:be:cf:ff:1b:
9c:4b:14:93:3b:a1:a1:da:45:30:0e:ec:d2:70:55:ee:6c:ea:
91:ec:e5:41:d2:4d:e4:d2:4e:e4:e1:ec:34:3c:9e:e6:50:18:
b2:1e:0b:16:6d:1e:94:28:7c:24:e1:fc:d8:40:50:b7:d6:06:
22:ab:cb:62:aa:86:88:b3:a1:05:1e:b6:3d:c2:72:9d:5f:d5:
f8:4b:55:1b:ff:e9:c2:3c:55:50:80:ff:92:7f:b4:2c:fd:36:
0f:ea:d7:ee:10:48:85:33:cf:60:97:51:0b:f9:9b:93:16:60:
6c:ec:42:26:c3:38:05:88:42:33:d9:94:00:5f:90:95:fb:ee:
d6:b7:39:11:51:ed:95:ce:83:c4:30:1b:46:67:ca:b2:0d:88:
de:cf:84:7b:d1:11:36:29:be:ac:e9:0e:fe:e9:94:c7:42:ab:
fa:dc:32:cf:45:b0:14:bd:3b:e6:1d:85:a9:ef:61:ce:c0:21:
9f:0c:73:70:55:b6:50:4e:db:14:d5:d5:28:0b:cf:ac:58:cb:
1f:08:80:82:1f:62:8d:77:0b:1c:4e:2a:52:b3:44:5e:a3:9a:
cc:74:0a:00:d2:a5:d4:37:52:ec:ae:f9:d5:88:0b:51:58:05:
94:16:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:46 2025 by rpki-client