Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier: tVPwRkr9O3EOPdGkgVN+WcxesEwlikisrW4JMCQe8fY=
Subject key identifier: CB:76:5F:E8:AC:2B:FB:35:BE:2B:C5:F3:0C:57:14:5F:13:39:81:05
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number: 6C
Signing time: Fri 31 Jan 2025 05:56:20 +0000
Manifest this update: Fri 31 Jan 2025 05:56:20 +0000
Manifest next update: Fri 07 Feb 2025 05:56:20 +0000
Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: nGKHkcVvT5qkVaipfMWXjB0ZZ5yftWdqachLeFKCaU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Validity
Not Before: Jan 31 05:56:20 2025 GMT
Not After : Feb 7 05:56:20 2025 GMT
Subject: CN=679c6604-bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:83:67:35:af:f3:38:37:0e:33:ff:b8:f3:
cc:01:66:1e:3e:cd:17:e7:e8:c2:fd:37:46:21:4c:
33:5b:ef:e7:36:bf:a6:c8:a3:c0:d9:da:ac:42:61:
41:1c:57:60:8d:94:6a:73:5c:88:dc:3e:46:78:f0:
86:fd:38:69:2d:15:b2:ae:16:fb:f6:d5:48:99:d2:
53:8a:38:1a:97:40:71:4e:7d:2f:90:49:39:a5:95:
19:96:53:9e:97:dc:d7:d4:12:ff:2e:52:ba:e8:c5:
a1:dc:22:dd:52:0b:a3:2c:a0:d5:6a:47:e1:2b:62:
a6:3f:06:35:1d:1b:6b:68:e5:f3:74:79:26:e7:94:
16:92:21:54:f6:e2:57:f1:e4:d7:9c:81:ac:2e:38:
0b:27:ee:0e:04:7f:fe:2f:12:41:49:ea:38:fa:f4:
6f:46:46:7d:4b:88:13:9e:ee:c3:31:71:69:c3:2c:
5a:67:e6:2d:1c:49:3c:40:19:1e:42:d7:79:a9:d8:
11:9c:c6:87:f7:8e:26:58:eb:ce:4e:22:39:9d:a5:
0c:f5:46:85:36:c4:90:e1:36:69:d1:b3:39:ec:15:
4f:2d:14:12:27:d5:87:3c:2a:bf:26:82:7c:81:4c:
2d:02:dc:2a:ba:06:f4:4e:89:06:2d:96:31:44:69:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:5F:E8:AC:2B:FB:35:BE:2B:C5:F3:0C:57:14:5F:13:39:81:05
X509v3 Authority Key Identifier:
keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:d5:2b:7e:27:d7:2f:d7:69:3f:e9:89:73:5b:fa:2a:17:
68:ae:0e:b4:9d:c3:73:4b:6f:65:9d:12:aa:e8:a3:90:f5:be:
95:23:ea:8a:5d:75:88:56:ea:47:bb:fd:16:4b:96:75:c3:9a:
fc:bd:3a:83:fa:e5:a4:1a:8b:a7:48:f1:ea:85:1a:75:83:7d:
6f:f9:62:31:91:4c:73:95:26:57:31:a1:5d:29:ee:56:e8:72:
46:bf:a6:d3:58:b9:34:a3:ce:8e:94:98:74:00:04:d5:ca:6e:
4d:dd:d3:68:e6:1c:28:61:56:af:d8:10:15:d0:21:e4:f4:04:
c8:a4:43:db:77:3b:90:4f:5e:e6:6b:6e:40:07:a8:af:db:da:
9a:ec:ac:5a:10:84:5c:e3:b1:bd:37:af:c1:1e:c5:e7:d5:32:
2c:8f:63:9a:d0:ac:95:d5:41:0a:d9:38:24:5d:a2:a1:a6:6a:
d0:07:5a:97:d2:b0:75:64:10:76:db:8d:3e:48:f0:9e:6a:07:
b9:55:33:c8:5b:8b:c9:f0:be:6c:57:5f:32:1e:73:37:74:99:
ed:63:ad:2c:26:82:75:5b:52:f0:1e:b7:5c:35:00:ad:65:34:
72:09:e3:d3:6a:a3:ec:72:55:51:1a:fd:4e:1a:6c:69:bf:d6:
dd:15:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:57 2025 by rpki-client