Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier: 2mR52GchT3mC+KcaDyutXhPmiQVaYUg8+V/AHpbn610=
Subject key identifier: 0F:B5:2C:C4:DE:29:DB:3D:12:49:40:00:12:FA:2D:91:F5:AB:23:B1
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number: 0346
Signing time: Fri 31 Jan 2025 01:06:50 +0000
Manifest this update: Fri 31 Jan 2025 01:06:50 +0000
Manifest next update: Fri 07 Feb 2025 01:06:50 +0000
Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: gsddROOL2urgzbAKRKqo9AnX2rqkg/OSn+iOI+yJ/Yk=)
2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Validity
Not Before: Jan 31 01:06:50 2025 GMT
Not After : Feb 7 01:06:50 2025 GMT
Subject: CN=679c222a-f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:a2:0a:4e:93:d3:ca:8b:c2:01:37:5e:9c:
0f:16:28:3f:74:0b:11:8b:12:80:0b:d2:00:8e:f9:
c8:24:a2:e1:ac:b2:56:8e:cc:29:f3:5e:ba:b0:5e:
9b:4c:9f:23:7c:08:f4:ba:5f:8a:36:2d:40:4a:c4:
70:ba:47:f4:df:43:76:2f:9b:df:d0:80:dc:cb:10:
44:89:a0:7c:7b:ec:c3:90:35:f0:69:89:29:30:00:
19:c2:d8:06:6f:f9:a7:b2:98:59:d8:78:b4:cf:d4:
fb:0f:80:0f:51:35:1f:50:e2:83:59:0b:11:8a:20:
d5:3a:69:3f:6e:f4:c7:91:4f:7a:d6:0b:55:c1:92:
a5:8a:d6:ad:0d:38:4c:e8:70:fd:ac:b4:87:00:86:
db:72:89:62:94:39:a4:42:6d:2c:36:ba:d9:6e:79:
6f:59:0c:98:aa:36:f9:e5:a6:f5:0f:90:9c:78:d3:
5b:1e:34:63:88:08:e4:7d:92:63:f4:d6:a5:a3:17:
82:e5:24:7a:8b:3a:38:3e:8a:f0:7b:06:ae:e2:aa:
92:c4:bf:40:50:fe:5d:df:c5:fa:7e:2f:f5:79:c6:
6f:7b:63:27:76:a6:e0:3a:d1:62:90:45:bd:83:89:
bf:b3:32:1f:98:11:15:fa:aa:89:a5:66:39:b3:03:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:2C:C4:DE:29:DB:3D:12:49:40:00:12:FA:2D:91:F5:AB:23:B1
X509v3 Authority Key Identifier:
keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:0f:ed:12:94:b7:d6:69:0b:6d:fa:3d:53:cb:46:6f:4a:
3d:12:f8:f6:36:f5:9a:67:27:7a:3a:03:71:e8:52:e2:09:e4:
c1:ae:de:09:65:a0:28:38:57:3f:c3:fd:52:e5:bc:7e:40:8f:
11:c5:b4:16:5f:77:7e:a8:8f:2f:5e:6b:c5:2d:68:39:1e:2e:
68:79:0e:62:49:16:fb:99:bc:12:bc:b2:48:03:b5:40:79:0d:
a6:06:ad:61:2f:cf:d4:a9:60:bd:9c:6d:ea:6c:e0:bc:a8:34:
22:9e:a9:55:79:ec:22:b8:55:5a:80:63:7b:63:b2:f6:93:31:
be:49:e4:a7:9d:2b:ca:93:4a:80:bc:de:26:01:3b:2e:ec:d2:
2d:b3:f5:2b:a7:7d:ad:bf:96:a2:df:d6:56:43:05:e3:ed:9c:
4c:1c:32:5a:fa:3f:9c:81:e9:3b:88:9c:b8:14:89:03:96:cd:
cc:85:2d:15:08:54:90:7f:2d:44:e3:ae:94:a8:82:92:e9:d0:
47:b4:6d:e8:8e:15:a9:ec:c8:f1:6e:62:4f:66:76:7b:de:1d:
a0:73:62:32:b4:06:93:8f:af:0d:cf:46:85:b0:aa:d0:f1:b5:
48:0f:13:4f:0f:76:ff:c0:2e:d6:78:57:94:ef:03:99:c4:9b:
b7:45:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:59 2025 by rpki-client