Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json)
Hash identifier: tVjhxSguKYnuO2G8+IKWb+jNDGfGds1dI1Q2gWjQFoE=
Subject key identifier: 1C:DF:44:72:71:20:DD:95:14:74:73:31:B7:DF:86:ED:2B:03:78:2A
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial: 348B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
Manifest number: 3465
Signing time: Fri 31 Jan 2025 14:52:35 +0000
Manifest this update: Fri 31 Jan 2025 14:52:34 +0000
Manifest next update: Fri 07 Feb 2025 14:52:34 +0000
Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: j1+z7tH3FutUfDEr9KhIU0N63oG/+Omh1ubl6bd/qWw=)
2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13451 (0x348b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Validity
Not Before: Jan 31 14:52:34 2025 GMT
Not After : Feb 7 14:52:34 2025 GMT
Subject: CN=679ce3b3-af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:87:b0:19:98:bf:6a:e0:5f:9a:a9:57:49:
0b:cb:ed:e1:a7:79:db:07:60:84:81:cf:f2:7b:88:
67:2a:35:2c:e6:a8:fa:8a:b1:6b:a9:1a:84:ed:3f:
15:98:ae:3e:e2:cf:00:f9:45:65:64:c0:ff:dc:6f:
dc:c3:24:9d:ef:ed:bd:b6:bf:7e:2b:ab:c4:4f:c9:
d6:bd:13:52:e5:31:4f:b9:20:08:17:4a:4e:c3:ef:
49:19:d5:e4:f4:a0:9e:86:bf:19:2e:63:75:f0:40:
9e:d4:55:eb:53:3f:98:61:b3:91:95:5f:a7:52:3d:
7a:38:d4:eb:af:73:0b:b2:71:ae:d3:1d:e2:70:1f:
c4:d4:9e:42:f6:17:69:a1:bf:dc:d1:df:5c:52:97:
12:66:bb:68:90:0c:a7:48:04:21:2a:37:a5:ac:c6:
55:c9:83:7e:55:75:90:2a:fb:eb:4a:02:38:d5:c7:
a0:a9:d6:c9:63:37:4f:71:d7:ea:30:9f:9f:7b:1b:
7a:43:10:f3:f2:9d:59:7e:81:71:e8:cd:91:8c:44:
cc:a2:ab:03:e7:be:f5:19:c7:4a:97:ef:de:89:c8:
e5:ea:01:16:ce:2a:88:0b:ee:48:db:7a:fc:c2:00:
c0:9f:6c:db:6f:d7:10:6d:5d:23:29:68:e0:23:59:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:44:72:71:20:DD:95:14:74:73:31:B7:DF:86:ED:2B:03:78:2A
X509v3 Authority Key Identifier:
keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e1:a2:a2:09:92:55:fc:b3:fc:48:76:d3:74:30:a9:f6:10:
1f:01:37:54:a0:1a:79:91:95:72:a1:f6:83:c8:59:d8:24:3b:
17:9a:ac:12:43:ee:7c:6c:9f:fd:08:0a:8f:e7:a2:7c:68:7a:
b6:07:59:f3:cc:43:ee:d4:c9:44:03:e3:56:2c:05:c9:81:5f:
a1:19:93:9a:9f:ed:23:e8:52:1e:a2:e1:76:19:80:03:b7:50:
ee:cd:0d:46:bc:f3:3f:7b:27:17:4a:73:e9:57:a3:2f:14:66:
1a:d3:7d:5e:a2:79:5f:9b:5e:ad:c7:92:95:36:b8:d7:0d:61:
6d:7f:ee:59:57:d1:bc:b2:8d:67:d0:b9:c0:05:b8:a4:13:06:
79:b6:81:e9:78:e8:87:f5:0a:e3:90:a1:f5:ad:6c:62:e3:31:
26:24:23:43:b6:d0:04:6f:80:43:89:43:ac:18:e8:e7:ed:b8:
c9:bf:38:03:c1:ca:7f:12:06:9b:73:c7:c1:e6:55:6a:e1:8b:
78:50:aa:a3:b7:7a:de:68:95:55:05:f4:c8:9a:c6:13:b7:0d:
b0:6a:cf:12:1f:c5:7c:65:2a:02:88:6a:1e:98:27:e2:35:87:
b2:b5:8d:18:24:82:0f:9b:ed:36:80:0f:6e:7a:4a:c0:6f:47:
cb:bf:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:56 2025 by rpki-client