Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: wmvbsMxNnab8d4y0RShPUu+6IPVgY8b92AcJtD2mU7E=
Subject key identifier: 90:D4:6E:94:2F:B7:7B:01:5D:93:95:9F:39:C1:23:62:EB:AA:F4:A2
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: 0D
Signing time: Fri 31 Jan 2025 07:11:51 +0000
Manifest this update: Fri 31 Jan 2025 07:11:51 +0000
Manifest next update: Fri 07 Feb 2025 07:11:51 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: rF3iROzLjIBiUuAlXSJLP26jB5dECo/CyoduJQlr58k=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e/G+ixBQ6LN/rcfPtD+3nHt6guJrjUvteGGskuG6eAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Jan 31 07:11:51 2025 GMT
Not After : Feb 7 07:11:51 2025 GMT
Subject: CN=679c77b7-69a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:99:01:bd:c9:45:2e:89:b8:37:ae:59:03:
47:80:56:05:d5:56:69:f3:2c:8e:49:9c:b8:bb:1d:
ab:40:60:ee:53:47:ea:e6:7d:79:0f:9f:bd:ce:66:
ce:0c:d6:38:05:80:00:f4:75:b9:5f:47:03:e6:1d:
0c:6e:03:c1:fe:5f:dc:d1:6b:6e:91:e8:1f:7d:44:
2e:f1:de:77:e5:6a:78:be:06:1b:76:73:0a:ea:5f:
c9:58:02:4f:86:7e:03:aa:ed:71:53:84:02:45:34:
58:1b:89:d8:6b:07:a2:1b:f1:eb:b9:a5:d7:74:47:
6a:66:b6:89:b1:58:0d:9f:aa:2b:ab:21:f4:85:13:
e8:e9:2c:e3:e1:b6:8d:23:37:36:06:12:90:09:d2:
b6:1d:c4:66:75:26:1c:fe:9c:60:e1:d2:82:6b:e6:
59:1b:3b:01:16:4e:ef:7b:76:44:71:55:65:2d:6f:
d7:6f:3b:47:cc:b5:e2:fc:22:75:11:b6:a5:7c:a8:
5c:6a:a5:22:92:3e:e9:bd:82:ee:7f:2b:79:80:a8:
8c:df:da:5f:91:ae:20:d3:56:3f:91:89:2b:c1:77:
9a:ed:47:43:ae:cb:d5:52:71:82:d3:a6:27:6a:73:
a9:cc:78:ec:df:d3:a1:2c:7f:77:a6:a6:2e:f4:7e:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:6E:94:2F:B7:7B:01:5D:93:95:9F:39:C1:23:62:EB:AA:F4:A2
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:da:be:a5:7a:0f:ce:dd:b5:e3:b9:dc:cb:f4:2c:f6:46:
a3:c6:24:46:79:46:c9:6e:d3:9e:7f:fb:c6:7e:01:86:21:5e:
3b:1f:48:94:c0:97:8c:5b:4b:8f:92:16:93:cd:31:f7:c6:e9:
bf:70:c3:97:02:5e:7c:7f:04:83:f2:85:e6:76:ce:5d:5e:ba:
b5:1a:c1:23:2c:0a:f2:9f:c3:70:23:cf:83:64:f1:f5:41:0b:
12:51:97:54:ea:e4:3c:0a:e8:9a:5a:ff:77:6d:c3:42:84:0e:
84:92:42:bc:d5:56:8a:f5:dc:55:06:e9:04:9d:97:03:ec:be:
c3:b6:c3:cb:67:81:eb:9d:01:42:0e:39:5b:a2:df:13:0c:c7:
ce:8f:0b:7c:c0:f4:e5:42:e4:4f:4d:86:9c:06:8d:ad:08:f7:
79:67:5c:2b:5d:d4:bf:bc:d7:37:da:e8:d0:d8:de:9b:4d:3f:
ec:56:c5:7b:4a:06:f1:fb:25:3d:73:d6:0a:57:3e:57:27:46:
9f:bd:9a:e0:c4:ed:30:aa:45:5f:d8:a5:95:f5:93:a6:56:af:
35:00:f8:5b:e8:85:9b:76:f4:61:9d:36:18:91:ff:5b:08:d2:
b8:1c:65:ef:f4:0f:93:9a:4f:b3:92:3b:65:ea:b6:0f:08:10:
c6:98:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:20 2025 by rpki-client