Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: C6S/dA5L62+O2kBfBdIfYBT3ZX+VjbSFePgDCRSXcQ8=
Subject key identifier: 68:AF:19:24:EC:68:C4:DD:34:3B:FB:6C:F8:B8:C9:01:F1:C9:10:80
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 06F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 06EC
Signing time: Thu 30 Jan 2025 21:55:46 +0000
Manifest this update: Thu 30 Jan 2025 21:55:45 +0000
Manifest next update: Thu 06 Feb 2025 21:55:45 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: SA3WmoWd57IvELh41zXoX3oTLU3YG0otX4d3zHa/Kp0=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777 (0x6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Jan 30 21:55:45 2025 GMT
Not After : Feb 6 21:55:45 2025 GMT
Subject: CN=679bf562-40a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:a2:10:f6:68:b0:39:56:06:20:40:ce:08:
6c:e7:27:b4:2e:7e:6d:02:42:c9:9c:5e:5c:a7:89:
57:90:77:c3:f9:72:69:0e:69:4c:31:30:f2:ee:3e:
8b:a5:88:28:d1:d8:e2:a0:43:4a:a6:25:38:90:25:
8b:52:ad:0f:7f:39:53:0e:7d:5d:06:02:01:63:d2:
b4:dc:83:98:9f:e1:d1:a7:83:b6:de:6d:06:db:7d:
8c:3b:69:1f:03:70:de:8b:f4:70:8b:4d:53:6b:95:
2c:09:b5:7a:ee:0d:67:be:58:16:36:26:cf:b9:6b:
f2:4a:3f:7c:e9:a4:1a:44:69:42:a8:78:27:93:05:
58:11:1a:f8:78:3e:dc:b3:d6:6a:0a:9f:4e:db:c0:
d8:ba:9d:58:a2:00:e0:f3:99:c1:d0:63:b9:a9:58:
d4:1b:71:24:fc:87:ac:9f:11:49:b4:7e:25:b4:a6:
5f:f5:72:d4:80:17:a1:07:4c:a9:8c:87:9b:0c:25:
0f:e8:9b:5d:89:86:9f:b0:73:8b:7d:10:db:bf:b2:
95:04:a4:fb:1f:50:c9:76:3a:09:0e:c2:95:6a:0e:
7d:a8:08:00:77:a0:c0:fd:b8:65:36:af:de:78:85:
7f:b7:62:21:7a:c0:70:bb:5d:28:f9:92:aa:75:c2:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:19:24:EC:68:C4:DD:34:3B:FB:6C:F8:B8:C9:01:F1:C9:10:80
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:ce:83:0d:6f:ab:c9:0c:19:65:5d:79:50:8c:b0:a6:37:
95:b2:01:fe:e9:0c:41:36:27:51:57:3a:8c:86:b5:d1:4c:3c:
cc:a8:28:55:26:dd:f1:84:29:27:22:3b:dc:60:39:61:4b:05:
f8:93:3d:d8:2c:3b:21:de:eb:b2:ad:0a:2a:7a:96:8f:29:5d:
7f:84:96:84:3d:53:8d:9f:6e:03:cb:e7:f3:95:d7:20:24:7c:
9b:cf:64:33:7f:df:47:75:65:65:72:3c:c5:34:b2:f7:04:27:
fc:45:a9:5f:ab:16:51:24:3e:48:20:12:db:d9:ba:85:34:5b:
51:bc:7b:ab:af:79:d9:de:e0:d5:44:ce:bd:74:03:98:d5:29:
f6:eb:ed:36:37:4d:45:8e:bf:56:c0:c7:88:e7:fc:97:37:78:
8e:05:23:48:cc:d9:94:c6:a6:e3:f9:79:6b:29:99:08:5d:78:
8d:94:e7:46:e2:e8:16:e4:10:48:61:a1:48:fe:cf:85:37:c4:
08:16:3f:fa:45:55:89:7a:ee:69:02:4a:2b:a1:2e:04:1d:19:
9a:6c:46:47:51:c5:8b:0e:3a:c6:8d:2d:db:6b:ed:f7:81:77:
d8:36:4a:84:2e:4a:d2:ef:c1:37:f4:ee:a5:30:17:d7:0b:65:
91:2b:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:13:44 2025 by rpki-client