Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier: ifv2XqGNqrxlPfJVtNeyGj7VgjFkuyxs67Uj7T2Fr7s=
Subject key identifier: 6E:14:FF:87:41:8A:98:F6:21:1E:3C:4E:B3:96:6F:02:4D:46:C4:02
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 06E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number: 06E0
Signing time: Thu 30 Jan 2025 21:57:38 +0000
Manifest this update: Thu 30 Jan 2025 21:57:38 +0000
Manifest next update: Thu 06 Feb 2025 21:57:38 +0000
Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: 3DFCwZHth7zY8+U85bmX/R3464sBBpB8QjkKthWSQRQ=)
2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: OHqpc630iPDrvxa3JYL+djk/kcEwI5eOHtscWctQIpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Validity
Not Before: Jan 30 21:57:38 2025 GMT
Not After : Feb 6 21:57:38 2025 GMT
Subject: CN=679bf5d2-9690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:fb:17:e5:86:f1:57:02:b9:e2:57:50:3f:
e1:72:43:51:9c:14:22:46:81:71:fc:8d:df:13:4c:
11:f1:cc:54:be:1a:95:84:93:d0:f2:bd:2e:47:75:
4f:0b:c8:ec:ba:3a:ce:32:3d:e1:0a:4c:be:7d:62:
18:91:33:fa:95:f2:7f:ec:75:ca:b0:26:08:a2:82:
52:1b:3c:02:3e:24:a3:54:17:46:6c:f8:35:95:27:
80:f8:dd:a9:0a:81:9b:0b:28:e7:d4:fb:0f:3e:6d:
ba:08:03:77:00:f1:2c:a9:dd:64:16:6c:79:9e:2d:
a9:fe:a0:82:22:b6:b0:c4:0d:de:04:a3:88:3d:14:
d8:d6:0a:fd:71:5c:55:3a:48:b4:1a:6a:0b:11:3e:
77:3e:6d:8c:e4:4e:25:e4:97:43:98:1b:b9:0a:d9:
84:ed:b0:a3:b6:f9:a1:97:86:91:33:1f:28:c7:42:
b5:43:72:36:5a:46:8f:b1:3c:dc:20:65:89:aa:75:
d7:8a:b9:1b:12:28:66:09:3d:4d:0a:29:be:ba:46:
e9:8d:b9:01:3c:15:ef:28:aa:84:53:36:e5:62:b3:
ca:d2:38:c1:cb:29:ec:a8:b9:79:90:4a:97:f7:d8:
d5:0f:22:b0:38:a4:5d:70:08:81:4a:e3:c8:a6:bc:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:FF:87:41:8A:98:F6:21:1E:3C:4E:B3:96:6F:02:4D:46:C4:02
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f5:16:93:f4:ad:b2:23:8c:07:15:27:b6:b2:db:c7:12:5c:
48:66:31:ad:ad:ea:80:53:0f:39:cd:b9:8f:30:fa:4c:84:39:
d2:22:7a:ad:68:3e:be:72:9a:80:f3:12:32:77:b7:00:0c:6d:
07:38:c6:5e:f3:fa:af:11:f6:07:77:95:41:cf:f5:0e:e9:22:
e2:07:4e:91:cf:34:5d:f9:38:4f:5b:0a:e1:8d:87:a2:3f:13:
e2:fd:e2:73:f1:e9:0b:3e:55:3a:21:dc:bc:af:eb:5f:62:53:
ca:17:e9:bb:f5:2f:ca:0d:e8:29:00:d5:a7:36:30:da:9b:f7:
c6:7b:a3:c5:77:a4:92:0d:29:ce:fd:3f:00:dc:6f:82:4c:8f:
42:b5:26:33:6d:0b:08:a8:80:c2:e6:9f:bc:d0:90:a0:54:ff:
64:53:ac:16:03:c6:af:ba:b5:06:19:e3:c0:36:5a:63:dc:a9:
a2:08:59:73:e0:b2:89:0c:4f:f9:54:94:c7:e3:12:bd:88:90:
ff:7e:b9:a4:dc:bb:7e:86:1d:e4:1c:9c:fb:b4:dc:54:e8:7e:
6f:55:b8:c0:74:90:f7:32:85:10:b1:9e:c8:a4:ee:13:c7:a1:
d2:7a:3a:39:bf:35:66:23:71:e2:c2:72:42:e2:c9:40:6b:5f:
5c:7c:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:53 2025 by rpki-client