Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft
File: nTwzrLEQPnH6H_PmAT6dwxEiafw.mft (raw, json)
Hash identifier: RMg+NyyvHEBVI2jV5pbphFcZeHUWvCLgzRnL0G9lwSg=
Subject key identifier: 82:12:FD:6A:60:C6:B6:1F:11:DA:09:15:48:6D:8C:1B:95:24:E0:D2
Authority key identifier: 9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC
Certificate issuer: /CN=A91B1E8B/serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft
Manifest number: 68
Signing time: Fri 31 Jan 2025 06:02:31 +0000
Manifest this update: Fri 31 Jan 2025 06:02:30 +0000
Manifest next update: Fri 07 Feb 2025 06:02:30 +0000
Files and hashes: 1: nTwzrLEQPnH6H_PmAT6dwxEiafw.crl (hash: MRYyfCKFybM2fdS6BCaCp4nvt5bqRyKthf+KRSAgU30=)
2: DD76C09AB16711EFBD483568C4F9AE02.roa (hash: lZ2oQ4wvz4evXveDE7LNoYJmc6E6jg/A59sR/rYBi6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E8B/serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC
Validity
Not Before: Jan 31 06:02:30 2025 GMT
Not After : Feb 7 06:02:30 2025 GMT
Subject: CN=679c6777-87d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:3b:aa:4a:25:84:59:e6:d6:2a:a8:b7:ce:
ec:9e:ce:db:4f:fd:e0:47:db:f5:18:9d:ef:9b:aa:
b7:8a:2d:15:b2:3c:ac:e1:a4:bd:e1:59:3a:c7:de:
6f:9b:26:5a:d9:16:1d:49:8b:60:b3:46:67:08:cf:
dc:51:8d:dc:e9:45:be:06:16:26:e5:fa:2a:23:fa:
f0:8e:35:d5:a5:ed:ca:d7:88:ec:1f:ac:3a:f4:c5:
f7:88:55:c9:4f:c5:db:0c:fe:a0:66:ea:d6:5e:30:
9b:2f:10:52:f6:f8:ee:b7:88:88:98:02:7e:ec:7d:
12:4b:bf:63:62:c7:65:42:fb:c7:ca:f3:00:92:93:
3e:fd:03:67:72:15:fb:73:d7:4b:62:7c:da:9c:a0:
33:aa:86:22:e3:32:0c:fb:4f:69:60:4d:6b:4d:87:
0c:03:c4:e1:08:f9:d6:8a:6f:58:c2:6c:79:96:80:
7c:bb:79:9a:d8:9d:02:86:29:79:2b:c0:7d:42:e3:
9b:42:5e:51:03:4d:f9:dd:02:2f:b1:ad:dc:ef:0a:
ef:98:99:14:1b:56:46:90:a3:8b:10:9b:e3:f7:cc:
f9:01:7f:a1:5c:93:52:d7:71:17:f2:56:c8:dc:b6:
e5:d9:c0:d2:75:24:cf:7b:98:ab:76:66:6d:0d:3b:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:12:FD:6A:60:C6:B6:1F:11:DA:09:15:48:6D:8C:1B:95:24:E0:D2
X509v3 Authority Key Identifier:
keyid:9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d0:65:23:2a:7b:93:a6:b0:66:d6:bd:03:64:d3:ff:fd:25:
12:88:b4:cd:30:c3:78:99:49:3b:7c:d8:23:c4:5b:f4:45:fc:
59:c0:4b:5a:33:26:95:25:7b:04:ac:6e:2b:0f:7b:0a:67:d2:
d7:ff:bb:37:26:3a:84:4f:e3:77:1e:11:cc:ee:a3:e3:6a:72:
52:ae:5d:35:1f:67:e0:66:dd:fb:10:dd:8b:16:de:74:5f:af:
9f:95:2f:ba:d0:e9:49:45:a1:93:e7:73:d2:18:6f:d4:d2:93:
3a:2f:5b:52:5e:86:17:66:c4:b3:8e:3a:2d:78:6b:fb:98:12:
b0:ec:fa:df:e3:51:9c:7c:96:e1:95:f2:32:0b:7b:e8:13:05:
dd:3d:bc:a3:4f:05:85:bd:c5:10:f9:76:32:ed:d7:3a:da:84:
13:2c:52:1a:fa:66:da:a8:87:60:1b:8b:bc:b4:9c:59:0a:62:
bf:c0:f7:32:19:03:4f:e5:54:17:84:78:78:3d:e1:fa:9d:c8:
8e:e9:c2:0a:e8:86:d4:b0:91:d6:f9:eb:bd:f2:7a:9c:9b:7f:
0f:71:0e:8d:56:c6:f9:06:92:ae:6d:f1:2b:24:b5:32:2c:89:
b1:82:d1:7b:0d:cd:27:03:e4:9d:c9:25:99:64:f8:45:11:fe:
62:3d:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:58:53 2025 by rpki-client