
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: kMsOTSpFgM/Zkihu3ycZqYMBnEcXJN3doVmofUulaac=
Subject key identifier: FE:C9:B6:C6:F6:35:46:3A:AB:FA:FA:2B:38:95:2F:01:65:40:84:4B
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 01AC
Signing time: Fri 31 Jan 2025 02:27:53 +0000
Manifest this update: Fri 31 Jan 2025 02:27:52 +0000
Manifest next update: Fri 07 Feb 2025 02:27:52 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: EHWCBzw8AgyKvxCeo+kgH+Ao4llQ720fayuTQ5siY9Y=)
2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=)
3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Jan 31 02:27:52 2025 GMT
Not After : Feb 7 02:27:52 2025 GMT
Subject: CN=679c3528-ca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:da:5a:ec:4e:6a:e2:97:d9:2c:4c:f5:a0:
0f:5a:07:05:db:89:af:7b:f5:9b:66:a6:77:ac:46:
1c:2e:d8:6b:34:19:3f:9b:36:ff:b1:06:3e:41:24:
c7:f3:f9:e2:91:99:e8:31:67:9d:31:95:c9:30:1c:
41:29:7c:9d:1c:0d:95:02:93:39:a0:f2:14:7e:fc:
00:ea:95:5f:f4:23:70:4b:c1:12:87:1c:f6:92:c8:
1f:2b:2c:e9:6e:e5:a9:85:10:13:42:e2:24:a9:35:
a8:69:e7:81:39:df:ef:1b:e2:b6:fa:e6:0b:cc:64:
a2:ba:82:9d:bb:bd:29:3b:2a:e3:81:18:b8:3f:24:
e8:0d:56:9b:85:c1:a9:f7:41:f7:8b:94:5d:b1:c7:
f8:e0:88:f9:fc:72:51:e6:10:05:0e:01:02:c1:79:
cb:75:92:b1:6e:e8:e3:1e:f3:ff:7d:90:47:67:6a:
7c:46:1e:8b:d9:fc:0a:4c:19:5f:62:ff:1c:4b:d0:
5e:7f:f5:6b:e8:eb:77:a2:89:46:76:1b:b4:8d:47:
e6:48:2f:80:2a:6e:63:23:42:36:4c:42:d7:46:10:
4a:7e:42:f1:ed:b6:b1:12:7d:31:94:d7:50:c7:93:
14:58:f8:88:8a:d6:52:48:62:99:7d:94:7a:d2:7c:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:B6:C6:F6:35:46:3A:AB:FA:FA:2B:38:95:2F:01:65:40:84:4B
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c9:d9:db:69:a7:bc:8a:3b:ef:06:83:1b:f5:9b:39:cc:61:
e7:dd:66:f2:55:72:f2:de:03:05:69:3b:f4:44:a2:e1:15:1b:
aa:a4:6e:3a:fe:78:d8:92:71:62:1c:54:83:1e:ff:99:f2:8a:
67:2a:f7:7f:3f:27:d4:e3:6e:0b:9c:b8:74:00:e1:fe:20:dc:
df:e5:d5:80:ba:5c:df:bf:d2:df:a1:6e:c2:9d:3c:8b:22:40:
35:02:f0:1a:15:7a:31:94:9c:c0:28:a2:8f:8a:96:05:2b:c6:
15:4d:d1:41:69:e9:a7:b6:15:f3:c3:eb:aa:08:90:94:02:19:
fa:28:71:39:9d:87:dd:38:85:c1:4a:a8:73:ca:4f:eb:68:f4:
0d:82:08:d7:89:4d:7a:4d:c6:43:1e:9e:b8:d8:13:17:a6:08:
af:a3:5b:55:5d:65:0a:f5:4d:88:0f:d1:3a:85:9b:3c:98:27:
06:79:3d:e9:0f:d2:d6:d3:4e:3c:1a:d5:88:12:6e:26:69:dc:
e9:45:36:81:03:9b:d5:03:54:93:1e:a3:0f:3a:b2:d6:f1:07:
83:e3:98:9b:4d:5a:1a:d8:4c:ef:e4:db:23:c1:58:00:ea:1c:
fc:d4:c7:dc:18:d7:96:e3:ef:2b:63:11:6d:7a:80:b4:bb:8c:
10:89:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:59 2025 by rpki-client