Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json)
Hash identifier: RIG7/ntxeoPNdyB1fQNsEmNLubGMejY9OCw2eK+04TI=
Subject key identifier: F1:DB:27:4D:AE:9D:99:57:6C:C6:F3:2B:7C:BA:52:6D:82:1C:2C:39
Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
Manifest number: 6A
Signing time: Fri 31 Jan 2025 06:01:29 +0000
Manifest this update: Fri 31 Jan 2025 06:01:28 +0000
Manifest next update: Fri 07 Feb 2025 06:01:28 +0000
Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: GKL8d0Qazpe237lo/Yx8UauTrNP7psIcLe5sXOydXO0=)
2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: Ge+55CQegGWCZISlkeWVyEDQbw8xhE1lFYLjXYnwl5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Validity
Not Before: Jan 31 06:01:28 2025 GMT
Not After : Feb 7 06:01:28 2025 GMT
Subject: CN=679c6738-3624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:c6:60:e7:be:ab:3c:66:01:c6:3c:65:97:
83:4b:24:35:59:45:8c:73:95:17:c1:ae:70:3b:39:
c5:ec:04:7c:4d:5a:0a:54:21:f6:93:7e:b6:c1:0f:
5a:b8:b8:c2:0e:56:24:da:f4:97:ed:32:e0:a1:be:
50:9f:10:78:01:a1:bd:1b:27:1b:c2:ca:56:6d:8d:
43:72:0e:6f:e1:0b:72:e3:53:60:fe:b0:b4:dd:5b:
5d:d4:f5:66:02:f7:43:12:81:b9:ea:46:d3:a9:00:
ec:ff:03:6a:46:2a:5c:b0:ea:fd:84:45:58:e1:e3:
32:0f:e6:4f:99:82:01:35:3a:6f:19:c2:83:55:11:
ed:f8:00:4c:dd:68:ff:f3:20:fb:cd:9f:dc:02:fe:
36:3e:f0:75:f8:a4:a3:b2:96:04:98:da:4d:93:e0:
b7:91:a9:c7:f3:02:e1:a7:78:0d:d8:7f:b4:c6:13:
bc:8a:8a:f9:7a:d0:4c:e0:27:04:3f:72:b8:11:21:
c7:ae:c4:85:d2:aa:53:2a:bb:86:bc:0a:fe:02:9a:
4f:c3:b1:3f:7f:41:59:3f:6c:85:b9:1a:2f:9a:93:
68:c4:07:bc:f0:b3:fb:ec:e8:1e:4d:f1:ac:47:7b:
6d:9d:77:64:e0:f9:a3:7b:20:ef:6c:f0:66:71:b7:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:27:4D:AE:9D:99:57:6C:C6:F3:2B:7C:BA:52:6D:82:1C:2C:39
X509v3 Authority Key Identifier:
keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:ba:aa:95:c6:5f:6a:c7:5c:14:53:99:bc:64:f7:15:bd:
88:8c:0a:5d:22:a3:9c:b3:53:fe:3e:d6:a8:53:ae:6e:ad:b5:
68:68:8f:18:a8:4d:24:12:0b:31:4b:ea:89:39:1f:4e:e6:b0:
8e:ec:b4:d4:58:50:ac:3d:03:fe:99:59:d5:9a:57:da:6e:c4:
a1:c9:53:fc:c5:24:6d:2a:7c:5b:37:da:37:0a:b5:33:02:34:
f0:07:82:40:8c:66:f9:8e:1b:1c:af:ce:9e:55:66:43:74:2d:
a6:1d:ba:a8:19:a8:c9:63:80:9f:5d:9e:db:7e:8c:46:21:3f:
be:6e:59:c2:25:c0:b3:3d:b0:92:04:f4:71:ef:8e:8a:02:ad:
c5:ee:9b:ef:f6:1e:f5:f1:a4:4c:c0:f2:53:c1:c8:3a:86:28:
a4:a1:78:f0:45:ba:31:3e:e4:89:74:91:cd:06:76:d1:c4:a8:
37:c8:1f:43:8c:2d:18:06:40:5e:bc:bd:05:91:e6:58:56:8a:
91:6f:cc:87:1e:ed:9a:9f:ab:00:1f:28:d1:18:11:4e:ca:31:
48:bf:e5:0b:59:d7:26:1b:14:be:30:9e:21:95:e3:09:c9:2d:
60:04:24:cd:f3:eb:7c:11:c6:44:76:c2:98:c7:d4:33:49:ae:
b0:90:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:42 2025 by rpki-client