Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json)
Hash identifier: fqFamcxs9J/TN5RcXjNRoQXHANyu3r+kWzXcieS1SkU=
Subject key identifier: 73:7E:B3:E9:0D:FC:19:84:26:5F:A9:70:EA:24:DE:95:83:47:AF:CD
Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A
Certificate serial: 1566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
Manifest number: 155E
Signing time: Fri 31 Jan 2025 16:48:27 +0000
Manifest this update: Fri 31 Jan 2025 16:48:26 +0000
Manifest next update: Fri 07 Feb 2025 16:48:26 +0000
Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: XEA4rvt4dRgViRhB8kwYXFRdl0Cok03lqU8z2F7obrE=)
2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: 1WW3WJFCQXTAgfqp4BPT1d+bkbg/Wm5DIDF6W6wSe5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5478 (0x1566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A
Validity
Not Before: Jan 31 16:48:26 2025 GMT
Not After : Feb 7 16:48:26 2025 GMT
Subject: CN=679cfeda-1816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:99:a0:75:b0:c9:23:02:cd:d5:6c:c4:15:
69:ef:c7:4b:10:3e:d2:cc:8e:a7:6f:42:4e:58:66:
49:16:60:df:d0:42:c3:12:28:15:59:d0:27:ef:26:
ce:e7:9d:bc:e8:a3:ee:fd:60:37:70:57:0c:2f:54:
4d:b0:9f:65:bb:fa:28:48:af:08:2f:26:96:85:21:
70:c0:20:22:6e:53:78:6b:bc:f2:b0:48:44:69:73:
c8:a7:88:6f:75:43:df:ba:5a:6a:90:f3:19:8a:6f:
b6:63:5a:91:aa:9b:16:62:1d:96:5e:5d:9b:25:47:
05:5f:8f:ff:5a:7e:fe:45:f8:4e:1d:10:f9:05:e3:
fa:f0:eb:a4:9b:ce:c1:ef:6a:5f:74:a4:7d:f0:1c:
1e:02:9c:97:d9:01:e2:59:cf:c1:7d:4f:03:a2:43:
85:9b:77:1b:af:95:a8:fb:55:d8:e5:cc:87:1e:bf:
61:ac:af:4c:28:fa:1d:7f:b3:c4:c2:ae:62:e6:42:
58:00:22:97:42:c0:81:22:a7:df:07:31:20:23:e9:
80:46:8b:64:f5:72:d9:61:c3:92:02:58:b7:69:75:
c8:d6:c2:a1:9f:ea:ec:88:01:d9:94:d9:22:65:f6:
bf:90:66:4a:ef:8b:28:34:af:da:d3:32:8a:6f:83:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:B3:E9:0D:FC:19:84:26:5F:A9:70:EA:24:DE:95:83:47:AF:CD
X509v3 Authority Key Identifier:
keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:92:4f:0d:c8:5d:05:79:e9:af:36:6e:84:23:4d:ed:49:
59:13:ef:bc:da:48:99:1f:7a:b0:50:87:06:c6:90:24:51:8f:
a1:7a:b9:cd:85:dc:ef:ac:7c:77:8c:40:2c:6f:56:90:ac:1c:
2f:bb:7e:c9:68:03:9b:15:b7:04:fd:23:6a:6d:08:bc:c0:73:
db:d0:08:99:d0:0b:22:d4:18:b9:f7:dc:a7:60:72:12:c8:b2:
93:dc:de:96:ca:80:94:37:b4:59:48:e2:41:a0:d9:b1:12:a2:
19:df:8c:3e:6b:bc:e4:72:e0:29:8e:3b:5e:ac:9d:29:12:06:
c4:d1:9f:81:74:40:74:f0:3c:4e:de:9c:58:7d:b5:21:8e:f5:
67:04:7c:4c:f9:a1:0a:04:91:91:0a:11:0d:a9:d5:8f:bb:4b:
d4:5c:ca:92:cf:1d:1c:27:76:32:a3:d4:9a:9f:d6:90:f8:d2:
d5:ba:7b:b2:a7:d7:b5:af:c0:ff:97:88:23:19:6d:2e:b7:7d:
5b:53:9b:07:0d:3f:f0:81:fd:06:88:1f:44:7f:59:7b:67:fb:
dc:0e:ad:2f:c8:8a:f6:08:af:14:31:d3:47:e8:c8:84:d4:8f:
72:ac:80:20:21:f0:a1:ad:e7:5f:76:f8:44:ff:ae:f1:68:02:
21:dc:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:25 2025 by rpki-client