Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier: meheudUeRdGcqXLsjnnLjDPxXcpNeN/TWmd2T9FKiPo=
Subject key identifier: F0:25:6B:EF:88:A7:70:92:81:04:BC:F9:34:8F:B7:E3:60:53:22:4E
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 05:57:11 +0000
Manifest this update: Fri 31 Jan 2025 05:57:10 +0000
Manifest next update: Fri 07 Feb 2025 05:57:10 +0000
Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: YSUsSmMXpHH6mWOL76I7eBwr6qsRblMXzTT4Y/ouAyQ=)
2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: JKakG9b3XVmkk3cxf1Vx97SVOH3cZkhGMhy0iHgzcqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Validity
Not Before: Jan 31 05:57:10 2025 GMT
Not After : Feb 7 05:57:10 2025 GMT
Subject: CN=679c6636-e5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:74:3f:42:4d:06:11:4c:56:c5:ea:f1:d8:
d5:d2:81:3e:64:cc:89:97:e8:f3:9b:bf:bb:77:14:
6a:78:42:68:8c:65:62:e1:c2:18:f2:db:f9:28:d7:
27:1c:e1:2b:7e:83:5f:56:22:91:64:af:f8:f4:77:
d1:c0:71:06:a3:e4:d9:13:c9:d5:2f:96:f1:be:37:
a6:46:33:36:b0:e1:8e:cb:2b:39:21:f4:4a:79:99:
82:4f:96:52:e1:b6:5b:ad:56:1a:db:93:64:ff:30:
b3:8b:66:9e:06:8a:81:b3:80:c8:c7:26:69:f6:e7:
fb:69:00:1a:3e:46:dd:23:b2:99:ca:37:71:97:ae:
d5:1e:81:d0:0f:db:be:06:df:15:8e:0b:e3:42:17:
07:73:6f:51:1e:20:2a:1c:6e:9f:0b:b6:64:f0:50:
51:3a:96:00:49:e8:57:57:1d:79:0e:31:22:c6:9c:
11:41:c1:f1:95:25:86:95:58:cc:64:52:c5:c1:e7:
df:2d:8b:d1:aa:26:1b:8e:4e:e6:4b:37:e1:51:20:
23:8e:4a:a7:2a:a3:cd:0f:d5:a1:57:4b:a8:bd:dc:
72:3e:91:ef:16:bf:73:44:bf:c7:1e:fa:ad:29:dc:
08:30:3e:89:d9:42:b9:f7:31:8f:5e:2a:1d:d3:48:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:6B:EF:88:A7:70:92:81:04:BC:F9:34:8F:B7:E3:60:53:22:4E
X509v3 Authority Key Identifier:
keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:9b:0b:d9:be:2f:6b:37:5c:d7:32:40:24:46:af:89:a5:
3c:1c:97:1d:2b:19:e3:22:18:61:5c:9c:bb:01:7e:60:5d:73:
d7:bd:23:3f:79:6d:d8:71:a6:c6:5b:d2:91:eb:bd:7e:0a:43:
2e:de:21:72:e1:28:45:c9:27:da:37:a3:57:90:fe:1a:af:47:
12:49:12:d0:70:b9:af:47:e3:64:bc:1b:27:09:fc:3c:34:35:
1b:22:d1:d5:2d:22:7a:c7:4a:85:67:00:63:3e:b5:8d:f9:f9:
9a:9b:5b:6b:95:c2:91:d1:55:07:c5:10:e4:26:a8:5d:ff:53:
1d:7e:33:0f:38:86:94:d4:f2:47:74:72:c0:6b:af:e0:26:ab:
d4:57:44:d9:2c:2a:89:39:d4:0d:1c:ea:70:d6:d0:a0:a3:98:
7b:dc:05:e0:25:0a:86:cf:e7:bd:b3:48:18:c9:94:a0:f0:d8:
aa:34:3a:7c:cc:11:0e:87:ef:27:5f:4d:c7:b1:d7:a3:11:df:
7f:f0:60:b1:a4:0c:dd:60:4f:3e:12:b1:75:f5:6b:9b:34:ed:
8e:88:15:57:eb:49:dc:99:fc:1f:30:b0:b1:bb:bf:6f:da:86:
7b:86:e3:98:df:09:ed:22:29:28:28:0f:65:35:60:77:a7:5a:
21:f9:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:05 2025 by rpki-client