Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: vo4WWidWZk67z/2uf+DnY/okiDYcOJDd7EskSIwozJ8=
Subject key identifier: E5:4F:A5:96:B7:76:C1:A6:10:66:0A:F4:FC:D1:B1:83:0C:ED:23:DA
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 6C
Signing time: Fri 31 Jan 2025 05:59:03 +0000
Manifest this update: Fri 31 Jan 2025 05:59:02 +0000
Manifest next update: Fri 07 Feb 2025 05:59:02 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: tj+HNZfxF2p7SJOvEykngDjk4fOUs+TvTwdCMTxkNyE=)
2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: OV24Kj5y+880mPdkukE2fpkmI0sbTUDGEcrj2jYLxRA=)
3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: RWKYaNgfk7P7N5uSJ3tE2gik3mua1Il7oXxrRLWnbWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Jan 31 05:59:02 2025 GMT
Not After : Feb 7 05:59:02 2025 GMT
Subject: CN=679c66a7-cd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:ee:a6:93:b6:72:33:83:3b:88:ce:53:81:
b8:56:36:bd:d5:64:53:d2:95:e3:48:f3:32:9e:80:
c4:77:85:28:85:98:53:39:f5:9a:90:2a:3d:cf:ed:
a6:5c:28:e6:de:a4:47:02:e4:28:d0:bd:32:6b:3e:
fc:d6:3c:82:d6:88:99:29:fa:a4:14:30:c4:71:9a:
48:b7:b9:fa:ec:f1:85:96:5d:c8:01:d6:83:15:7a:
af:5f:29:52:24:bc:25:e7:4d:b1:0d:ab:36:e6:24:
f4:c4:56:06:20:4a:f5:d1:5a:be:0d:1f:f7:e8:b1:
61:ea:88:ee:9f:d9:d7:0f:98:c6:da:06:c2:ec:74:
dd:c3:8d:7e:8f:32:f8:8a:b3:a6:74:f7:53:bd:c9:
a6:49:b7:c5:7e:d2:08:f1:06:26:8c:99:0d:57:7d:
5d:45:f2:a9:22:c2:f5:b0:a8:94:d4:b4:6f:3a:09:
7f:8f:8b:1e:01:0a:c3:7e:05:b6:a0:3a:27:d0:c1:
5e:82:31:3d:aa:58:01:9c:a0:d2:8f:26:ba:18:64:
fa:87:d7:97:0b:72:29:da:56:a4:69:08:c8:1c:b1:
68:44:15:6f:9a:2f:22:45:89:10:a3:97:b9:35:4e:
01:77:95:37:ae:cb:5d:f7:47:b4:e5:74:e7:9a:e4:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:A5:96:B7:76:C1:A6:10:66:0A:F4:FC:D1:B1:83:0C:ED:23:DA
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:aa:ba:ce:63:1c:7d:2b:65:83:b8:e2:28:dd:20:3e:88:
6e:cb:60:f5:25:98:07:44:f7:83:9f:c7:dc:c5:02:da:7c:ca:
fc:eb:c2:a6:df:b2:6b:86:cc:ae:9c:27:28:ea:e2:45:93:4a:
02:c5:4f:67:e5:e4:04:92:dc:f5:c6:14:7a:67:f3:af:71:b1:
c9:44:ea:de:0a:7e:1e:d4:3c:58:a0:1a:b8:7d:8a:43:f5:9e:
ac:31:f5:e3:f4:b6:ea:9b:5a:6d:4a:eb:f3:99:74:52:46:38:
87:30:34:ce:ab:00:f9:c5:c4:a2:0b:de:ed:7a:8c:98:19:fb:
11:20:ad:3e:7c:7e:b7:fa:ef:3d:2f:2e:87:8d:c4:79:b8:53:
56:36:83:bc:77:a5:f6:f7:ea:26:ca:c8:d3:e5:e1:41:98:18:
0a:aa:a1:d7:7e:d2:7f:31:23:b6:fa:a7:2c:02:56:a2:93:17:
40:36:e4:7d:4c:3c:ba:72:a5:55:7d:4d:cd:89:5e:cd:85:eb:
c7:8c:06:60:ce:ac:07:c5:c1:b1:cf:de:90:b9:a8:66:17:cb:
d9:a6:aa:49:3d:63:a2:14:43:60:68:56:01:ba:88:5a:53:db:
dd:01:1e:5e:54:74:a0:57:17:4e:f6:6f:09:56:19:f2:f6:0c:
66:03:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:34:53 2025 by rpki-client