Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier: qwiOQLYX71jSj65KwJbfHAf5MmJwYL0sNibvZNFSBNQ=
Subject key identifier: B6:E4:DB:66:06:88:A8:46:FE:D9:65:4D:9A:D9:B1:62:80:AC:1C:F6
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number: 1BE4
Signing time: Fri 31 Jan 2025 16:14:25 +0000
Manifest this update: Fri 31 Jan 2025 16:14:25 +0000
Manifest next update: Fri 07 Feb 2025 16:14:25 +0000
Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: yDeqqq/WdtS7eO5OVDT0zSf95SvJLQG9tzlhhdQ3tSY=)
2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: NUz4kB3CyIG2IBuDbo+UA9LBpVU0SpPOT0o+emRtCgw=)
3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: FnUaKoThOa5+XgHVHWe2uhUGOR/oiQOVc+Zdq2BOUUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7163 (0x1bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Jan 31 16:14:25 2025 GMT
Not After : Feb 7 16:14:25 2025 GMT
Subject: CN=679cf6e1-ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:f1:0b:d9:7a:65:b4:00:d7:4c:03:d9:c7:
dd:06:a4:a1:b4:a9:36:de:f1:3a:72:af:c8:32:7f:
1b:b3:51:6a:70:f2:0b:ed:2d:c2:2d:7c:34:de:14:
c5:e6:2f:dc:f8:0a:42:7b:c8:06:02:6f:73:3d:78:
cd:03:dd:b4:1f:17:9b:25:17:93:76:b3:80:27:31:
e5:36:9b:7e:42:e6:03:d1:2c:cd:17:be:a7:91:60:
4f:cb:40:41:fa:8a:9a:9c:5e:0e:bf:02:b5:0d:37:
f8:c8:fd:23:93:e9:09:0e:21:68:64:95:fb:c8:af:
29:a0:c5:74:c8:5f:1e:23:54:4e:c8:75:e9:9f:ac:
ed:a1:59:08:f5:1b:26:67:81:88:52:d3:25:99:28:
da:aa:b6:5d:9a:e4:3e:04:a9:11:83:73:84:f9:e6:
fa:4c:24:5d:98:02:29:5f:f2:b6:b4:7f:2d:69:4c:
c2:25:02:df:ca:14:2f:bb:3c:33:bf:78:e3:b1:de:
58:ac:5f:7e:a0:fc:c2:35:ab:c7:47:00:6c:70:6f:
87:bd:e6:ac:aa:48:2d:8c:f4:3a:f2:74:c2:b4:69:
ce:bb:1f:26:6a:c3:a8:5b:98:f5:25:46:74:97:72:
cc:74:45:eb:4e:0f:90:c7:99:75:00:42:6d:fc:bb:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:DB:66:06:88:A8:46:FE:D9:65:4D:9A:D9:B1:62:80:AC:1C:F6
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:7c:cf:9a:94:a6:17:83:71:95:58:cc:4b:36:6b:6e:2b:6f:
91:eb:be:2e:13:83:42:43:37:da:79:83:28:aa:52:0b:d8:36:
e0:68:18:d2:dd:45:dc:f8:77:3b:08:54:70:57:80:ca:52:65:
a0:0d:fb:65:c9:b1:6a:4a:97:bc:d3:6d:7b:ce:ce:b1:9c:ac:
88:2f:5b:06:3f:ba:2b:7f:8a:b2:0e:f0:19:ab:a2:22:78:27:
57:70:6d:e2:d4:20:b9:40:8c:43:40:a5:2d:34:ad:d9:87:7c:
c7:e8:ce:e3:c7:4c:b3:62:f3:51:16:c6:1b:b2:6f:22:ae:ee:
06:a0:5d:7d:b0:8b:b7:4d:f3:e8:d2:4f:db:5d:26:4e:2e:d4:
3a:eb:6a:b4:e6:cc:c5:60:2d:6d:9d:a6:50:52:f6:a6:82:e5:
b9:69:fc:92:e4:8e:7b:82:8f:1a:89:33:95:af:ac:84:03:2d:
10:4c:72:35:84:db:cc:65:27:fe:a4:a3:53:3b:c3:db:55:22:
45:12:b0:68:34:c4:66:65:d2:59:c4:80:3e:43:87:ea:f3:f8:
06:8d:76:8c:be:76:1e:87:b6:cc:93:9c:39:02:ed:91:01:4f:
46:c7:9b:fc:6a:c1:fd:f8:51:3e:ab:a0:3b:fb:1f:2c:b2:90:
2b:30:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:05 2025 by rpki-client