Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json)
Hash identifier: c4pmMM5mJOrWtgYuXLZncAkUDSRe+YZF0EzE3Wnh2ZE=
Subject key identifier: FA:F9:C0:BD:C0:55:F1:59:C7:47:27:55:60:95:DB:B1:1D:8A:BF:61
Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 05:58:51 +0000
Manifest this update: Fri 31 Jan 2025 05:58:51 +0000
Manifest next update: Fri 07 Feb 2025 05:58:51 +0000
Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: X7zWI0DIlFGOZiiV2e1gN1/gE4DqPsL8d9aueme0tI4=)
2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=)
3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Validity
Not Before: Jan 31 05:58:51 2025 GMT
Not After : Feb 7 05:58:51 2025 GMT
Subject: CN=679c669b-6331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:3d:05:53:e0:5c:c2:ef:cc:59:1f:a3:6a:
de:59:50:d2:bf:1d:c8:c3:b1:4a:86:2a:24:06:90:
04:e9:0a:78:2e:31:a6:38:71:96:6d:1d:d7:c4:74:
f3:46:29:e8:03:b4:71:d8:23:ec:98:17:c5:2e:c7:
42:a7:ed:bb:56:5d:26:85:5b:ad:f1:6b:d5:7f:35:
50:8c:f1:5b:2b:96:d1:1f:22:4e:c8:5a:30:7f:ee:
a4:0e:1a:98:4a:21:eb:d7:59:0a:39:3c:c0:b9:91:
6a:12:7b:7c:6b:b1:b4:d1:f0:50:6c:4d:5e:3f:d9:
bf:43:b8:ee:20:01:1e:84:84:ad:93:36:55:5f:91:
3e:a1:a6:fd:d0:95:e5:3a:b6:eb:f9:2f:75:88:59:
fd:38:e7:1c:53:b9:a4:49:1f:8b:ec:65:47:75:ad:
b8:91:b2:bc:aa:20:b8:1a:0a:1e:e1:da:2a:32:f0:
90:a0:5c:e9:95:05:a6:ec:1c:54:39:3d:21:a7:40:
b2:99:cf:94:a3:ce:d5:b8:1a:0b:25:cf:0f:88:20:
6a:15:5c:4b:65:3b:1c:38:29:27:12:ee:06:0c:11:
78:79:81:9f:65:b8:3a:0c:33:4f:1d:46:f2:67:f2:
dc:ae:f1:08:a5:b1:ff:61:e0:00:92:1d:1c:10:79:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:C0:BD:C0:55:F1:59:C7:47:27:55:60:95:DB:B1:1D:8A:BF:61
X509v3 Authority Key Identifier:
keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:e4:94:99:d4:6e:dc:bc:7b:6c:db:93:26:38:29:23:27:
5d:22:6a:e2:95:a5:5a:63:bc:b0:28:d0:ce:cf:97:4b:90:a3:
fd:f6:94:d6:8a:d2:1c:c5:cd:f2:1e:12:7b:c9:d3:dd:f3:cd:
b2:ae:9a:32:9c:00:ad:a6:98:b2:61:34:19:bc:1a:e7:a5:98:
0b:ce:0f:d1:43:73:c9:b0:91:c9:6e:83:2d:42:cd:eb:4e:17:
25:9b:f2:62:8c:a6:79:96:8a:6c:33:c7:15:e5:2e:c0:2c:96:
46:82:c3:81:70:ad:b3:0e:7b:c2:be:2f:ed:f7:78:bf:28:38:
28:40:92:ad:bd:63:0c:14:44:d7:4b:f6:d4:7a:5a:4d:b1:15:
62:2a:5d:e9:55:24:1e:6e:a2:56:4a:bc:4b:f4:9d:0a:13:6b:
73:ae:52:1e:52:24:4d:24:7c:b8:4e:77:73:52:cf:62:e8:2e:
12:e4:8b:02:ac:d4:e4:55:20:d4:cc:fa:03:bf:cf:87:a6:76:
45:32:b2:e7:ff:bf:56:17:d8:01:6f:70:ab:08:ec:ca:ea:7d:
7d:82:3c:ec:f8:6f:67:5c:15:2f:2f:b7:c5:3a:5f:63:4d:36:
71:fd:f1:ff:62:fc:ae:e2:4c:66:16:84:97:05:28:7c:5c:51:
7a:4b:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:39:29 2025 by rpki-client