Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier: U7Sc84oQeEajJm4Jg+LNTIYsPFNC0YV3YOFdbJ10evU=
Subject key identifier: CD:57:DA:75:DD:1B:E4:BB:50:A6:B7:FE:63:E5:80:77:DA:1C:A2:75
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 05:03:40 +0000
Manifest this update: Fri 31 Jan 2025 05:03:39 +0000
Manifest next update: Fri 07 Feb 2025 05:03:39 +0000
Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: 44riz3UR7pcN5ycFtU+k8OsWAhE8sKnvVyBKq+0Qwbg=)
2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: E6pVE8DvjoGcz1F0AEh1i7js+Z0pbdB5Na01TO4wqGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Validity
Not Before: Jan 31 05:03:39 2025 GMT
Not After : Feb 7 05:03:39 2025 GMT
Subject: CN=679c59ab-d4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:4d:fb:73:ae:ab:02:cf:cd:3f:4c:94:ea:
7c:58:26:cc:3a:8f:af:c2:14:87:00:ba:5d:a8:d1:
91:48:fc:ae:dc:4d:13:0d:bc:88:9c:01:3a:5d:e1:
db:2e:07:ff:c0:58:c5:28:29:5c:4e:0b:b2:aa:d8:
9d:a9:f4:9f:85:78:e9:3c:00:cb:43:26:75:72:84:
0c:2d:d7:92:d8:15:59:64:92:30:b3:10:0c:00:05:
1e:ac:60:e4:3b:3c:c5:3c:04:8e:6f:2c:68:e5:7c:
62:02:c7:7a:07:58:aa:10:0f:a4:3c:a5:cc:59:38:
8c:ce:50:0f:fd:d1:0b:31:27:68:8e:dd:9d:6d:5b:
33:92:7e:8b:68:de:97:30:1a:78:25:bf:fa:3f:74:
c4:fe:fe:45:89:62:c5:eb:50:8c:8c:00:27:7c:1c:
3f:29:a0:7a:14:7a:77:cb:a2:9a:39:71:21:24:6d:
4a:53:81:d0:15:14:7c:24:e5:25:f7:c2:4a:df:11:
6b:b4:ce:e0:9d:20:64:b2:9a:6a:38:20:28:cb:0d:
5c:4c:51:1c:79:43:7d:7d:79:61:06:d5:76:a3:6b:
29:cd:19:45:66:f2:ce:2a:c0:bd:6f:01:0e:d6:bc:
21:79:d5:15:dc:e3:1f:73:dd:5f:b0:48:da:5d:85:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:DA:75:DD:1B:E4:BB:50:A6:B7:FE:63:E5:80:77:DA:1C:A2:75
X509v3 Authority Key Identifier:
keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6f:2c:b6:2b:0f:ad:27:a6:cf:40:0b:d2:67:93:47:36:59:
c9:92:eb:e1:eb:1e:d6:53:b8:d0:e8:ec:c4:55:b7:b7:40:41:
73:54:f7:f7:f4:75:b9:3b:ef:03:b3:f2:3d:af:49:d5:e1:a8:
20:fb:70:4f:f8:55:a2:cf:09:49:b2:39:35:c3:58:2d:98:2b:
6a:0a:9b:51:a1:7a:31:77:c5:54:e8:a0:ab:0e:b4:a9:90:9d:
f1:fb:c6:af:fc:7c:f2:1d:f4:1d:f2:f9:51:d0:4b:66:68:27:
d2:39:eb:16:23:e7:75:7c:cf:96:85:76:b3:6c:a7:62:94:d4:
3d:cc:8f:be:e0:43:c3:e1:5a:eb:29:88:9d:de:48:f3:04:46:
b4:2d:a9:6a:da:24:7e:29:a3:1c:ec:03:ee:23:8f:32:f2:19:
09:e1:ae:c0:31:0b:32:83:29:60:56:e1:89:43:a4:cf:2b:ba:
40:75:57:14:ce:0f:93:bb:ae:db:ad:9d:d9:4c:22:26:53:72:
be:39:f8:9d:54:38:99:88:25:1d:3f:ec:f1:75:09:0a:39:52:
9e:a8:eb:8a:c5:7a:ed:63:a2:95:ba:7a:ad:a7:e9:82:36:94:
92:4e:61:31:e7:1f:97:92:cd:8d:ca:f4:08:bb:75:e3:a8:c1:
f9:58:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:12:57 2025 by rpki-client