Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: E1q5kg4pla5+VT58LDJYvKPZKI+SNR7v2fTUJME2yhM=
Subject key identifier: CE:7A:1D:B6:39:71:E7:D2:6C:1D:F5:A7:F2:F0:37:C6:00:D4:8F:A9
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 062F
Signing time: Thu 30 Jan 2025 22:38:06 +0000
Manifest this update: Thu 30 Jan 2025 22:38:05 +0000
Manifest next update: Thu 06 Feb 2025 22:38:05 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: UDr9paJrDoty9BKYkB+MolLN2IcMQgTQrv1KnsvWXko=)
2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: 6WUJgqskzShx2CRmJsEzW4Lp5E25NIFa3cIFrPQTpQE=)
3: 88A31320809211EB938F4016C4F9AE02.roa (hash: bchSnNZ1JAHUbuS+ZuP7bZtOW8CbMzZJlPlo9vXpT60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Jan 30 22:38:05 2025 GMT
Not After : Feb 6 22:38:05 2025 GMT
Subject: CN=679bff4e-faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:b0:05:9e:37:f3:f9:3f:c6:54:06:1b:50:
5a:74:26:8f:b5:0c:cb:48:83:b2:c0:9e:31:b3:48:
e4:80:9b:a8:e6:d0:df:d8:6e:90:6f:b1:70:85:1f:
b9:1a:c8:ec:26:f9:6a:68:60:1f:7e:bd:d3:9f:12:
e5:43:26:89:24:83:a7:bd:0d:78:e0:49:59:78:53:
f0:af:0b:9b:81:16:b8:6d:8d:c5:6d:cf:fa:f3:b5:
58:ff:d2:27:91:c8:a7:44:39:9f:d0:17:49:db:6b:
c3:7c:b6:e6:99:26:f4:23:5c:7b:87:43:62:1a:3b:
d0:84:d6:62:8c:66:cb:91:81:3f:99:ee:ff:b4:83:
87:3c:89:de:fc:75:a1:20:44:62:04:cf:50:e8:ee:
73:0a:14:aa:e7:04:d3:9f:54:16:92:dc:40:82:4a:
25:1e:a4:9d:14:58:f0:50:2a:f0:42:f4:0b:9f:dc:
ac:bf:ef:65:f6:d5:fd:1a:41:57:36:35:98:67:fb:
75:30:e0:65:b0:b5:1f:fa:21:d1:7f:34:e2:b1:6f:
7e:42:1d:dc:3f:20:c7:7e:1c:10:bd:76:7c:58:f2:
f3:4c:d7:bd:9c:86:85:0c:bc:40:f4:f9:97:0b:8a:
90:89:c8:01:55:7e:7b:eb:c7:cc:01:86:3c:f6:0b:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:1D:B6:39:71:E7:D2:6C:1D:F5:A7:F2:F0:37:C6:00:D4:8F:A9
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:21:59:87:b5:37:ab:97:b9:50:52:b9:53:65:58:2a:27:
76:e0:61:1e:af:a9:41:6a:94:1f:b6:60:63:0f:b3:4d:7c:b7:
0c:b6:4c:8f:d6:6a:8f:58:ad:e9:84:56:ea:9b:98:d9:6c:0e:
ee:cc:a8:93:00:59:03:bb:86:13:60:67:15:da:90:e8:a9:9c:
9c:83:ea:8a:99:9c:cb:d0:75:e6:dd:20:be:01:52:9b:37:29:
88:40:49:fa:9b:f3:c2:95:8d:4f:27:5e:88:0d:bc:52:ca:7f:
07:6b:b8:51:ce:e0:4d:e7:53:0a:b3:30:9d:20:ba:6e:44:63:
d8:35:51:bb:ff:60:46:b9:2b:0a:f2:29:06:3d:c1:a7:ad:72:
0c:65:05:6e:c4:b4:d8:83:10:be:54:04:fd:08:2e:e6:ae:18:
f4:3b:b0:15:ea:0d:ab:26:3f:ab:78:7b:db:5d:3f:88:56:9d:
7a:b7:23:51:c0:b4:5c:d1:11:78:69:17:54:5f:44:64:6f:72:
a1:d9:30:6a:6d:11:b5:88:09:16:77:4b:57:76:38:3a:17:75:
ef:86:15:7e:e4:1d:00:e6:73:f4:ae:f1:dd:4c:e1:3d:95:1f:
9b:6f:72:af:ab:30:dc:63:da:84:57:f6:98:85:c9:ba:a6:13:
26:e7:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:28:53 2025 by rpki-client