Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: 4IaQ1rXHzh0XWApYeHN/O6fxyYkem37BaajL+euYjnM=
Subject key identifier: 3E:83:34:60:6A:C8:15:3E:34:91:9F:76:89:BE:26:A4:7D:29:C5:B8
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 05:57:46 +0000
Manifest this update: Fri 31 Jan 2025 05:57:45 +0000
Manifest next update: Fri 07 Feb 2025 05:57:45 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: se2YOLr8DTNSmCSPcmkW7dzYNMOOMOXQ0VY+ZXM3oSM=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: tpxknLltESXlXvrC8XRzEEbUw6cbAqdQTGW1X5phwoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Jan 31 05:57:45 2025 GMT
Not After : Feb 7 05:57:45 2025 GMT
Subject: CN=679c6659-4b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:dd:aa:3f:1e:f6:1a:a1:16:07:af:c1:0e:
98:a5:39:4d:77:0e:9f:d5:90:c3:e9:60:7b:76:12:
18:8a:fc:5c:20:24:a6:e1:be:7e:55:85:18:8d:fe:
ca:80:c2:8f:cb:2e:f7:9e:da:12:e0:b1:23:d9:33:
e2:9d:a3:e5:15:c2:1b:ff:21:2e:90:80:4b:88:81:
2a:34:d1:39:a4:fa:b9:65:83:09:57:f6:d9:a6:b0:
94:83:49:37:a2:fe:9b:0f:ac:c1:25:17:8e:31:67:
84:74:1a:db:be:b6:6a:3a:7a:2e:fd:eb:6c:5a:86:
1e:04:13:7d:f7:e7:1c:c2:59:b7:98:27:93:d1:fa:
36:65:b5:32:77:11:fa:bd:b0:ab:94:cd:9b:ea:4c:
a4:df:b8:59:4e:39:8d:0e:e6:a0:5b:5b:d3:da:0f:
f9:71:9e:97:c8:50:c1:35:70:f6:79:69:ca:61:24:
6d:09:3c:52:da:a1:4f:52:40:68:a9:ce:56:22:eb:
e8:3c:0d:6e:28:d7:ed:2d:d0:52:ed:c2:3d:e9:3a:
30:c1:d4:63:9a:26:85:25:c6:0b:95:cf:5c:54:ec:
12:6c:f0:81:d2:96:b3:61:72:19:c0:2e:38:43:1a:
40:17:8f:43:c8:01:41:57:f1:46:9a:e0:4d:19:1d:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:34:60:6A:C8:15:3E:34:91:9F:76:89:BE:26:A4:7D:29:C5:B8
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:3b:22:7a:eb:96:54:1e:93:95:9d:aa:88:b6:98:0e:52:
5f:e5:eb:e3:10:42:10:ae:a7:fa:6f:1e:5b:76:35:0d:56:77:
c5:e5:49:6b:4d:b3:e1:37:5a:34:f0:69:04:66:8e:b2:a8:5b:
9d:f5:08:65:18:81:f7:a9:e4:9c:76:04:11:50:1c:3b:c1:25:
26:27:6f:d7:c0:0e:fb:1d:b2:50:bf:4e:c6:e5:ce:b1:e4:ab:
fa:ff:2d:50:0c:7e:3b:8c:42:ce:ad:ba:46:99:a5:2d:f5:fa:
96:2e:a5:d3:b5:36:91:2e:eb:b0:b8:49:7f:d6:f2:f4:de:82:
12:dd:98:44:70:01:b7:06:a0:df:f6:1a:f8:de:6d:fc:2b:8c:
b9:f2:cc:d0:cc:90:4a:48:4b:17:ec:0d:85:06:5d:15:77:c3:
57:76:38:b4:aa:eb:0f:03:33:61:ed:b6:ee:30:de:00:d7:7c:
ac:49:3d:5d:d4:62:64:3f:53:62:0d:51:a9:50:33:e4:aa:bf:
a6:0b:cd:70:33:1b:4f:9f:b9:5f:c9:93:ae:c8:32:dd:8d:72:
30:a2:6c:86:78:38:9d:af:0d:a5:75:63:16:14:66:93:e4:08:
43:8f:92:c6:d1:45:0a:5f:31:c1:fb:8e:be:14:d5:a5:9b:cc:
6f:a4:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:01 2025 by rpki-client