Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
File: 6UOWsst_yPtsQcUvVcybKV4ZL9o.mft (raw, json)
Hash identifier: L9Yxmyr18JQ016aOWasOS02dSpkSEG9Bin1X3dlmuN8=
Subject key identifier: A6:D3:B2:B5:BD:46:2C:38:4F:EB:72:77:B8:0F:92:D1:4D:C0:B3:81
Authority key identifier: E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA
Certificate issuer: /CN=A917000C/serialNumber=E94396B2CB7FC8FB6C41C52F55CC9B295E192FDA
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
Manifest number: 069A
Signing time: Thu 06 Feb 2025 21:42:20 +0000
Manifest this update: Thu 06 Feb 2025 21:42:20 +0000
Manifest next update: Thu 13 Feb 2025 21:42:20 +0000
Files and hashes: 1: 6UOWsst_yPtsQcUvVcybKV4ZL9o.crl (hash: qETu4T0+dSIv3qA77QN8l4wQX5LJCeV3H8VHjZjVUJU=)
2: 37303BC0554111EBAE1AA47BC4F9AE02.roa (hash: Kvg4tPhVoW6NrVk+7NPtj3VAC+IGX1fnXHqvIED30BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917000C
Validity
Not Before: Feb 6 21:42:20 2025 GMT
Not After : Feb 13 21:42:20 2025 GMT
Subject: CN=67a52cbc-1b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c7:80:2b:da:66:01:b9:8d:93:af:1f:2e:30:
2d:6a:ae:e6:87:0e:93:c8:b3:29:cb:ef:d2:8f:3c:
e5:b6:4b:9c:c2:b9:54:62:94:b8:7b:31:19:16:ef:
69:8b:27:81:02:5c:30:30:47:8d:35:0f:f6:cd:94:
77:b5:5c:b0:48:a5:ac:45:ba:7f:e0:dd:58:59:8a:
26:07:01:9e:e3:df:13:a8:86:27:7f:b9:3a:73:9d:
7a:cd:ac:e2:c1:de:dd:f0:29:d6:5a:10:15:88:90:
af:7a:79:19:2b:2a:6c:2c:f0:9a:08:ea:c2:e6:ef:
c3:91:01:aa:ac:87:09:15:93:ac:80:92:2b:cc:b2:
07:db:e8:b0:fc:53:8d:51:34:6b:f8:23:3c:a2:03:
38:00:3c:39:63:03:b5:e3:8c:1b:df:b1:4f:a9:2d:
51:16:25:09:b4:d8:fa:6d:a5:c9:52:de:c4:a2:d4:
0d:f7:f4:bb:28:4a:dc:e8:5b:f0:a8:64:97:de:2b:
b4:30:0d:ab:06:d8:5f:39:f7:56:8c:cf:0b:67:c9:
39:4f:5b:7a:90:07:7d:b2:a3:b2:13:da:de:a3:30:
e5:e1:25:9e:bf:52:12:db:51:c0:a9:cc:2c:ac:8d:
8f:bf:76:81:e1:d6:93:53:c4:64:f4:1d:22:e7:6f:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:B2:B5:BD:46:2C:38:4F:EB:72:77:B8:0F:92:D1:4D:C0:B3:81
X509v3 Authority Key Identifier:
keyid:E9:43:96:B2:CB:7F:C8:FB:6C:41:C5:2F:55:CC:9B:29:5E:19:2F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6UOWsst_yPtsQcUvVcybKV4ZL9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917000C/F3FAB656553F11EBBCC71C7BC4F9AE02/6UOWsst_yPtsQcUvVcybKV4ZL9o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:24:44:6a:90:60:7c:27:29:e9:f7:cd:ef:96:c9:a8:f7:
0a:c6:83:7a:7b:6f:96:ee:f8:7b:5a:67:0e:54:af:9f:c9:c5:
30:6b:17:82:39:e6:57:ff:53:d9:e6:ae:d5:1b:22:1a:1a:f2:
30:f3:fc:85:fa:b2:23:74:1b:67:47:34:46:26:58:87:9d:46:
3e:a4:56:b2:8d:52:6b:09:03:09:b7:48:6f:49:d5:be:fc:88:
0b:96:c2:8e:11:35:c8:89:41:4b:12:7f:74:8c:3b:7b:bf:61:
26:ce:5c:8f:4c:3c:44:5b:d8:14:66:21:62:f5:26:8b:a6:56:
58:d9:14:98:cf:b5:23:31:6b:2e:5c:4b:be:d4:55:01:8b:4d:
38:3e:01:55:31:89:09:32:2e:d6:ef:ab:00:02:86:0a:bb:c5:
ff:c8:3a:fb:7a:76:76:1a:ea:cf:66:23:bc:ef:da:b0:99:67:
b2:c0:9f:5c:3f:98:b9:08:23:8e:48:19:a4:41:a3:0d:58:58:
78:8b:a5:32:6c:52:d8:22:df:04:29:d9:1c:4a:61:05:e3:7e:
1c:bb:c8:2e:c6:42:79:5b:d4:3e:cd:6d:08:a4:eb:61:00:bd:
7b:ae:9b:be:b5:ca:58:a4:7d:79:24:da:65:d4:07:43:35:38:
e0:22:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:12 2025 by rpki-client