Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File: 6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier: /0FJODig5vYtHokzEcceoBu1epR8ujhZyRVlyf1C/vs=
Subject key identifier: 84:8B:21:3F:40:11:C7:D9:A0:19:4D:A0:E5:02:80:4D:83:8E:B8:3E
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer: /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial: 0A2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number: 0A22
Signing time: Fri 28 Mar 2025 20:01:20 +0000
Manifest this update: Fri 28 Mar 2025 20:01:20 +0000
Manifest next update: Fri 04 Apr 2025 20:01:20 +0000
Files and hashes: 1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: MFm6QG6wWabL1tTejsWQQGYMKpKcNRP6G0sKVSqg0FI=)
2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: QlXB7lfn1sgpwkVvWpKhkoSXRwHDweeIAsqj1Bq83Co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193EEB
Validity
Not Before: Mar 28 20:01:20 2025 GMT
Not After : Apr 4 20:01:20 2025 GMT
Subject: CN=67e70010-dfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:a2:f5:2d:d0:53:b6:f2:50:87:0f:d3:77:
1e:e9:aa:53:2b:e7:fd:45:5b:3d:2d:9d:c1:41:4f:
0b:ac:0d:18:eb:f2:0c:fc:d7:e0:cc:be:f7:d7:8c:
b0:8c:ed:da:8a:7e:d3:bf:35:07:a0:60:09:f9:0c:
d7:43:2c:e8:e5:4e:1b:1b:19:3b:99:8e:1a:b9:42:
90:d8:9a:50:90:a9:60:46:08:4f:ba:88:47:04:54:
3b:d8:63:ce:83:e9:a8:82:b7:29:83:fb:35:43:6c:
32:6f:8e:f5:5f:70:ab:9e:f2:d7:0f:47:26:4c:15:
6a:e1:b3:e0:35:ec:da:28:18:ea:b6:43:59:38:3c:
e4:95:46:c2:30:f7:63:af:fd:18:aa:6a:b4:45:60:
3f:14:91:8c:42:70:a6:b7:23:d5:71:aa:c8:f6:22:
6d:8d:7e:03:de:b2:8f:01:a0:57:88:b4:f1:b0:b7:
c2:b0:7b:96:ec:2e:d7:1d:ee:1c:0e:27:91:f6:50:
33:1b:d0:84:c3:93:ac:a7:3d:00:6d:86:46:dc:69:
c2:1f:2f:23:d2:a1:4c:3b:7b:8f:3a:49:bc:9c:a8:
a8:f5:bf:ce:bf:12:f9:7a:53:0f:d4:e5:6f:cb:c6:
b0:0a:09:e6:ab:1d:2e:44:79:d7:40:b5:71:5d:db:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:21:3F:40:11:C7:D9:A0:19:4D:A0:E5:02:80:4D:83:8E:B8:3E
X509v3 Authority Key Identifier:
keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:8b:c9:c5:cd:1b:08:9b:42:97:55:06:b8:c1:ca:c0:bf:
10:12:11:73:a7:2a:12:c5:1c:7b:cd:3c:3c:2d:3c:e2:81:f4:
62:53:b7:e3:1c:9b:65:09:4e:4f:28:28:7a:69:ba:ad:f8:ee:
87:cd:b6:93:e4:3f:86:34:19:26:2b:1e:8e:56:f5:1b:b4:7c:
c2:b0:1b:c7:cd:09:6a:66:0f:f1:ba:26:49:42:7c:f2:7d:34:
2f:58:20:2b:e8:79:01:14:59:e6:62:5e:56:9f:6e:2b:2f:17:
61:d8:af:ba:e5:ec:1b:83:1c:21:0a:a9:25:54:ec:3e:a3:b2:
c1:27:58:3c:ba:61:9e:c2:75:1f:42:73:f8:32:bf:ad:f9:99:
8d:de:50:50:f5:dc:2e:c1:fd:9f:dc:6b:44:1d:0a:43:6b:74:
6c:3a:f4:78:10:c2:3c:7a:41:1c:fa:4e:c1:f3:f8:8d:60:b9:
66:b4:9f:e0:6f:0b:10:a2:73:0c:2f:cb:f1:60:06:40:96:7f:
3c:ca:c1:07:29:4d:da:74:49:14:34:c9:ad:60:44:17:06:9f:
10:f9:6c:24:ec:8f:39:f6:b4:0f:47:5b:9f:5e:64:87:3c:76:
42:46:1c:24:f7:42:82:5d:fb:1a:8d:1b:af:52:f3:ea:de:5c:
aa:1d:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:48:47 2025 by rpki-client