Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: e7/+gwi+2hbYMTChObc34D5uKB91wV2qdJo+oF86n1Y=
Subject key identifier: 10:B2:68:FB:D6:3C:25:3F:FA:53:5E:A7:DE:56:1A:71:33:DF:D8:9A
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 01C9
Signing time: Sat 29 Mar 2025 02:29:44 +0000
Manifest this update: Sat 29 Mar 2025 02:29:44 +0000
Manifest next update: Sat 05 Apr 2025 02:29:44 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: FWBths9XPaLYoxYgH1f5RQRGy7oM/wX9fV/taHjfvBg=)
2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=)
3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1
Validity
Not Before: Mar 29 02:29:44 2025 GMT
Not After : Apr 5 02:29:44 2025 GMT
Subject: CN=67e75b18-419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:6f:70:23:14:3c:da:bf:1a:9c:0d:79:90:
37:49:1f:15:d8:53:99:7f:82:7b:58:24:18:04:36:
ed:89:4b:47:8f:df:57:ad:19:51:bb:68:2b:b1:34:
ca:ec:cd:10:70:77:de:bf:3f:d0:5d:b6:58:8a:2e:
fc:9c:f1:bb:78:9b:56:a6:a1:ca:48:64:dd:94:e7:
f7:98:03:c9:e2:e2:ac:6c:47:c0:2d:a7:3e:46:81:
63:94:83:3b:d2:35:58:e9:b4:e3:4a:80:59:8b:6a:
43:d0:42:b8:20:c5:e0:d9:95:f0:7c:a0:b0:f8:96:
98:be:34:86:ec:91:42:ca:a1:ea:d0:72:3e:8d:ed:
ae:b1:62:83:39:02:1a:fa:8a:22:df:38:49:05:04:
f0:39:22:f7:ee:77:ac:93:ad:4d:eb:e2:05:dd:5c:
ef:77:3e:74:dd:72:e9:8e:83:0d:8a:22:b8:85:24:
6e:06:a0:5e:f8:d3:b5:c6:4c:e6:28:04:eb:8d:7f:
22:f0:35:65:ac:28:fd:f9:ca:30:fa:a7:44:11:13:
a0:71:bd:1b:c9:99:30:20:0d:d5:eb:77:63:f5:4d:
6a:20:80:2d:24:19:2b:96:e2:73:23:d3:d8:88:2a:
bb:94:37:0e:c5:28:54:0a:53:08:2d:7a:6a:dd:04:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:68:FB:D6:3C:25:3F:FA:53:5E:A7:DE:56:1A:71:33:DF:D8:9A
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:68:7d:11:b2:49:2c:34:6f:b4:eb:88:5e:8a:80:91:11:
db:3d:02:7b:e0:67:e4:5f:11:31:1a:16:94:72:f1:f6:79:c0:
bc:fa:94:80:6f:4f:32:0a:60:8d:8e:a3:5d:23:57:7e:19:7f:
3d:5f:fd:e5:4c:b6:77:b9:f8:38:0b:57:26:a5:a0:92:c4:51:
2f:6a:f1:19:34:ce:38:a1:c8:78:33:12:2f:37:44:4c:90:4e:
33:71:67:50:2f:73:79:25:cb:5c:7e:da:d0:5a:ea:5f:4e:5f:
1e:11:1b:6f:61:ff:24:88:a2:7f:ab:54:f3:19:d4:1e:b2:18:
36:f1:c6:83:cc:88:69:aa:56:92:21:f8:b6:3e:49:26:fd:e7:
f3:e4:24:33:9b:06:16:25:4e:79:af:da:ab:9d:13:82:c7:10:
8e:a9:9a:98:71:f8:f3:f2:18:95:e0:5a:9f:c1:a6:0f:8e:17:
fd:53:23:45:8e:68:62:05:14:93:5a:de:ec:8b:12:cd:3e:8c:
55:ec:4e:bf:40:2e:fc:14:b6:5c:8a:2b:04:a2:12:5a:e8:76:
c7:6f:31:be:82:82:29:2f:2a:8a:e0:5a:34:23:eb:59:c8:4e:
c9:43:2a:d3:ff:fc:f4:39:25:09:77:7f:31:94:c2:52:62:92:
41:e8:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:56:12 2025 by rpki-client