Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft
File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json)
Hash identifier: SDRGLDyt+2u+jfI7cviK911xEd0KCa5vKRdRIdlVSuw=
Subject key identifier: A6:78:69:BF:93:CF:00:99:B0:93:01:04:56:09:A9:A8:86:CA:D8:10
Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13
Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13
Certificate serial: 1221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft
Manifest number: 121A
Signing time: Fri 28 Mar 2025 17:15:50 +0000
Manifest this update: Fri 28 Mar 2025 17:15:49 +0000
Manifest next update: Fri 04 Apr 2025 17:15:49 +0000
Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: mERMo/ViO0YDqY7vpkf+9EfgINClR8GpHE6PCUr1JXY=)
2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4641 (0x1221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E65
Validity
Not Before: Mar 28 17:15:49 2025 GMT
Not After : Apr 4 17:15:49 2025 GMT
Subject: CN=67e6d945-6219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:e1:22:a3:32:71:61:49:57:14:51:1f:42:
83:82:81:16:9d:da:61:2d:54:8c:34:bc:2c:a6:63:
ba:42:da:05:56:6e:67:7a:93:e0:e1:29:c0:ad:6d:
5b:9d:90:67:4b:15:5a:32:c0:ea:f5:d7:2b:d8:d1:
53:5b:ba:2c:4f:4c:e4:ce:22:26:88:85:8c:98:6c:
53:bc:fe:69:a9:1a:0c:d7:a8:79:6c:64:0c:7c:2d:
f4:6e:5a:39:af:54:cc:49:b4:63:97:3f:a9:ba:5c:
15:0e:51:1d:a6:c1:c1:ad:18:f4:ea:96:86:77:06:
6e:bd:09:04:e5:2f:71:78:14:ae:ad:06:27:e9:9b:
d0:ef:da:5a:a2:43:b7:b9:cb:46:28:35:b1:bd:61:
f1:51:c6:f8:ec:95:7e:74:be:2c:99:64:53:21:ee:
f4:bf:96:00:46:ef:b8:f4:9f:48:ef:07:75:cb:06:
2a:3b:f0:dd:a5:c6:97:c9:67:b7:e0:28:10:9d:71:
65:16:57:03:40:cb:a1:34:d7:40:35:06:d7:89:14:
af:a1:0f:03:e3:ed:48:cc:06:6d:56:d2:ce:e9:d1:
15:a3:e4:f8:be:b8:ba:5a:ff:38:f2:4a:6b:68:96:
2b:d9:a2:00:ce:92:d2:59:1f:4c:ff:23:21:66:7c:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:69:BF:93:CF:00:99:B0:93:01:04:56:09:A9:A8:86:CA:D8:10
X509v3 Authority Key Identifier:
keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:83:29:9f:79:2f:4f:fe:fe:6d:e1:33:4e:65:21:c9:d7:
0f:6c:c9:40:f8:b3:e1:d8:8e:24:be:d2:71:c0:4e:e4:0d:e2:
03:85:0f:05:6e:f9:ba:94:c3:c9:13:39:01:49:82:f8:b0:cb:
2f:07:ef:2f:88:cd:c6:15:dc:37:9c:8a:ed:04:ff:51:9e:d9:
3b:d6:0e:cb:51:3c:c8:ee:60:44:83:4b:8c:81:39:3a:23:c2:
d4:5e:bd:9d:25:f5:8f:5d:44:07:c1:32:1a:45:46:3c:89:42:
1d:57:4a:99:4f:e7:8f:5a:82:90:e4:ef:a2:8c:df:3b:2a:2a:
92:55:db:3e:1f:ec:d6:84:cb:42:81:3d:ed:19:a3:59:c6:a2:
87:e9:ef:da:06:b7:57:43:e9:42:87:2c:b1:c6:2c:34:fe:51:
07:99:e2:c5:f3:9c:8f:2a:dc:24:80:1c:9d:6e:ec:6a:36:01:
c4:4a:f0:37:c8:1f:dc:ea:bb:38:48:32:48:c9:be:fb:91:b4:
ac:4d:41:47:01:10:68:26:64:31:08:7b:91:86:31:eb:2d:82:
27:d9:9a:4d:7c:be:ac:9d:48:e2:89:57:53:71:70:9f:41:ca:
f5:5a:48:09:05:29:fc:12:54:b1:82:0b:17:00:fb:b3:e7:d0:
5a:29:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:51 2025 by rpki-client