Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json)
Hash identifier: gKat058ePjhspY5jV5o+m/mEGAtsfl7JXDmnUSC0Imw=
Subject key identifier: 7A:09:56:FB:2F:11:89:FD:9B:D3:69:68:BE:C4:34:72:72:35:86:EA
Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0
Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:06:00 +0000
Manifest this update: Fri 31 Jan 2025 15:06:00 +0000
Manifest next update: Fri 07 Feb 2025 15:06:00 +0000
Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: 3fCu4T4Z8+yBuv7NqDQZrACWcXAMCd0agsjUpHCVy6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0
Validity
Not Before: Jan 31 15:06:00 2025 GMT
Not After : Feb 7 15:06:00 2025 GMT
Subject: CN=679ce6d8-fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:4d:37:b4:f5:4e:52:f7:e0:d4:38:75:ed:
14:fb:d0:9f:f1:58:ce:94:81:76:38:97:67:59:35:
dc:0f:34:f8:2c:7c:24:d0:53:fc:50:b6:15:2e:e5:
0e:f3:86:46:1f:05:b1:4e:b7:7c:72:a7:ec:18:51:
20:0d:fb:34:c4:08:bc:17:06:7a:27:6a:57:63:81:
58:00:66:60:8a:79:cb:00:52:11:49:68:80:14:83:
16:e6:50:bd:3c:c1:eb:12:77:fe:71:78:0f:a3:6f:
b7:c6:63:73:38:7a:d4:0e:10:2c:7a:3f:40:c5:1b:
7c:61:e7:b2:a2:eb:9d:b2:cf:17:be:e1:14:f4:4a:
d3:26:46:03:7f:e6:66:f2:a9:8e:75:ad:3e:32:a0:
73:90:1d:0b:9c:00:47:fa:03:e4:69:4d:64:db:d6:
09:1b:7e:8c:be:80:37:76:e5:2b:d6:65:6c:30:ac:
e8:eb:54:07:11:4a:39:59:32:b9:2c:8b:b0:47:7d:
a6:7a:c5:af:74:7b:79:c7:74:55:c1:3d:0b:99:15:
6a:1a:53:dd:bd:6b:4b:11:29:08:8d:a7:63:88:f5:
93:79:95:b4:b7:5f:32:e1:bc:78:ec:8a:4c:b4:90:
88:6a:5d:cd:61:a5:a3:90:3b:bd:26:a6:bf:8b:d9:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:56:FB:2F:11:89:FD:9B:D3:69:68:BE:C4:34:72:72:35:86:EA
X509v3 Authority Key Identifier:
keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:71:91:cd:a3:64:41:da:42:00:18:bb:fb:88:da:5a:64:
60:67:98:d1:e4:bc:72:7a:91:20:cb:41:ca:8d:64:c9:06:a5:
66:14:a2:be:a7:cb:63:b0:a9:8e:52:d8:89:26:8a:ac:d6:fe:
21:89:97:eb:04:7a:c0:40:15:87:8f:98:51:45:21:d9:1b:c9:
79:e3:56:8a:69:d2:08:e8:55:e6:a6:86:0a:b3:f6:19:a0:b5:
c7:ae:f5:df:75:cb:49:a7:57:98:64:07:6d:64:e6:8d:3d:e9:
fb:eb:8e:f6:7e:bd:38:57:b5:0c:1e:8e:70:59:3b:43:57:92:
d3:77:6c:27:89:44:65:53:76:90:19:26:6b:b8:31:db:a6:d0:
75:cf:26:91:05:b1:8e:93:ae:c8:fe:bf:7b:97:9e:12:56:10:
8e:ea:a2:81:07:7b:9a:48:33:3e:32:81:fb:46:9e:b1:f4:9c:
a2:16:9b:fe:f8:e9:2d:91:59:c5:38:f6:30:c0:9c:33:31:f5:
40:78:b1:fb:64:23:9c:ef:fd:54:69:4f:7f:e2:e0:e9:e5:f7:
36:35:f2:b3:30:b6:ab:4a:df:9b:a3:83:2f:de:86:4c:de:49:
8d:23:81:3a:61:0c:05:ad:3e:2f:66:b7:45:3e:e0:5a:da:02:
89:4f:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:55 2025 by rpki-client