Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier: 8dpqLiH4Es5Sc7cZ4SaREzfjKD94vrzBND5BPIbRaxs=
Subject key identifier: 4D:0E:2B:28:9E:C1:4D:7C:65:6F:24:70:FD:29:0E:A1:14:AE:30:08
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number: 07FD
Signing time: Thu 30 Jan 2025 21:46:50 +0000
Manifest this update: Thu 30 Jan 2025 21:46:50 +0000
Manifest next update: Thu 06 Feb 2025 21:46:50 +0000
Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: gdq/e5JWgL31IEtrtAwXFIV75nyyO6YWvNYoqPckUhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Validity
Not Before: Jan 30 21:46:50 2025 GMT
Not After : Feb 6 21:46:50 2025 GMT
Subject: CN=679bf34a-6f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:f8:a0:90:38:a8:fc:60:32:2e:11:94:78:
4f:0d:59:31:49:2e:86:19:4b:5e:f1:59:ae:c0:3d:
63:61:be:75:22:b6:21:e6:14:d4:5d:04:ac:6d:c1:
c8:9b:cf:12:57:44:7f:3c:42:af:bd:e2:7f:56:ec:
1b:b8:51:93:ca:f9:10:76:56:c0:f2:53:21:c4:d8:
a5:dd:0f:86:32:ec:1a:b2:44:02:b8:30:99:3f:51:
a6:c6:29:28:7a:03:74:d4:e6:97:91:3b:d3:e0:f2:
09:cf:17:0d:7c:75:a3:0b:0e:13:96:42:68:9b:a3:
e5:68:69:33:3f:06:f5:a9:11:63:35:fb:52:60:63:
bb:a2:ba:29:9e:c5:67:f3:7b:75:37:bb:e3:18:1f:
23:58:0f:ec:ff:ef:ec:5b:90:2a:f6:4d:b7:a5:db:
48:9f:df:6a:50:78:be:d5:10:3d:13:6d:55:0f:54:
c7:b8:89:79:be:11:42:1a:62:be:f3:fe:87:de:ee:
40:80:6e:c1:6b:09:88:1e:ca:01:bd:8d:3a:1b:81:
8b:0a:97:4f:32:fd:40:ec:03:97:f6:39:f1:e3:f3:
e7:ad:51:c1:6f:bd:5e:05:f0:29:4e:20:85:53:98:
45:eb:13:df:00:17:e0:16:91:2d:83:df:d2:1f:4e:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:2B:28:9E:C1:4D:7C:65:6F:24:70:FD:29:0E:A1:14:AE:30:08
X509v3 Authority Key Identifier:
keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b7:81:cd:db:43:32:16:b0:84:9b:be:49:01:d4:97:67:e3:
47:df:ab:82:23:5b:a1:19:93:a7:5f:17:4c:2e:38:ab:54:1e:
82:bf:48:b4:bd:01:d2:2c:f3:b5:b3:b5:76:23:e7:1c:21:80:
ca:35:62:7d:33:2f:cd:2f:55:fd:c3:88:79:17:fd:aa:91:f5:
8f:6a:25:73:d4:f1:9d:67:6f:af:65:9b:0a:c4:fa:c2:a1:b4:
46:36:c6:4a:97:eb:df:47:a2:a4:a3:3b:a8:44:96:02:18:8e:
27:6d:92:1f:52:4b:fe:dc:bc:f4:36:86:36:fd:18:6c:81:3f:
80:0e:bb:d9:dd:59:40:13:e1:64:62:9c:16:6b:1a:71:78:7a:
53:8b:80:8d:1e:77:f3:0f:cc:a7:e6:2f:e7:12:97:7c:a5:0d:
14:0f:42:c8:38:75:de:81:4c:d0:e1:32:db:25:00:2a:dc:8e:
6c:58:15:15:da:b0:ef:fc:b1:ae:56:1f:c6:48:00:55:29:de:
67:ed:17:63:74:79:5d:4a:19:ab:ac:9c:cb:72:0a:49:1c:e4:
4e:24:17:48:f0:9b:64:24:f5:fe:dd:95:c9:fa:a8:02:7b:e3:
67:38:da:67:ff:38:2c:dd:cf:ba:07:9c:dd:d6:f6:00:94:0a:
b7:d7:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:23 2025 by rpki-client