Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier: pua0pQlqkLInL6czRq3LEMGcHJ3eKPrZPitMeh4pTe4=
Subject key identifier: CB:99:F1:CD:AE:5F:98:A4:1C:78:06:AB:B0:66:E9:DD:A6:C8:58:54
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial: 344A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number: 344A
Signing time: Fri 31 Jan 2025 14:59:17 +0000
Manifest this update: Fri 31 Jan 2025 14:59:17 +0000
Manifest next update: Fri 07 Feb 2025 14:59:17 +0000
Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: Z8cEm26/4QOSQ1IvWgXd8zuPlvODpH0zWRiTko2p3jE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Validity
Not Before: Jan 31 14:59:17 2025 GMT
Not After : Feb 7 14:59:17 2025 GMT
Subject: CN=679ce545-ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:7c:58:cf:b4:92:37:c1:f5:09:9f:1b:f4:
f6:7b:9f:5e:51:15:eb:df:0a:e1:0b:e6:ef:a9:92:
2b:3c:df:8a:8e:e5:aa:03:42:a4:e9:0f:7a:3e:04:
98:f7:92:fa:b9:3d:a1:8c:a2:78:eb:f2:9b:8b:bc:
a8:5c:73:98:6a:49:0b:a5:89:30:a3:ed:d0:15:5c:
75:21:95:00:55:8b:13:a7:9f:60:da:99:57:ac:38:
bf:5c:3d:4b:c9:14:ec:03:d1:0c:a1:fc:a6:49:6d:
74:8f:67:d8:0e:48:be:92:fe:ba:0c:36:24:72:42:
d5:0d:28:12:a3:38:aa:59:27:3b:2d:ed:64:df:e8:
56:3e:55:65:f6:fb:66:ba:d3:42:87:08:e8:0c:69:
20:60:97:a1:c0:7b:54:24:37:45:00:4a:64:cd:e0:
c8:d8:c5:05:7e:58:9c:d7:4f:92:1e:59:ff:19:a0:
98:5d:43:a1:76:b6:63:28:77:f9:38:7b:57:11:1b:
80:46:da:84:b5:35:a4:87:ab:09:02:74:22:1d:33:
b3:ea:5b:8c:a1:da:47:58:b2:f4:7d:dc:f5:30:09:
ea:28:c2:64:d0:16:a2:38:63:7c:17:ba:bb:20:2f:
33:eb:b7:3d:de:d6:bd:a6:23:f3:2c:56:82:fa:f1:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:F1:CD:AE:5F:98:A4:1C:78:06:AB:B0:66:E9:DD:A6:C8:58:54
X509v3 Authority Key Identifier:
keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:90:47:f4:28:b4:a1:b5:a4:ea:fb:c1:ab:4b:50:94:91:99:
9d:41:40:85:22:60:c9:18:b3:96:0b:71:d6:89:53:ae:53:a3:
cb:2a:d6:2c:f4:e4:0d:e2:43:fb:59:91:0f:8f:f0:bd:d0:8d:
b8:ba:b8:73:86:78:ad:96:9a:f5:f4:9a:f4:f7:a0:06:72:d2:
de:08:28:7c:f2:a3:f6:3a:dd:af:6e:b0:e5:f7:ac:a3:cc:f2:
1d:30:6c:30:9f:3c:ee:b6:b3:84:b8:e8:d3:73:99:59:62:2f:
c3:a8:92:f3:83:b1:ab:26:94:ff:cf:5b:c6:8c:91:fb:4f:91:
e5:06:d1:10:9a:22:8f:ec:10:be:36:f7:56:df:5b:3e:52:dd:
13:86:21:e6:3f:3c:c0:52:29:4a:cc:c6:f1:32:5a:2b:cc:52:
d5:41:7b:3f:9b:40:28:8f:a0:63:11:c3:e9:c9:d3:22:64:89:
e9:1f:22:ec:6e:d4:f4:0d:b0:12:51:23:20:6e:24:ee:b6:74:
9c:8e:39:11:3e:61:d3:b8:c5:eb:7f:1e:ea:b3:7d:06:40:e7:
1d:9f:bd:3f:08:80:12:13:e7:a1:f6:79:6d:e4:15:22:fe:2b:
62:cf:45:25:30:7f:c1:a1:2c:04:a9:f4:8f:d6:fa:f2:85:57:
0b:fb:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:57 2025 by rpki-client