Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json)
Hash identifier: pX2tnjR5jhoACoC0BX7owL6BCocYN1Tjd7i3WdWuyu8=
Subject key identifier: A7:C0:10:0F:FC:35:59:81:CB:29:01:54:98:05:3A:6D:AC:A6:77:B3
Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72
Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072
Certificate serial: 0EC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
Manifest number: 16DA
Signing time: Fri 31 Jan 2025 17:38:31 +0000
Manifest this update: Fri 31 Jan 2025 17:38:31 +0000
Manifest next update: Fri 07 Feb 2025 17:38:31 +0000
Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: D7gBbFHoBbiHEYqY8NNwpSSeXS5V3plKsVyaem03qKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072
Validity
Not Before: Jan 31 17:38:31 2025 GMT
Not After : Feb 7 17:38:31 2025 GMT
Subject: CN=679d0a97-8d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:ea:39:e8:99:2b:9a:7e:5b:35:46:d3:02:
2d:7e:22:1d:b1:8a:3f:65:25:d6:ca:fb:b5:a4:0d:
e4:99:3d:49:08:ee:6a:08:a8:8b:5c:06:8c:44:a1:
ee:47:8f:d6:26:84:5e:81:87:58:08:2d:a6:79:07:
f1:8f:a5:d0:38:0d:b0:5e:87:53:e4:1d:55:89:6f:
51:1a:11:c2:e0:00:2b:60:51:09:1a:ee:b2:d6:cf:
92:e5:0d:68:53:f4:96:6c:0d:8a:c9:fa:46:1d:14:
ab:fd:92:d6:8f:91:fb:64:56:1a:f6:98:d7:11:5d:
62:24:d7:58:cf:b9:63:47:73:78:2a:67:cd:f9:9f:
3d:90:07:6b:82:33:66:bb:9f:3c:ad:f5:f3:41:67:
f6:12:45:06:6d:b4:b1:6f:fd:0c:3b:e0:bb:c4:c7:
f9:08:fa:35:2d:bc:0d:93:94:5d:73:f1:c8:81:a4:
f5:fa:c2:d6:1a:92:44:51:21:8e:8a:dc:86:d5:4e:
83:8b:46:95:6a:67:2b:50:4f:de:27:02:6b:ec:46:
44:ae:41:6a:da:47:6d:bd:12:e9:83:51:8f:9f:7f:
06:5e:5c:df:ae:6a:be:ec:dc:d4:d0:62:25:48:db:
bf:1c:37:ba:00:b4:1a:d5:f8:d3:3d:61:36:1a:ff:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:10:0F:FC:35:59:81:CB:29:01:54:98:05:3A:6D:AC:A6:77:B3
X509v3 Authority Key Identifier:
keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:79:3c:22:9a:9e:29:05:3e:90:47:2e:0c:89:13:ba:52:8e:
a4:9c:fb:b9:e7:0e:3c:de:01:a6:a4:e1:b1:4f:5e:76:98:8e:
35:ae:27:74:9e:32:cd:28:ee:10:ec:2b:88:3d:d0:a5:8c:8c:
bf:4a:55:57:06:a1:cb:ea:bd:e7:93:2d:ed:06:d2:bc:97:6f:
21:1a:8b:ae:41:69:96:fe:73:d7:da:27:b2:32:39:04:14:6c:
57:d9:b2:81:0b:f8:d9:86:c3:07:0a:35:75:94:78:89:cd:56:
f0:71:a8:6a:9f:3b:de:28:e2:bf:61:cd:19:50:9f:44:2e:c0:
bb:5d:2c:47:dc:1e:6e:23:b9:33:2b:80:2e:d7:65:94:0f:f0:
6e:52:23:84:29:5f:36:1e:c5:a7:d4:c5:03:5f:2a:84:44:6a:
92:77:35:90:1a:fb:ac:df:cd:6e:db:6a:12:37:62:24:53:14:
aa:93:6e:10:e3:f0:85:0b:70:6f:6b:87:7f:49:47:08:e7:5a:
7e:09:e7:6d:09:cd:95:41:a0:7e:a0:88:65:29:1a:f4:a1:0d:
bd:18:13:8a:a2:3f:a8:c3:aa:e1:11:40:7e:10:e9:c7:fc:cc:
51:16:68:1f:90:b4:46:5b:03:aa:ff:85:56:c4:5a:50:fd:65:
44:9f:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:34 2025 by rpki-client