Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft
File: 9bGvaeQg85sCMjAnVBm6VPjOGos.mft (raw, json)
Hash identifier: KkXKvyludJ6fvuzxSvtQTf8NObzDb5FQMI862Z6gjsY=
Subject key identifier: A0:D1:86:2D:DC:16:9B:82:45:22:67:C9:7B:F2:CD:50:D9:B8:BE:C7
Authority key identifier: F5:B1:AF:69:E4:20:F3:9B:02:32:30:27:54:19:BA:54:F8:CE:1A:8B
Certificate issuer: /CN=A9117CE3/serialNumber=F5B1AF69E420F39B023230275419BA54F8CE1A8B
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bGvaeQg85sCMjAnVBm6VPjOGos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 05:53:23 +0000
Manifest this update: Fri 31 Jan 2025 05:53:22 +0000
Manifest next update: Fri 07 Feb 2025 05:53:22 +0000
Files and hashes: 1: 9bGvaeQg85sCMjAnVBm6VPjOGos.crl (hash: 0f6Mh/9ZOa05IYFN6PF9c/nWZHSThJSLSojCkGtPmow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CE3/serialNumber=F5B1AF69E420F39B023230275419BA54F8CE1A8B
Validity
Not Before: Jan 31 05:53:22 2025 GMT
Not After : Feb 7 05:53:22 2025 GMT
Subject: CN=679c6552-2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:84:8a:da:90:3f:66:91:e0:3b:fa:b6:fc:
21:bf:7b:af:8e:ba:ed:4d:d1:62:82:87:12:da:cb:
ae:be:18:6e:fe:00:21:d2:a6:91:76:e8:f7:ae:15:
99:ad:85:e5:42:84:59:06:0b:a3:93:38:6b:2c:8e:
0c:cc:31:d9:e3:9e:d6:af:e7:ed:1f:04:f4:8e:e7:
3a:84:91:64:c0:ee:d8:77:f3:4d:db:23:fa:a9:d6:
fb:4b:7e:0c:d3:ec:18:30:89:52:9d:ca:fe:41:b3:
64:26:2b:b1:1a:8a:b1:cb:a5:d2:9b:41:25:6b:fb:
16:4a:38:2e:6e:a5:7c:ff:4c:eb:66:aa:90:fd:95:
a7:72:8c:91:f9:bb:2f:ba:c2:67:3b:ac:f7:15:a5:
18:b8:54:10:91:54:9a:e9:e6:97:08:a2:e1:09:24:
a1:db:9f:c3:ed:11:3b:1e:05:9f:9d:9d:29:9a:0f:
25:54:6b:8b:55:ae:c7:c6:3a:f3:06:b4:d0:25:af:
1d:85:cf:52:3c:92:cf:0d:60:99:00:32:c7:47:bf:
24:87:57:c3:49:56:05:ef:e1:26:20:1c:5e:f1:3f:
c9:58:b0:88:a7:bd:8f:7a:19:04:72:5c:7c:14:e6:
05:49:0f:b9:2e:5d:7c:01:6f:6d:89:f7:02:eb:5d:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:86:2D:DC:16:9B:82:45:22:67:C9:7B:F2:CD:50:D9:B8:BE:C7
X509v3 Authority Key Identifier:
keyid:F5:B1:AF:69:E4:20:F3:9B:02:32:30:27:54:19:BA:54:F8:CE:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bGvaeQg85sCMjAnVBm6VPjOGos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:86:6c:3b:40:e6:c6:37:6d:77:b3:dd:79:96:03:28:1e:b5:
be:96:6a:80:f1:80:99:10:76:9e:9e:15:90:84:07:e4:e0:1c:
ad:91:fe:14:26:88:22:ba:2c:7f:44:98:c4:1d:96:8a:ea:c2:
6f:ac:c4:da:6b:6d:c2:4d:67:8b:81:d1:49:83:5e:6d:72:67:
4c:65:7e:f9:99:23:18:36:2b:c4:3c:de:63:10:e2:38:ff:15:
e7:fe:9c:fc:2d:cd:39:4d:0a:80:51:2e:f2:97:30:59:a6:4e:
84:d7:c3:67:ee:fb:a8:17:66:71:25:b0:59:09:17:c1:63:cd:
8b:cc:70:ba:3a:a5:c9:a1:72:f9:a6:b0:9a:6c:a6:24:c7:f3:
2a:5b:a6:4f:6d:d5:a3:7f:c1:79:54:29:e7:dd:d5:f6:fa:8b:
a3:00:77:8f:08:91:f7:ea:79:ce:04:16:8d:29:94:67:ee:9d:
57:4d:8a:2a:22:00:39:7b:d0:15:1e:93:39:5d:c1:1b:ac:55:
72:f6:69:d8:f6:fc:6f:a6:f5:27:a0:90:f1:75:5b:da:0b:3c:
bb:1b:03:b2:c8:0c:bb:fe:ce:5f:60:e5:48:e5:fa:98:51:d9:
3f:31:3a:3d:11:1d:0e:4b:e7:66:3c:73:35:56:ed:21:4f:78:
74:3a:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:52 2025 by rpki-client