Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json)
Hash identifier: ZV1iMqLf9MHBHPU8uEuouNfsHgoXPt0Tdz9BLYCyrvk=
Subject key identifier: E2:27:DE:84:E3:F0:6D:EE:86:E4:26:F7:E8:33:63:C2:9F:76:C9:43
Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
Manifest number: 0165
Signing time: Fri 31 Jan 2025 03:12:13 +0000
Manifest this update: Fri 31 Jan 2025 03:12:12 +0000
Manifest next update: Fri 07 Feb 2025 03:12:12 +0000
Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: VDaumjE5lT5pteYhQjgydwJS2dBqDO4AjWPUR9tt0wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Validity
Not Before: Jan 31 03:12:12 2025 GMT
Not After : Feb 7 03:12:12 2025 GMT
Subject: CN=679c3f8d-3dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:e1:06:b7:16:38:59:4c:e2:d2:86:57:c8:
c6:95:74:63:65:b9:f8:75:b2:26:0c:55:e8:e1:d8:
5c:8a:03:87:57:0e:a6:83:e4:1e:16:27:76:54:ec:
7e:df:a7:df:e9:9f:7d:a7:82:1c:01:fd:e9:b5:4b:
bc:26:36:9b:b3:80:6e:e7:8b:9e:a7:02:55:c7:9b:
23:9d:25:bb:2c:38:22:c7:47:da:54:f9:2d:7d:63:
b3:f8:29:61:90:98:9d:17:be:e3:02:c8:3c:b4:54:
74:7c:85:30:5a:42:a2:80:78:dd:91:1b:eb:d3:3a:
ff:71:35:11:7c:8c:df:43:f0:af:ae:15:44:39:e3:
80:23:c1:c6:5b:56:92:e1:31:45:41:06:33:03:fa:
c2:1f:44:85:5e:9b:05:f0:15:82:64:7a:e0:07:ff:
02:af:94:91:fc:b3:cb:72:3d:f0:a0:bc:bc:ea:b2:
32:70:27:38:9f:6d:6b:51:51:2f:4f:f7:1b:68:77:
2f:3b:a2:14:d3:db:c1:c2:5f:9b:fd:3e:19:51:63:
97:e4:26:45:79:f3:74:72:d0:39:7f:47:ee:52:a6:
59:e2:00:13:d6:d6:3d:85:d6:34:71:69:8d:18:08:
5a:ff:ca:4f:10:ac:97:ed:dd:03:d7:57:58:78:60:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:DE:84:E3:F0:6D:EE:86:E4:26:F7:E8:33:63:C2:9F:76:C9:43
X509v3 Authority Key Identifier:
keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:aa:fe:8f:47:a0:a6:c0:ef:c6:82:ea:8d:aa:23:76:dc:
ce:61:82:4e:84:32:1f:28:70:53:11:52:81:0b:50:58:d9:d1:
b7:af:79:a7:01:26:70:9e:8c:28:40:2c:cc:12:19:20:f6:bb:
d3:05:0c:4f:78:81:0a:b3:48:6a:55:15:7b:2d:36:13:40:01:
ad:a4:30:15:0d:2d:fa:b2:9c:c0:c2:da:6c:8f:c8:c7:b4:5f:
5c:22:27:f6:e0:ec:e8:c4:bd:41:ab:7a:4c:a1:43:aa:1a:ba:
df:66:d0:aa:63:7e:b6:45:11:07:d9:6a:57:6f:9e:69:14:58:
f8:db:61:8c:1c:f4:e6:ee:70:1b:87:f5:e4:d4:d5:32:55:48:
39:b9:b6:0a:43:76:c8:e4:35:de:3a:8f:30:4d:06:6e:e3:02:
a3:59:43:06:33:7e:b1:f8:6b:de:bb:b0:f5:2f:4b:d2:3d:af:
31:6a:8d:02:19:cb:53:4e:03:69:62:b5:cb:bd:d9:02:e3:4b:
ff:0f:7d:bf:41:ef:ee:2e:3d:88:3e:4e:46:90:e3:5a:0c:da:
08:e2:5f:86:56:a4:da:39:40:00:4d:2b:87:bb:f8:cb:b1:0e:
65:10:00:1d:ab:25:1b:88:42:8f:4d:62:b4:98:be:2d:c4:d1:
87:c8:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:34 2025 by rpki-client