Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft
File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json)
Hash identifier: eXAQCuZfZdAyW9aZjW7uD2PgqC0zfTqkGrEusgCSSJk=
Subject key identifier: 98:4C:E5:3E:FF:7C:28:BB:62:EA:FC:2E:26:83:96:A0:E3:43:B7:7F
Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50
Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft
Manifest number: 01A6
Signing time: Fri 31 Jan 2025 02:30:36 +0000
Manifest this update: Fri 31 Jan 2025 02:30:35 +0000
Manifest next update: Fri 07 Feb 2025 02:30:35 +0000
Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: rEuJaxIWkeI6D3NXqjuIs6iUTYW3BR+lqQvyDSpd3jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950
Validity
Not Before: Jan 31 02:30:35 2025 GMT
Not After : Feb 7 02:30:35 2025 GMT
Subject: CN=679c35cb-016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:54:16:ea:d1:f1:2c:af:c3:61:85:b9:59:
eb:87:46:11:52:13:a5:9a:c0:19:13:6b:4a:42:36:
05:f5:75:29:79:a3:de:c6:c0:bf:c6:30:e8:be:71:
89:e5:c1:28:74:f9:62:b7:28:7e:a9:31:eb:05:a3:
59:e8:e9:10:16:b0:da:cf:bb:56:2c:a8:c5:00:99:
c6:77:55:56:0a:03:60:c0:8e:5d:6d:5d:f5:77:8a:
b8:4b:b8:6c:91:0e:73:c3:01:c4:50:f1:6e:86:0f:
33:18:00:fb:e9:44:59:1b:79:05:ed:ab:d3:51:51:
86:c6:07:30:dd:79:db:3e:dd:39:ad:90:fe:c4:94:
75:7c:1c:21:6b:bc:b2:56:10:44:76:7f:ba:71:cc:
fb:eb:f1:f0:ca:62:a3:2e:8b:21:83:6c:bd:9e:dc:
91:36:bd:89:24:89:9f:4b:36:67:06:b3:a3:8a:c5:
de:be:6e:2c:10:17:be:99:8c:32:59:66:ac:09:ec:
79:cc:fe:c8:aa:ea:38:de:8a:c2:06:1e:dc:87:bc:
a4:09:5e:84:a3:b6:78:15:60:0e:67:a7:27:b4:4c:
1a:01:7e:ef:b8:dd:9b:f2:66:fc:60:ed:d4:c6:eb:
48:c4:99:69:29:30:af:97:63:64:6b:e1:e0:09:c3:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:E5:3E:FF:7C:28:BB:62:EA:FC:2E:26:83:96:A0:E3:43:B7:7F
X509v3 Authority Key Identifier:
keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:96:83:47:c7:03:c5:a8:a3:54:a8:3a:b8:e8:44:bf:34:
c6:aa:80:e6:e5:9f:6c:d6:bb:be:5b:61:08:6a:92:a0:e4:1f:
ea:f0:75:94:32:b5:fd:96:36:54:e1:9a:4d:07:b0:00:c8:89:
c7:1e:52:e2:6a:18:f6:57:49:26:4d:d4:85:02:23:22:a1:1c:
a3:0a:2f:4d:ea:0e:d7:c8:4a:50:94:05:c7:8a:19:78:8c:3d:
89:e8:25:d4:50:d5:62:63:24:4d:ab:3d:0f:7f:94:52:cd:6c:
1e:43:a7:d6:57:31:45:81:ae:2f:43:90:0a:97:1d:60:52:46:
40:61:5d:ca:07:47:e9:4a:a0:94:93:6d:a7:c4:ee:e2:d5:4c:
4d:90:ca:39:e4:d1:d7:da:0b:db:95:6f:20:87:39:c2:f7:93:
dd:87:02:2d:3d:84:f2:e4:f1:c7:ad:fb:54:6f:ac:28:c8:29:
b8:32:e7:7f:a0:02:60:bd:e9:1b:ff:9e:a1:1c:ed:94:02:e4:
e8:35:f2:90:92:26:80:f9:3b:bc:af:5b:ed:b4:ab:fb:d7:2a:
94:8d:ad:42:f3:9d:1a:66:0d:fa:b4:18:40:a6:8e:62:cb:ad:
26:23:0e:50:88:96:ec:c7:2e:b1:63:2b:7e:8d:24:08:49:ad:
67:5c:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:21 2025 by rpki-client