Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier: wNJckQ2Ao9id4LaxCgophZxveuqdcqsL3hKnsP67/RI=
Subject key identifier: 2A:46:7D:7F:06:6E:2C:EF:38:69:3D:85:7C:70:11:D5:8E:B3:F3:CB
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial: 1AEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number: 1AEB
Signing time: Fri 31 Jan 2025 16:19:11 +0000
Manifest this update: Fri 31 Jan 2025 16:19:11 +0000
Manifest next update: Fri 07 Feb 2025 16:19:11 +0000
Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: vRqWefYnapMmyFYc4Z2y0rCTqYUDQOyiQBxj/QdxPS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6892 (0x1aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Validity
Not Before: Jan 31 16:19:11 2025 GMT
Not After : Feb 7 16:19:11 2025 GMT
Subject: CN=679cf7ff-ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:0f:3d:b4:86:4a:8b:f6:68:6c:35:4d:af:
1b:25:07:93:e1:1d:db:ec:4d:68:46:90:96:94:46:
83:7c:2c:2d:db:73:83:ba:69:bf:56:97:39:d3:8e:
79:43:ff:45:25:4b:63:38:b7:cf:8f:2a:e6:72:3f:
e2:3f:73:1c:c2:93:22:50:b9:8a:11:fd:8f:71:2c:
e5:50:f6:94:60:78:e0:62:39:c1:ef:1d:3c:f2:8a:
15:03:04:ff:3a:49:fa:aa:09:ce:96:95:c7:08:ad:
01:1e:16:a6:24:e9:db:df:50:fb:46:29:65:a8:b4:
26:a2:bb:91:12:b5:07:a5:40:d5:45:1d:9f:40:8e:
66:a0:b2:88:63:92:d3:5d:d3:91:2d:f7:16:a3:aa:
d8:31:29:db:9f:62:34:30:c2:a8:a6:49:71:d3:f3:
5b:58:b2:34:4e:14:99:23:1f:43:d2:61:9e:34:f5:
2a:e7:0a:99:98:1f:b4:95:20:aa:f3:69:b0:5c:ff:
fd:5f:af:4d:83:1a:72:3c:1a:75:ec:49:7c:63:26:
74:e9:50:a3:6d:5d:db:52:ac:bb:9a:f1:02:ed:66:
f0:06:94:95:0d:3a:9a:a6:31:e0:d0:08:e8:f1:f6:
7e:04:21:8f:d9:c0:01:77:5c:2e:17:4d:a1:62:87:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:7D:7F:06:6E:2C:EF:38:69:3D:85:7C:70:11:D5:8E:B3:F3:CB
X509v3 Authority Key Identifier:
keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b8:d0:05:92:a1:52:8d:9e:02:2c:1d:29:1c:47:ce:a0:fb:
b9:bb:0a:0e:1f:1e:c5:fc:90:cc:04:8f:93:af:f8:7b:39:4a:
ec:57:91:31:94:07:28:01:c1:74:3b:00:d2:40:b9:14:ca:cb:
66:cf:45:96:d3:a6:a5:59:06:80:57:29:6f:14:5d:66:89:45:
9e:14:6d:d2:1e:ab:80:ba:27:b6:09:e4:22:f4:74:00:70:16:
a9:47:f7:26:87:18:02:41:1f:42:24:00:98:d4:ad:5c:79:2e:
b4:46:5c:25:65:b5:90:ae:e1:d5:5c:76:6e:ac:84:e1:da:d8:
c4:ae:d9:65:09:5d:06:94:64:da:ac:d9:8b:92:24:8a:dd:80:
24:44:f8:24:f5:1e:2d:f4:3f:93:7a:44:40:70:50:e0:1b:13:
e6:4b:82:e1:0b:33:15:ac:dc:fd:f8:a1:f0:71:9e:e4:24:b8:
e2:d3:75:05:dc:fb:ce:e3:f0:dc:a6:24:c6:26:cb:1a:af:7d:
d9:20:b9:f7:14:8a:6f:41:2d:f5:49:56:b4:4e:43:db:e4:1c:
7a:af:3e:2c:b2:69:46:7f:1e:45:dc:8f:0b:38:bd:70:f9:bd:
a0:56:6d:ab:85:bf:6a:c2:93:6f:7a:d8:5c:31:ae:c4:f9:65:
78:f7:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:18 2025 by rpki-client