Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier: DRKAKekoaaIGVB3QtsCbwFTUl36ffXgIbe7E5I25ne4=
Subject key identifier: AE:E0:12:C6:71:C1:04:EE:41:B4:CE:5B:91:99:CB:A6:11:1C:08:44
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer: /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number: 021D
Signing time: Fri 31 Jan 2025 02:06:07 +0000
Manifest this update: Fri 31 Jan 2025 02:06:06 +0000
Manifest next update: Fri 07 Feb 2025 02:06:06 +0000
Files and hashes: 1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: +Wx1mUNZhO24GFhEyyJFU0WOS7keXcp6TSg8n1qQ7uQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Validity
Not Before: Jan 31 02:06:06 2025 GMT
Not After : Feb 7 02:06:06 2025 GMT
Subject: CN=679c300e-eb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:c8:f4:ef:cc:eb:2b:f2:b6:65:eb:b3:06:
49:a9:20:fc:7f:e0:a7:20:1f:53:2d:69:c9:e8:12:
ae:31:88:d5:f6:74:0c:1c:c0:cd:81:43:96:97:24:
1e:26:1f:34:b5:b1:12:e3:4e:67:bf:31:de:23:bb:
e7:23:ff:12:b6:c3:3e:09:a7:58:2c:1b:7f:b1:25:
cb:a4:da:7d:b3:73:b7:3d:7e:78:3b:4c:95:e0:7f:
f7:89:52:b3:18:12:21:2f:35:6c:dd:74:6e:4b:9c:
1d:9e:3a:d3:8b:8c:b4:dd:6b:96:e1:8e:c0:d6:bc:
e8:ce:bf:5e:d7:d6:0b:a9:2a:7b:4a:d0:38:db:52:
6d:09:d0:c8:ef:92:4a:15:c0:3d:b4:10:03:be:fa:
8e:5d:33:6b:28:cf:9d:aa:d5:20:10:1e:af:73:15:
07:52:cb:64:f6:39:8a:87:ba:f1:20:8e:e9:59:e1:
b3:01:e3:38:60:46:2a:93:cd:23:29:ff:c1:14:e4:
a3:5c:45:16:16:11:bc:b4:27:34:e2:38:ac:08:22:
5f:96:c3:5b:1b:ff:82:a6:08:81:ae:79:c6:e0:69:
c1:f7:e2:26:d1:27:cd:82:d1:b6:7e:6b:1d:22:ee:
04:be:04:6c:c6:6a:0c:ea:98:47:c0:78:aa:61:56:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:12:C6:71:C1:04:EE:41:B4:CE:5B:91:99:CB:A6:11:1C:08:44
X509v3 Authority Key Identifier:
keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4b:49:ad:d6:98:bf:cb:96:ed:38:04:6c:eb:c8:5b:6d:ee:
39:1d:c3:43:84:e6:48:84:b7:68:2e:22:43:03:00:97:a8:3b:
ba:cd:86:15:99:2b:58:93:ee:29:c5:c0:f8:c7:8d:43:e1:32:
05:42:4d:93:99:b7:89:f2:89:52:fd:57:fc:0c:31:8a:f8:19:
6e:4a:37:90:b0:0c:41:bd:fe:7a:13:b4:c1:17:7b:b7:6a:05:
28:07:6a:94:dc:b8:d5:b4:64:04:a2:8c:08:b0:61:45:74:db:
8e:42:56:00:8d:23:e0:cc:ec:74:34:d1:6b:1e:87:dc:ff:23:
46:b5:87:49:17:30:31:f8:5e:85:2b:ef:cd:ea:d4:1f:99:db:
bc:cd:2e:d4:f9:c6:40:e0:a6:37:57:c8:08:1e:e9:d1:3b:6c:
e8:63:ed:9e:6e:15:ab:27:ad:60:51:46:dd:18:0a:03:df:99:
f2:ba:92:cc:ef:c3:60:e1:24:0f:36:ce:04:4b:00:fe:ce:1d:
02:74:4a:e0:5b:77:46:5d:d7:92:62:6c:5a:a0:07:18:48:00:
03:72:8d:a2:10:b5:8e:67:85:3f:00:08:f1:59:e5:2f:a3:5d:
0c:46:65:aa:f1:17:76:1d:af:8d:94:13:5c:c9:32:bc:1f:0b:
cc:a9:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:18 2025 by rpki-client