Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json)
Hash identifier: 7itU/AI1glwJyOwSJt8rPqviQUykkzXuOqJnoj7ygkI=
Subject key identifier: BA:F4:5B:41:66:58:AB:4D:E9:B0:B0:90:16:D4:D3:BF:57:DA:21:99
Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Certificate serial: 3447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
Manifest number: 3447
Signing time: Fri 31 Jan 2025 14:51:24 +0000
Manifest this update: Fri 31 Jan 2025 14:51:23 +0000
Manifest next update: Fri 07 Feb 2025 14:51:23 +0000
Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: TfhrbRPimOHqj1GaE6Q0sGi816OHTRbN8OZn8E9H1bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC
Validity
Not Before: Jan 31 14:51:23 2025 GMT
Not After : Feb 7 14:51:23 2025 GMT
Subject: CN=679ce36b-7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:a0:c6:3d:61:14:2c:98:26:cb:fa:8c:b7:
cd:8e:91:b0:91:3b:9e:d5:46:71:44:c6:e7:2a:17:
6e:be:dd:8d:10:7f:f2:be:54:b1:b0:91:7b:33:65:
66:10:6e:a3:28:d1:f6:04:bb:68:51:ce:0a:40:1d:
77:2e:c1:4d:10:dc:fe:96:8d:65:4f:de:e6:0a:cb:
7c:97:27:50:79:88:0e:c6:84:85:60:d6:28:59:64:
e6:fb:9e:dc:25:51:eb:bb:44:66:b4:0a:cb:60:f1:
5d:07:15:2a:08:9f:6a:1e:69:dc:6c:d7:34:a5:5c:
33:ca:b2:fa:8b:6f:6a:3b:58:e0:87:93:b2:08:05:
b5:82:12:a9:c1:ff:2a:1c:32:e3:19:d1:88:f9:6d:
ea:5f:ba:45:b9:65:36:47:45:ed:4a:95:d2:79:9d:
a8:75:f2:25:7a:0a:67:e8:45:bd:8c:d3:c3:31:a5:
8a:ce:ce:07:dc:7f:58:da:f9:2a:be:58:59:62:19:
84:d9:53:f1:b1:ae:c2:60:b9:5e:4a:ae:f5:39:35:
50:7a:d1:95:ca:fc:f6:28:a3:d3:33:c4:c3:58:f4:
74:68:0c:ad:a6:96:61:a3:83:09:db:49:65:eb:c2:
b3:67:8d:2b:2c:da:88:8e:cf:37:f3:2c:1a:13:ac:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:5B:41:66:58:AB:4D:E9:B0:B0:90:16:D4:D3:BF:57:DA:21:99
X509v3 Authority Key Identifier:
keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:c6:a3:8e:c3:11:ce:90:32:a3:c8:bb:e3:32:23:a7:6f:
3e:67:91:4d:22:59:63:db:56:25:db:d0:1d:36:b5:e2:43:c1:
e2:f1:e6:e9:fd:49:d4:75:73:14:ac:da:7d:0e:04:ed:58:13:
65:88:46:3e:cc:3a:0e:e7:65:c5:ca:58:e9:f8:20:92:2f:9e:
74:ec:eb:e9:39:7d:12:b4:f0:6e:04:94:4d:64:21:8b:7d:c4:
1e:79:b0:00:5d:e1:71:6d:fc:9a:dc:86:b1:12:74:5b:aa:80:
a9:3a:4a:d7:be:93:86:01:d4:95:e1:47:f3:db:02:56:ad:f7:
0e:19:77:6d:8b:27:e1:bc:31:20:62:16:7c:89:6e:c4:4c:b6:
21:e5:b0:15:82:32:19:b4:c6:69:71:9d:02:61:54:dd:1a:72:
6a:0c:1e:d1:a5:6a:7f:94:88:a9:ad:08:76:2d:10:4c:6e:98:
14:32:2e:c1:67:ad:3b:50:53:d8:f8:db:e5:55:5c:ea:1a:cb:
0d:8f:da:8e:c9:35:92:7a:ca:92:aa:8a:48:d7:f7:d7:ca:c1:
85:0e:25:16:59:8b:3f:96:bf:e4:a4:cb:4c:67:9e:0b:56:9e:
30:1f:50:d8:01:f6:5f:15:2b:9e:91:ce:9c:3a:55:69:ec:1e:
19:0d:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:19 2025 by rpki-client