Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json)
Hash identifier: BtBSDRWm8DmStXCoUXzI0dVSQqGdrwvq3T1BoyQlyCs=
Subject key identifier: 5B:B8:86:75:AD:C3:F5:B3:CC:26:D7:3D:A1:FC:F1:52:54:AD:ED:0F
Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69
Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
Certificate serial: 344E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
Manifest number: 344E
Signing time: Fri 31 Jan 2025 15:15:20 +0000
Manifest this update: Fri 31 Jan 2025 15:15:19 +0000
Manifest next update: Fri 07 Feb 2025 15:15:19 +0000
Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: /jqwT8lwd3hjfRHHAR7HvSW/jHG28RBb+/iESwT/cqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13390 (0x344e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
Validity
Not Before: Jan 31 15:15:19 2025 GMT
Not After : Feb 7 15:15:19 2025 GMT
Subject: CN=679ce908-1689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:1e:70:51:95:44:b4:7f:90:8c:d5:c6:00:
1e:2f:5c:7c:92:1c:09:16:b0:51:1b:b5:4e:68:69:
3b:2e:7b:a7:76:4e:c4:da:09:16:cd:27:c7:3c:75:
bf:6c:dd:23:ea:c9:94:ab:a3:7d:95:0f:d4:02:95:
9a:87:bf:b1:95:aa:d9:1b:25:94:14:35:c7:12:8b:
6a:49:75:e6:ab:22:a8:28:63:a5:25:3d:57:3f:f3:
a9:1f:08:fc:0d:f5:fa:6e:9f:e3:37:ff:d6:05:8a:
d8:73:ea:3f:6e:60:b9:08:1c:0c:5c:98:2d:a6:46:
c9:4d:14:76:12:4e:4f:e4:ca:b6:7d:a0:c0:63:05:
c6:0b:6a:c3:ae:6f:ee:0f:c5:8c:13:e3:8c:f3:6e:
e5:76:c0:5f:62:77:ea:5f:d3:b1:eb:98:e9:a2:b3:
dd:b3:a2:cc:16:7c:c0:a5:29:0c:e2:6d:a1:be:e5:
60:bd:c4:a4:f9:a5:72:f8:c3:a5:68:0c:b7:aa:b2:
6f:42:81:1e:90:fc:ac:07:92:3e:cb:28:85:ea:f4:
8e:14:5f:49:e6:80:92:8a:8a:f1:7f:22:64:5a:e4:
ef:2f:ed:6b:3e:76:53:6f:32:67:a2:b9:f9:0c:22:
e0:4c:df:bb:45:8e:72:8b:8d:ee:30:05:5e:09:28:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B8:86:75:AD:C3:F5:B3:CC:26:D7:3D:A1:FC:F1:52:54:AD:ED:0F
X509v3 Authority Key Identifier:
keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bc:d6:9b:e3:32:5e:cb:3e:d5:8c:e1:93:a6:48:8d:62:cc:
29:b7:c0:9f:20:31:7e:a6:17:49:98:34:72:47:58:76:5b:5c:
5f:fe:4a:dc:0d:6f:aa:a6:9a:2a:a0:c0:c5:e2:7e:60:4c:99:
32:ba:74:c7:2d:3a:c5:13:7c:cf:49:6b:3c:1d:c8:04:0e:f8:
65:7d:d9:1a:fd:6c:35:5c:37:cf:e2:cb:57:e6:8d:cc:8a:a1:
13:5a:2e:ed:ab:fc:49:e6:56:7c:74:f0:03:ce:c9:2b:a1:26:
47:11:7b:8e:8f:54:25:1b:86:42:1b:fc:44:78:ab:a9:23:3a:
e5:18:7c:a0:8b:ce:c4:2a:e5:2d:7f:9e:5a:75:1c:ad:0a:08:
de:62:99:33:bc:c3:3a:eb:56:30:b9:9c:ad:8b:2f:71:49:ac:
b4:65:cc:09:cf:90:db:9e:6c:62:5c:87:52:a6:08:0d:28:23:
2b:9c:ff:78:e9:70:fb:63:8a:29:7c:b8:ba:9c:aa:6b:0f:a8:
4c:42:e4:36:2c:76:d1:f8:98:c4:fe:0a:71:6b:33:6c:d7:4d:
fd:88:42:ec:11:10:bc:c5:77:a7:3f:ca:90:e8:76:36:e9:07:
d7:30:76:4b:d6:14:93:7c:2c:f4:53:da:bf:66:63:bd:7a:f5:
5b:47:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:00 2025 by rpki-client