Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier: C+ByYzB9Rw4KtLXYXoVjqNmMXRTMXO2kgC1IVjxNSmA=
Subject key identifier: 90:F7:46:78:40:B1:A1:88:D8:FB:49:4F:54:80:CD:E8:44:4C:9A:90
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0BBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number: 0BAE
Signing time: Thu 30 Jan 2025 18:56:44 +0000
Manifest this update: Thu 30 Jan 2025 18:56:44 +0000
Manifest next update: Thu 06 Feb 2025 18:56:44 +0000
Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: i2lHgkM8atBv5m5boYc9Sh6Wbk9kwsoWUMf3Z18/Kf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: Jan 30 18:56:44 2025 GMT
Not After : Feb 6 18:56:44 2025 GMT
Subject: CN=679bcb6c-a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:2d:7e:43:0b:81:38:03:29:c4:4a:e4:11:
e2:37:3f:70:c1:a7:4d:54:64:34:ae:6b:1e:15:6c:
8f:6e:13:b9:a0:09:37:3a:89:ea:8d:6f:77:37:81:
66:65:79:ed:0e:07:74:a1:cf:8a:94:bf:6b:e2:2b:
36:ce:fd:7b:32:5b:66:f4:0c:a3:95:72:73:e4:24:
81:a3:fe:ab:de:5c:28:47:dc:ae:6d:3e:3c:71:cb:
97:94:92:d6:cd:99:02:2f:90:96:74:db:00:b9:66:
a2:5d:32:85:01:ad:1b:c0:ee:b8:96:c7:a2:2e:05:
43:14:ad:e6:01:b4:09:1f:0f:92:52:2e:72:32:f6:
55:4d:13:db:3d:df:3c:22:e5:78:c7:89:0f:ad:3d:
3a:be:db:e7:bb:ad:db:35:4d:b4:da:d7:b0:ea:40:
78:33:3a:58:5a:e5:cd:ca:84:a3:52:58:c6:a8:5a:
15:37:01:0b:96:85:e5:36:85:25:f9:48:ab:4a:88:
7c:ec:58:ee:a5:1b:73:b3:84:cc:37:e4:c2:dd:b6:
40:fc:a3:d4:e0:ae:06:79:c0:64:71:3a:25:82:3a:
32:70:9f:79:56:62:76:c6:4a:33:f1:bf:c9:97:28:
74:f2:f3:32:b4:d1:03:d1:b6:ff:f9:3c:32:dc:c8:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:46:78:40:B1:A1:88:D8:FB:49:4F:54:80:CD:E8:44:4C:9A:90
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:f3:09:38:c5:a2:f5:15:0e:08:87:c8:49:ef:3c:9c:e9:29:
36:bc:61:b5:10:10:45:22:37:82:d5:03:41:fa:75:61:4d:95:
c8:a4:49:c2:b4:62:e3:02:1c:17:26:0c:da:fa:87:41:37:d8:
2f:ae:5d:b4:cd:dc:d8:e8:cd:74:78:ec:f6:9b:b9:42:bc:4f:
45:db:c1:40:1b:97:2a:86:1c:ef:f6:c5:fd:e2:4b:6c:9f:6e:
1a:29:4d:97:b2:6e:14:17:b9:a1:75:15:78:df:fa:51:d2:7b:
a6:7f:b2:eb:fd:37:80:68:02:31:0f:d3:92:03:aa:5a:46:70:
5e:c6:d3:a7:4c:03:c4:9e:20:69:19:93:b7:9a:c1:19:11:af:
32:7c:07:9c:d1:17:e9:fc:44:93:e6:c3:f7:f4:5c:04:26:a2:
a2:51:4b:78:96:2f:a2:ff:ad:90:2a:64:0f:08:f6:31:af:e5:
59:2b:d7:95:71:40:aa:8b:f9:ce:9a:04:dc:be:92:66:e3:6c:
55:98:4d:d5:81:ad:25:8b:cd:f1:a6:d7:8d:22:ac:7a:da:cf:
5d:99:5a:92:8c:1f:9c:d7:6c:db:d5:76:13:61:34:0f:2e:db:
70:7d:08:79:99:e1:ed:b6:c0:3e:8c:b9:cc:0f:9e:c3:37:0f:
9f:80:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:21 2025 by rpki-client