Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier: KQeyrrv5rveEdxaOVJHgaee+2YpT9vsvwf6XCZlnng4=
Subject key identifier: 1F:4D:BA:8F:C5:97:1F:77:43:35:40:3F:26:B8:47:DE:E0:E1:43:61
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number: B4
Signing time: Fri 31 Jan 2025 05:06:24 +0000
Manifest this update: Fri 31 Jan 2025 05:06:24 +0000
Manifest next update: Fri 07 Feb 2025 05:06:24 +0000
Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: GfB/E9TCpqKqwRAE0+9irDmZvLRlgZ8dAjj1+kagQ+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Validity
Not Before: Jan 31 05:06:24 2025 GMT
Not After : Feb 7 05:06:24 2025 GMT
Subject: CN=679c5a50-101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:cc:8c:b7:b4:e8:28:e9:6f:45:62:80:6b:
10:80:a2:af:ac:e8:34:ef:f1:35:43:48:12:f3:eb:
ce:92:d0:bb:7a:d1:94:6a:53:b9:86:26:38:08:26:
d6:61:91:6b:79:ea:83:dd:46:54:4d:5c:2a:47:89:
dc:e0:10:f3:a2:22:00:e6:11:f9:fc:e5:e0:29:bb:
5b:03:be:ef:27:ea:e4:ec:f7:93:35:cb:95:1a:2a:
29:9d:c4:c9:41:73:1e:b8:a1:00:cb:9a:a3:dc:f3:
9b:fa:7c:a6:1d:13:04:b4:09:59:9f:30:01:d7:94:
04:8e:9a:90:d6:ad:67:2d:7e:bb:f2:39:2f:98:a8:
ac:b0:03:37:63:c1:3a:5d:aa:ae:06:47:36:67:61:
fa:f3:30:db:a5:4c:67:6b:83:79:fa:a6:09:7e:8d:
68:31:c3:c2:da:2e:7d:32:b6:6c:6c:d3:a2:bb:f4:
91:5a:47:8c:60:6c:d0:bc:7a:e2:c7:3f:77:7a:e0:
25:5c:76:66:6e:43:39:34:e9:b1:86:d0:d9:85:ff:
02:a9:66:3d:b1:24:65:70:a3:97:d4:75:8d:a8:bc:
6f:b4:b6:0f:25:43:b0:51:fc:c5:37:35:f4:9c:02:
84:f5:c8:1b:20:5a:ee:d5:7f:da:ec:41:b8:ae:9e:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:BA:8F:C5:97:1F:77:43:35:40:3F:26:B8:47:DE:E0:E1:43:61
X509v3 Authority Key Identifier:
keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:8f:b0:f2:69:06:b5:17:11:af:70:47:c2:a2:ab:72:b9:
45:e1:62:99:22:c2:39:d8:21:4c:22:f3:5d:f9:1e:ce:9c:16:
fb:a5:e3:10:d0:d7:4b:a5:85:fb:4b:ba:a1:80:d6:f8:b9:86:
26:5e:5f:69:79:f9:f8:c1:9c:d8:db:d7:d6:84:9c:5e:39:1c:
0c:6a:f7:8b:a9:e5:24:25:14:d6:db:e8:71:de:ce:85:e9:16:
f0:6f:a2:5f:d9:d1:28:41:df:26:39:0d:a1:dc:b4:cf:ab:9e:
02:ff:b1:12:32:0d:67:3e:2b:47:49:00:ab:08:3d:88:c4:f6:
ce:9f:29:e2:47:da:41:9b:bd:f5:76:aa:48:bc:b1:36:61:fa:
d9:a7:8a:2c:e4:d7:3a:eb:09:42:f8:d1:81:71:94:05:1b:8b:
01:6b:b3:de:4b:93:64:00:26:59:47:de:4f:3b:1a:8d:3e:d5:
f1:f4:d4:24:93:70:57:65:77:06:8d:38:2a:e4:2d:96:6b:63:
13:2d:49:a0:bf:73:92:ac:29:d6:b4:8d:49:00:51:24:e9:8e:
0b:4c:05:eb:4b:8c:fb:ce:38:04:21:96:96:8a:ef:90:e7:38:
ae:af:b0:04:4d:f7:70:d7:58:07:87:cf:57:bb:3b:6a:41:e8:
40:76:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:24 2025 by rpki-client