Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier: 9oJC+anw6cxUDQbArdmiL5bZMEThpd2Rgab3kndEbWQ=
Subject key identifier: EA:CE:85:4F:BC:DD:B4:C6:43:6F:E1:3A:FD:FD:45:28:0B:2A:F3:1A
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number: 012D
Signing time: Fri 31 Jan 2025 03:42:43 +0000
Manifest this update: Fri 31 Jan 2025 03:42:43 +0000
Manifest next update: Fri 07 Feb 2025 03:42:42 +0000
Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: +mBA1ho2pU8nrw0a+CopenW1avXk2QobJLhRkxCQSUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Jan 31 03:42:43 2025 GMT
Not After : Feb 7 03:42:42 2025 GMT
Subject: CN=679c46b3-5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:f3:d6:11:0b:45:12:db:56:4f:ac:da:1b:
a7:42:1a:ed:bc:a6:42:df:27:51:1b:a8:fc:bb:b3:
2e:57:82:f9:f6:04:31:16:b2:af:2f:76:cd:3c:f3:
63:cf:8f:94:e2:0e:2a:9c:f3:2b:ae:ba:a6:71:1f:
ac:44:0b:80:21:7b:e2:a1:83:8d:4b:55:af:06:e2:
0c:55:76:ff:72:be:c2:3a:dc:af:85:c8:50:b4:fe:
d1:26:0f:62:f3:a6:eb:01:d4:ed:d0:80:57:00:60:
71:47:09:ea:ca:4b:a3:48:b0:ae:b7:c3:e8:87:37:
af:95:c3:97:a9:33:a1:4f:8f:3e:9f:65:29:d0:68:
0d:5a:69:49:0a:33:38:e9:e5:b6:92:ef:71:d6:88:
9a:54:91:86:15:34:a9:fb:02:70:9d:71:e7:e3:68:
0c:44:57:12:49:ea:b9:c6:97:ff:68:ed:33:88:c0:
63:00:11:5d:5f:c4:3a:03:e1:36:1c:4f:10:6d:b5:
0a:0d:43:be:b5:f2:c7:bc:7e:cf:34:4e:f9:77:a9:
0a:ab:30:35:9a:45:bc:2d:c1:a8:64:67:bb:26:e2:
e4:db:05:c0:05:76:48:72:2e:bb:1a:93:b6:28:78:
66:cc:5f:72:7f:8f:c5:50:46:5f:aa:38:d2:3c:ce:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:85:4F:BC:DD:B4:C6:43:6F:E1:3A:FD:FD:45:28:0B:2A:F3:1A
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:86:22:91:a4:12:2e:fc:0e:dd:49:a4:d9:68:77:fc:7d:8a:
57:20:2e:05:49:10:3f:c7:f2:39:88:99:88:f5:02:b0:76:3b:
f7:5f:dd:0a:44:bd:9a:ca:96:a6:83:14:08:2a:31:1c:bd:62:
14:ee:1b:83:66:64:9d:2c:ea:40:1d:a5:0f:84:9f:95:08:f5:
bd:7b:20:59:51:62:e9:a1:02:c5:aa:e7:e7:4a:d3:e7:78:90:
e5:ac:f4:79:61:ed:04:16:5f:c4:23:4e:fb:5f:b8:7d:7f:d0:
24:d1:af:56:f6:7e:83:91:bb:49:e2:d2:82:8f:9c:d1:88:cb:
2d:13:cf:f9:0b:5b:f3:df:1c:cf:45:3b:a0:37:58:1a:61:02:
fa:b3:cb:52:c3:fe:1e:f8:eb:ba:6c:61:a4:d5:31:c2:1b:c1:
b2:d3:c8:dc:89:6b:58:6d:5d:93:d9:f9:dc:48:c7:2e:ea:8a:
6b:02:3f:50:ff:95:34:50:0f:eb:a3:c4:60:67:82:8a:07:1a:
c7:6c:75:50:20:00:46:f3:24:d9:3e:72:b1:cf:c6:df:e5:be:
0a:bd:70:37:b7:38:0d:85:b4:05:4f:fb:53:3d:11:5b:e2:90:
ba:67:3c:a8:73:16:a2:3e:79:03:72:69:1c:74:ad:42:f6:cb:
63:c6:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:30 2025 by rpki-client