Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
File: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft (raw, json)
Hash identifier: sagqJHv5co+gus4ZsxpczwofwkJlQM7Sjz9QMWxqaMg=
Subject key identifier: 2F:26:E5:63:28:FF:35:26:B3:56:02:AD:48:F7:9F:83:FC:DC:C2:01
Authority key identifier: F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17
Certificate issuer: /CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
Manifest number: 0254
Signing time: Fri 31 Jan 2025 01:53:24 +0000
Manifest this update: Fri 31 Jan 2025 01:53:24 +0000
Manifest next update: Fri 07 Feb 2025 01:53:24 +0000
Files and hashes: 1: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl (hash: Hw1L58XFJgdLEz0L5A12/WXtEE5fnbQxhzpCziNc8Fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717
Validity
Not Before: Jan 31 01:53:24 2025 GMT
Not After : Feb 7 01:53:24 2025 GMT
Subject: CN=679c2d14-333f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:42:ab:c0:65:aa:80:24:99:bb:09:ba:8d:
6c:d8:72:86:4e:4d:1d:18:d1:26:be:06:9f:6c:32:
b4:fb:72:98:c6:37:d4:9b:56:0f:75:27:35:86:ef:
2a:03:34:7c:63:6d:55:b1:ec:9c:e7:79:4d:14:9c:
e2:2d:c2:30:66:35:b2:eb:51:e5:f4:79:0e:58:6f:
2e:97:4f:11:87:4d:a6:b5:1a:11:63:c7:83:09:61:
87:3e:f9:7e:24:ea:df:f1:8c:d2:51:a9:21:23:c9:
a2:08:9b:ab:dd:3a:ba:e7:41:b6:1b:e2:2e:3c:77:
93:d5:01:f4:ad:e9:78:35:7e:c5:c6:75:da:e6:05:
76:51:5b:a7:6a:61:0d:9a:39:55:31:7c:f4:d5:a5:
b2:d3:b9:f5:f2:fd:e3:f8:eb:95:30:02:a1:51:60:
0c:51:7a:69:79:ca:50:a5:b3:dd:5a:ce:43:f8:66:
12:a7:bc:79:d7:86:c3:ce:99:40:e9:25:d2:d9:73:
c7:13:c8:85:c2:9d:f7:35:48:ae:c8:df:4b:38:d7:
e3:11:0e:5d:da:b6:e4:93:65:5e:1c:4c:87:04:24:
5d:81:bf:b5:da:2b:48:1c:61:51:b6:5f:0a:d4:6f:
8f:dd:2a:fe:9e:7e:4b:83:e7:0f:47:de:4d:95:3e:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:E5:63:28:FF:35:26:B3:56:02:AD:48:F7:9F:83:FC:DC:C2:01
X509v3 Authority Key Identifier:
keyid:F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:f7:7d:a5:cb:95:d2:9d:b8:dd:2d:d4:13:b7:20:61:6b:28:
5d:84:6e:15:ae:67:da:76:03:75:d3:c2:60:6e:64:f8:5b:43:
29:ac:45:e9:f9:0e:bc:6f:9a:5b:b9:24:d3:f6:f4:b9:b8:60:
4e:9b:1a:05:e2:dd:96:f7:5c:03:f6:88:af:cf:f3:d4:1d:09:
52:6f:66:41:98:42:38:5e:fc:89:1e:30:21:fc:4a:1e:dd:89:
21:c0:b4:f7:b7:6c:d0:47:44:94:90:c5:ee:cb:ff:3f:85:c8:
26:93:a9:27:97:df:ed:be:7f:92:40:74:d3:77:0e:3f:cf:3e:
f2:b0:90:de:f8:df:37:22:2d:2a:2c:f1:e3:9e:6b:0d:4f:ae:
e4:4a:e4:55:99:7c:4a:e6:f5:7b:0f:06:dc:9e:4d:a8:10:c4:
c1:7e:71:6f:a5:5b:71:01:a6:ec:89:55:39:27:52:30:c7:3b:
61:77:1e:b8:8e:b9:12:e5:8c:f2:a9:a2:e7:2f:36:c2:fe:da:
9a:48:c8:36:6b:3b:39:19:34:c4:6d:2b:86:ed:3e:01:1f:ac:
be:a5:5c:56:eb:e7:55:57:17:a8:b7:f2:9e:65:e5:76:ef:3c:
d5:87:05:8b:36:6a:8e:1c:4e:2b:27:ff:f5:13:ef:88:4b:f4:
ae:c7:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:17 2025 by rpki-client