Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier: KhNLVOnevJAS4tGoWRJeZpvkyximNg3JWDZgrJ0ylc4=
Subject key identifier: 59:6B:EE:D5:9C:55:13:49:16:28:10:18:9E:43:EE:FD:FE:F9:46:44
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial: 08A8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number: 08A8
Signing time: Thu 30 Jan 2025 20:35:07 +0000
Manifest this update: Thu 30 Jan 2025 20:35:06 +0000
Manifest next update: Thu 06 Feb 2025 20:35:06 +0000
Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: vO4IK8KyvwYoaXIcLWEdat8wgUXUxNZzlwMnx2cAeiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Validity
Not Before: Jan 30 20:35:06 2025 GMT
Not After : Feb 6 20:35:06 2025 GMT
Subject: CN=679be27b-c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:5e:1a:45:db:75:27:ea:f6:e8:ab:6a:c6:
bf:d2:ff:88:c6:92:71:94:69:eb:15:35:0a:af:2b:
58:ad:a9:39:56:e4:fb:af:ee:47:8c:9a:79:4d:2a:
c8:39:ee:05:f2:a5:b5:bb:7f:7e:dc:61:31:64:44:
06:1b:55:32:65:0d:f8:ec:42:4d:56:a2:65:2d:0e:
64:4a:2a:a1:d4:cb:8d:a7:60:d5:2c:6f:60:27:71:
10:07:1e:52:10:5d:9b:df:24:13:20:8e:1e:b7:52:
40:b7:e0:c8:05:94:cd:52:22:70:a4:90:30:49:22:
7b:f9:01:04:fb:df:6f:a4:c4:c7:9b:d1:f4:5f:de:
1c:d9:62:91:36:55:25:26:0d:e8:fd:de:b7:a5:59:
fa:1a:54:9a:44:08:f5:dd:f7:41:48:d1:c5:60:b1:
3b:b8:0d:17:27:11:06:5a:5d:79:50:9f:20:cf:9e:
29:d1:56:9e:6f:55:32:70:f2:a2:54:ae:e9:6e:fb:
0f:61:be:f3:81:77:fd:cc:9a:9d:b8:e9:c4:f8:c7:
3d:23:4f:53:4e:6d:1e:3d:16:24:b5:1c:9f:2e:69:
0f:9d:f5:fb:ef:fd:60:73:75:1a:89:82:c4:aa:c0:
f6:42:51:69:62:7b:d4:e5:ec:0c:57:53:c0:1d:15:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:EE:D5:9C:55:13:49:16:28:10:18:9E:43:EE:FD:FE:F9:46:44
X509v3 Authority Key Identifier:
keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:0f:fc:f2:68:67:eb:36:47:57:9c:75:ef:37:44:f8:10:
5c:02:61:d8:19:9f:78:43:bc:d1:c8:bd:3d:a6:38:2a:be:53:
93:6c:c7:9c:54:92:f3:02:f3:a8:70:93:84:e7:17:0f:82:0d:
d6:e1:25:97:6b:f7:18:53:ef:31:68:30:2e:25:bd:34:6e:f8:
e0:d6:ba:66:8c:fd:43:26:5c:37:78:89:f0:0b:20:bf:d1:56:
fa:e4:55:d8:1d:d1:13:f3:01:d4:eb:b0:96:3b:b4:4b:e7:41:
2f:0b:6e:cf:34:55:41:eb:e9:fc:6a:4e:d4:5b:00:90:61:a2:
36:48:22:25:ef:c6:aa:ab:02:79:5a:2a:64:bc:56:f2:7d:81:
7b:64:28:c0:82:a9:09:7e:72:99:41:73:5f:8e:0c:96:9b:37:
8e:09:5b:1c:bf:17:65:11:8f:57:12:ba:9f:34:df:5f:7d:76:
2c:06:b3:9a:d3:e6:ad:eb:ea:66:78:37:bf:80:10:45:92:cb:
f4:e9:60:9b:fc:c0:15:06:ec:89:cd:2d:34:76:0a:f8:01:72:
ac:86:74:10:f9:82:fb:25:c6:89:8a:e3:e4:95:ed:dc:ac:b0:
fa:aa:e8:01:d4:6d:38:ad:1a:11:54:89:8a:e2:f2:c4:77:cc:
c4:b2:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:48 2025 by rpki-client