Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json)
Hash identifier: NYi8cldWvpUWU7EOty8e6+Bd2M20PjQmmDZAMQ96vfg=
Subject key identifier: C6:72:E9:2E:91:11:B1:83:3C:4B:FF:8D:33:1E:85:4F:CA:82:F5:97
Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
Manifest number: 23
Signing time: Fri 31 Jan 2025 06:53:47 +0000
Manifest this update: Fri 31 Jan 2025 06:53:46 +0000
Manifest next update: Fri 07 Feb 2025 06:53:46 +0000
Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: euyJ8ecns7bfxT7dcR+9XuT5y5eZDhvsKd3qXOhqK+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Validity
Not Before: Jan 31 06:53:46 2025 GMT
Not After : Feb 7 06:53:46 2025 GMT
Subject: CN=679c737a-5704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:21:b5:4a:63:d1:a3:cd:64:b5:a7:c3:2c:
37:cd:70:1a:59:53:b0:aa:ef:4e:f3:3a:78:f5:cc:
f5:e3:c6:d6:3f:94:a6:d2:c3:f4:d3:70:c0:ac:90:
4e:20:6d:23:82:8f:33:88:b9:90:e1:43:41:b4:58:
46:50:d2:ea:e8:41:90:1c:8b:23:1c:48:03:36:5f:
56:21:48:a7:a8:9f:c2:e2:d1:80:fc:ff:f2:dc:79:
e0:74:c5:b3:23:33:19:b7:33:e8:4f:d7:ac:2c:05:
92:49:21:fd:1a:3a:34:78:29:29:3f:49:f9:6f:a2:
e1:da:da:c5:c8:42:c2:7e:48:44:8d:83:0a:d6:56:
3b:ab:13:0a:ea:c4:e0:56:28:31:13:8f:4a:c7:b2:
25:47:a5:22:00:7b:50:a6:f7:b9:fd:2f:1b:67:41:
30:9f:72:3a:40:41:26:cd:33:d0:78:18:2b:1e:30:
05:cb:a6:19:08:37:6a:34:62:ef:a8:ac:55:4c:88:
51:0d:a6:84:9c:b5:1c:e2:d6:21:dd:75:33:ad:e6:
d5:61:1e:66:27:90:d0:d7:37:2b:d5:64:a0:bc:6c:
3a:8c:7d:cd:79:df:1c:da:11:3e:81:12:9d:ef:64:
e1:95:ed:23:e9:bc:a2:1f:79:37:38:e8:60:07:32:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:E9:2E:91:11:B1:83:3C:4B:FF:8D:33:1E:85:4F:CA:82:F5:97
X509v3 Authority Key Identifier:
keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:68:49:e2:ab:81:9d:16:fd:84:b8:75:d4:69:20:6a:20:
ab:a7:47:d5:75:04:bd:de:f7:92:09:13:73:61:20:a0:36:a1:
db:87:cc:6e:9c:20:cf:a7:a9:b8:e7:8e:61:1c:fb:4a:34:46:
13:24:27:f8:39:7c:4c:5a:46:61:9b:0c:85:1f:55:ff:c4:1b:
c7:1a:95:1d:1e:6e:50:99:d4:d8:75:6d:41:e0:d2:14:6a:cb:
b0:31:07:d6:a5:ad:c3:df:5d:9a:64:59:69:13:fd:15:8b:b1:
7d:f8:11:7f:54:89:d9:6c:5a:b2:ce:de:4e:e2:97:d4:ed:3e:
30:0d:e2:60:86:7d:94:71:f4:e9:00:77:14:2e:aa:85:0c:53:
01:18:db:de:93:05:6a:03:e2:4f:0b:83:6a:cd:e2:56:85:80:
23:65:dc:43:cb:6f:ce:c7:75:b5:b5:aa:91:56:62:45:22:6a:
a5:3a:02:c6:bd:64:bb:43:86:ab:ab:8f:5a:63:99:1c:ec:c0:
1a:74:c9:94:73:cc:a6:58:df:50:64:c4:2f:d6:95:bd:40:c1:
80:38:94:79:09:4b:67:08:b6:17:e9:90:fe:da:0f:a9:c1:d4:
2a:f7:3d:11:24:04:ca:03:99:f7:5a:6b:94:01:fc:ee:b7:66:
62:e1:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:15 2025 by rpki-client