Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json)
Hash identifier: nJJrXUISwlzZz+j5pqzFVtpSlO/8Yn5WJ9Qn1Ng30Xc=
Subject key identifier: A5:D2:23:EF:6C:3E:80:92:8A:90:45:8A:28:4E:E6:03:39:7C:16:94
Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
Manifest number: 0134
Signing time: Fri 31 Jan 2025 03:38:05 +0000
Manifest this update: Fri 31 Jan 2025 03:38:05 +0000
Manifest next update: Fri 07 Feb 2025 03:38:05 +0000
Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: eqvYmq0VEOjRSoNGqzzjU7skXnUGpIa/V8GQ++JpSXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17
Validity
Not Before: Jan 31 03:38:05 2025 GMT
Not After : Feb 7 03:38:05 2025 GMT
Subject: CN=679c459d-8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:c5:27:97:10:9e:d3:ca:87:70:9a:3a:62:
0f:e5:5f:d6:ce:c4:ff:8a:a4:98:0e:5c:da:b8:1f:
bb:48:68:77:59:f3:ca:3e:d3:19:30:79:ef:53:d6:
7f:da:1b:e6:8f:d3:0f:a7:08:fe:1d:35:61:d7:d7:
f6:fa:63:11:f3:35:75:85:50:59:47:b8:d0:8e:fa:
dd:28:e9:8e:7f:0b:26:97:66:2f:45:f0:ae:50:f8:
79:20:fe:d0:92:84:d7:07:4e:0a:6a:98:56:e3:53:
25:70:ea:9b:50:04:88:13:3e:51:77:b0:06:95:25:
0a:50:fc:15:7f:ed:f9:f8:a3:e0:42:cc:97:0f:54:
c2:8c:6c:f4:2b:26:58:62:b1:b8:2a:1f:73:d7:b1:
ef:79:9c:c6:eb:73:cf:ec:6b:40:b5:36:d9:e2:51:
44:04:ec:86:66:b4:c9:28:0a:1e:ac:9c:cc:be:da:
b6:5a:dd:08:d0:45:94:35:cc:dd:46:9c:47:b8:c9:
b3:e3:bd:7a:54:48:8c:e4:07:05:32:41:c2:de:ca:
70:14:5f:9f:66:39:1c:39:ae:ed:d5:6f:c8:57:70:
6c:6e:3d:da:dd:7e:6f:e7:5f:83:38:72:92:69:ac:
91:76:6e:75:62:31:b1:ec:79:40:a9:29:38:fb:5d:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D2:23:EF:6C:3E:80:92:8A:90:45:8A:28:4E:E6:03:39:7C:16:94
X509v3 Authority Key Identifier:
keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:b4:86:2f:32:f8:be:5f:7f:b8:02:6a:9e:94:5d:81:be:
1c:81:d8:de:0b:d6:87:9b:3c:3a:b3:6b:e2:42:98:43:eb:1b:
af:ea:7a:1d:2f:0e:a6:15:40:38:c6:50:02:ee:dd:40:a0:55:
0d:a2:42:e4:70:9d:d3:10:41:db:5e:ef:58:02:b6:ed:00:b2:
e8:55:88:69:3a:26:91:63:36:eb:fb:bd:e1:46:f5:9e:69:1a:
4d:2e:28:9e:2d:9e:e2:2c:15:01:c5:d6:41:d2:86:87:16:4a:
11:14:9a:9a:7c:0c:77:53:a8:80:62:c4:69:d6:60:51:ce:ee:
5f:e1:64:7c:d0:4a:03:2a:e6:30:b9:90:4a:dd:59:c0:b9:cf:
a2:a5:39:c4:7a:e6:8e:82:76:75:b2:f1:19:b2:b5:44:48:40:
4d:5a:c5:91:3b:bd:09:26:9f:8d:96:8b:00:bc:d7:8f:97:e7:
4e:86:5f:a5:92:eb:ab:c2:c0:08:52:dd:37:74:36:2a:94:6d:
ad:bb:43:47:75:9e:e0:e8:e4:12:f9:d5:e7:7b:31:59:e3:87:
68:21:48:a4:56:ee:7a:0a:91:7c:c5:c5:11:fc:0a:32:29:9a:
95:74:c4:c2:9b:a1:1b:f4:0b:3c:1e:c2:6f:30:3a:76:ed:ae:
d5:9f:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:08 2025 by rpki-client