Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier: EXVv8+erGsixi5rFrF04qNRKw9evQUKOZ7pRa9670VA=
Subject key identifier: D4:21:98:DB:66:A7:52:F6:6F:CC:9D:24:23:91:F5:0B:AA:8F:B8:5F
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial: 0598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number: 0598
Signing time: Thu 30 Jan 2025 23:10:25 +0000
Manifest this update: Thu 30 Jan 2025 23:10:25 +0000
Manifest next update: Thu 06 Feb 2025 23:10:25 +0000
Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: L7gioTqXWCsad/dp+1IO81XmjnEGrkY3VJJXZ0o8LQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Validity
Not Before: Jan 30 23:10:25 2025 GMT
Not After : Feb 6 23:10:25 2025 GMT
Subject: CN=679c06e1-d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:bf:4d:fe:0a:e8:88:c6:f5:bb:c3:cf:24:
58:a2:53:d1:6e:30:86:4d:29:b3:3d:c4:98:f2:33:
e2:14:09:c7:1c:9e:df:d1:4d:9c:91:15:22:bc:f6:
86:55:ae:a0:ff:7e:ba:b1:1d:60:c5:54:14:f2:a2:
98:8f:c9:39:41:c8:14:cc:01:e8:84:46:5f:ae:43:
56:bf:7a:8d:55:6f:ae:31:13:86:82:6d:f8:ee:17:
c5:76:3f:59:4d:45:3b:5f:85:b8:df:ce:cf:89:ae:
32:af:ee:55:8a:74:2f:5e:c4:f3:89:92:8b:bb:67:
40:0b:fa:59:d1:e5:fe:8e:e4:74:fa:05:6b:12:99:
04:01:c0:30:5f:bc:2f:b2:51:25:1c:28:a0:3b:76:
99:a2:13:77:ce:e2:a0:47:12:00:f6:e6:75:ab:83:
80:bc:af:ea:5b:69:34:82:d3:24:e2:e8:65:a1:2d:
9f:df:06:b8:0d:ca:96:3e:e1:49:a9:b0:26:90:15:
59:0e:9f:06:7e:b4:82:e7:18:79:02:ef:ea:16:7a:
79:80:f1:4d:af:cd:55:4d:96:c0:fb:ee:a5:49:f6:
4a:6f:1c:08:59:40:70:4b:f7:97:06:37:f5:c9:08:
d2:04:e1:65:26:31:48:6c:58:8b:17:dd:36:b4:71:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:98:DB:66:A7:52:F6:6F:CC:9D:24:23:91:F5:0B:AA:8F:B8:5F
X509v3 Authority Key Identifier:
keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:76:d2:db:28:8d:46:c1:c6:7e:60:3b:ad:03:fd:4c:f2:
95:4b:99:ae:00:a4:49:05:7d:91:6a:12:bf:c3:c9:3e:20:6a:
de:5f:84:af:32:8d:67:39:3d:b8:e0:7e:c4:38:5a:2b:9d:fd:
eb:a7:86:d2:3b:c5:94:89:e4:90:6c:e7:ed:e5:09:43:ae:dd:
c1:d5:dd:0f:44:fc:78:6c:ea:49:1b:28:cc:35:76:70:19:66:
ea:c8:74:74:e8:03:e0:86:1c:09:f2:fd:b9:49:88:0a:d3:a5:
2b:f9:c6:06:76:b9:f4:1c:1b:9b:18:9b:55:82:c0:19:fa:3e:
6e:5d:1e:88:55:0a:9a:e5:eb:df:96:8c:04:34:fc:5d:99:a1:
4a:fd:32:20:9f:80:e7:ee:93:22:e8:d7:83:5b:1e:40:35:a2:
ff:aa:48:a6:ba:1d:e1:55:27:12:3b:46:e8:63:ba:0f:24:28:
d8:ff:9d:32:11:27:3d:53:36:71:50:60:5e:92:dc:37:1d:35:
66:9f:a5:12:c2:65:e8:5b:97:9a:8b:a6:a5:1c:f6:b4:96:3d:
c2:85:1b:e5:68:6d:c2:c1:ff:11:15:c4:29:cd:17:cd:2e:7d:
9e:8b:95:e0:15:73:7d:b5:9b:dc:fc:30:d7:21:18:5b:64:e8:
7c:0f:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:40 2025 by rpki-client