Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
File: m8V5k3xyDN2n11YYtyJj0kza_K4.mft (raw, json)
Hash identifier: ZUThHlgNLgbCBGO8S7hNtBEGWEWynwHNvkPQ+CcQkZA=
Subject key identifier: E3:88:EF:05:03:27:D3:57:4A:78:14:86:F9:ED:29:5B:41:A9:D6:8C
Authority key identifier: 9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE
Certificate issuer: /CN=A91396E7/serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 06:39:52 +0000
Manifest this update: Fri 31 Jan 2025 06:39:52 +0000
Manifest next update: Fri 07 Feb 2025 06:39:52 +0000
Files and hashes: 1: m8V5k3xyDN2n11YYtyJj0kza_K4.crl (hash: KJFHJDoruOpT5lfbZZOnajDXqwLhMwR4BL4bzgonw3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91396E7/serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
Validity
Not Before: Jan 31 06:39:52 2025 GMT
Not After : Feb 7 06:39:52 2025 GMT
Subject: CN=679c7038-b2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:a2:60:20:b2:40:6c:87:98:45:5b:bc:2e:
d9:bb:be:19:3e:7c:a7:8f:bb:9e:4c:fa:42:f4:16:
e7:3a:a0:2b:bc:9c:fe:9c:99:21:7a:44:d1:f3:54:
a3:b1:be:13:97:d5:38:45:92:d6:ff:16:48:47:b9:
f8:ea:da:bf:6b:c1:0b:b4:6d:35:5b:07:a1:af:e5:
27:98:85:ac:76:b7:ae:15:a1:a5:c7:e8:a5:9c:05:
84:a1:3c:a3:cd:e4:27:04:73:fb:a1:7a:8b:09:87:
ec:39:54:af:2f:73:1e:ce:e7:eb:05:d5:ae:e9:17:
4e:2f:9d:09:3d:81:10:d7:4c:4c:38:20:81:04:ea:
52:53:e5:32:47:98:bd:40:94:fa:3b:3a:7c:e3:12:
18:a3:35:c7:56:bf:49:d6:41:16:2b:c0:1f:18:91:
a9:f9:fc:1d:11:92:64:7b:58:34:58:d2:c7:d6:63:
ed:83:c7:21:4d:66:67:0c:79:b0:a3:38:6b:a1:74:
fa:76:f3:ae:e8:38:a2:cf:b4:3c:a2:4d:33:6d:ca:
16:77:bc:6e:2f:8b:b6:c1:9b:c0:37:6b:ab:d3:57:
08:99:72:e8:2b:21:9a:c0:cd:99:fc:5b:17:ce:f4:
be:62:36:be:cc:6e:3c:6f:7a:d7:e0:ce:8b:38:79:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:EF:05:03:27:D3:57:4A:78:14:86:F9:ED:29:5B:41:A9:D6:8C
X509v3 Authority Key Identifier:
keyid:9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:ba:7a:ed:d3:e2:a3:8f:65:13:ef:57:77:d5:ae:bd:c8:
6e:3e:d2:b6:e1:2e:b7:70:c6:9f:53:0a:95:59:15:df:28:a5:
02:ac:08:3a:c4:87:0a:dd:1c:d2:c1:11:0a:58:3f:41:ff:c4:
ea:28:38:43:8b:fc:be:a9:49:58:e0:15:07:b1:af:4e:19:10:
85:f8:58:78:0a:e6:54:79:2d:32:22:c8:6a:d2:cb:0e:e2:01:
ce:79:8a:1e:b1:33:d0:ea:e5:41:a6:b9:c4:06:db:71:b1:f7:
d9:a4:a3:87:81:a9:b0:d3:ea:82:a5:68:aa:f8:cc:34:12:27:
e8:e2:50:d9:47:3f:30:c6:66:ad:d2:c1:a2:8f:b7:8c:0f:87:
6e:85:2f:84:a5:52:7f:54:88:fd:7e:de:9c:da:1c:b7:82:5e:
35:ec:ce:66:3e:9d:e3:fb:90:85:78:c9:9c:03:5c:cd:70:08:
cc:74:58:13:ec:7f:0b:b3:7c:bc:7b:0b:23:e1:1b:75:1b:d3:
16:80:33:20:6d:1e:6d:85:e8:73:f2:3b:eb:1c:91:3a:18:7c:
fb:0b:56:9c:51:19:fe:1e:fe:4f:15:37:2e:bd:b1:97:41:5f:
1b:ef:80:9b:3d:ac:c6:5e:54:7f:e9:3c:47:a1:c8:9c:ff:26:
16:33:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:22 2025 by rpki-client