Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json)
Hash identifier: NeWGEdoUSkMhlthQH0WlBwQY3hwhA1FTUgnvidrdlgE=
Subject key identifier: BF:9F:23:69:F6:8B:23:6D:D8:F7:B1:ED:0C:4A:F7:1B:63:64:73:5C
Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
Manifest number: 04E8
Signing time: Thu 30 Jan 2025 23:47:00 +0000
Manifest this update: Thu 30 Jan 2025 23:46:59 +0000
Manifest next update: Thu 06 Feb 2025 23:46:59 +0000
Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: UXew2M2bMrQKwMpSA8I7QWefdBKbxYuRBLHcktGUTmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C
Validity
Not Before: Jan 30 23:46:59 2025 GMT
Not After : Feb 6 23:46:59 2025 GMT
Subject: CN=679c0f73-42af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:0c:8e:2c:7a:e5:6a:9d:8b:4e:d8:e5:4c:
37:ff:f8:86:e5:0b:c1:fe:09:c9:83:5b:d9:c9:7e:
f3:60:5b:59:05:bf:2e:54:d8:6c:31:23:1b:81:2f:
62:60:dc:3f:f3:ea:c7:f8:51:1d:7a:c5:cd:88:f5:
22:5f:8a:ff:9d:d6:5f:b0:39:62:c0:70:03:1f:7b:
94:ee:1b:3d:39:1e:81:8f:80:ba:a4:45:38:7c:21:
df:9f:17:96:85:8d:ab:7a:b8:0f:c7:99:83:76:b6:
bf:4f:23:ed:80:e2:10:3b:1f:d3:be:2e:30:f0:3d:
7e:e7:6a:72:1c:9d:43:48:be:1d:2b:79:b8:36:ce:
cf:e2:3e:65:4f:81:91:a6:e2:2a:68:af:7d:5f:55:
07:ee:69:fb:80:9e:a4:24:8b:5f:96:4f:12:3e:d8:
20:b1:3a:f4:f4:7a:0c:d1:ac:13:e0:dc:68:c5:71:
ed:44:a5:c0:2e:89:25:45:88:e9:e0:1c:96:ff:95:
bf:7d:10:02:1f:48:89:eb:bb:72:64:df:76:5c:d4:
04:0c:54:94:80:0f:74:9c:89:e8:72:5f:42:fe:d5:
64:7d:98:d1:2a:83:98:88:cb:9c:56:b7:5f:56:67:
0f:53:cb:12:4b:08:94:38:c1:2f:4e:02:9a:f0:90:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:23:69:F6:8B:23:6D:D8:F7:B1:ED:0C:4A:F7:1B:63:64:73:5C
X509v3 Authority Key Identifier:
keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:d4:5d:8d:26:7b:74:2d:06:f9:2a:69:d4:52:0c:ec:79:
c2:d8:53:d5:06:aa:7e:97:52:83:7d:9b:bc:aa:81:c8:7a:eb:
54:9c:80:ae:e1:0b:38:5e:25:0a:83:4b:e0:ca:ab:b4:38:e0:
60:c1:86:7b:41:ab:66:fc:ea:ae:b1:be:70:ff:65:1a:1f:f9:
66:15:b7:28:95:66:b2:10:30:fa:0f:11:6e:4a:b3:47:bb:1b:
7a:6e:df:1f:91:35:27:d8:4b:82:7f:de:72:dd:f0:78:45:ba:
b6:03:65:f0:c5:d4:57:cc:70:6a:36:6f:cb:db:96:e4:d3:e9:
e2:cd:62:75:07:42:b3:92:ea:74:65:bc:b2:ca:43:40:66:74:
bb:4a:84:c7:3f:8a:18:e8:17:d5:eb:ec:41:e1:74:ed:c9:f3:
5f:91:4e:ec:49:a9:60:76:c3:8d:6b:07:8c:16:ce:2e:b6:87:
6e:32:38:d8:36:53:ab:fc:f4:0a:22:5e:13:eb:3e:11:47:6c:
6e:33:ff:e2:78:16:9e:bf:05:33:1e:eb:79:ce:71:dd:7d:22:
51:fb:79:a0:51:af:b4:90:e0:f1:bc:9c:13:ff:75:0c:48:19:
33:1b:c1:66:6a:19:7e:db:3c:4c:31:d1:0b:51:08:1b:08:4c:
27:d6:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:31 2025 by rpki-client