Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json)
Hash identifier: X6CwT/cpROOeF/WzFM5dkgudRAOUtGn4WH8ujdfDZro=
Subject key identifier: 81:5B:31:1E:7B:5C:E2:CB:33:98:1A:BA:6D:58:7C:D5:EA:14:4F:E7
Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Certificate serial: 0BF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
Manifest number: 13F6
Signing time: Fri 31 Jan 2025 18:33:52 +0000
Manifest this update: Fri 31 Jan 2025 18:33:52 +0000
Manifest next update: Fri 07 Feb 2025 18:33:52 +0000
Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: d19SHu+lIjHSN/+vyI26DPLN7xbWsqS86iCwXRhAr30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Validity
Not Before: Jan 31 18:33:52 2025 GMT
Not After : Feb 7 18:33:52 2025 GMT
Subject: CN=679d1790-722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:99:9b:9a:96:c4:c6:e7:c4:cc:ba:38:75:
4c:af:75:44:cf:a8:52:83:d8:0a:da:54:40:b1:b2:
40:83:9f:6a:88:93:6c:27:63:fc:82:e2:b9:da:7f:
7d:2a:81:9f:cc:4c:f9:54:ef:17:39:a0:42:3a:1c:
d3:96:c2:70:f5:6b:5f:01:65:6a:0c:1a:fc:de:6a:
dc:27:c6:7b:1f:22:e0:8b:a2:69:8c:10:05:f3:1e:
d7:55:e9:07:8e:48:40:63:b6:ca:63:fb:fa:d0:3c:
7b:60:38:0a:2d:d8:cb:23:79:2a:78:92:4d:28:04:
1c:60:a5:6f:d2:d4:a6:26:b0:06:f8:b3:ec:68:ab:
94:a5:61:a6:70:5d:ac:9d:8b:47:3f:3a:72:fd:eb:
79:eb:df:66:b5:13:fa:74:4c:8c:bf:35:1f:32:87:
8b:db:02:47:8d:88:23:1f:4f:43:cc:43:09:b6:0e:
11:4c:48:58:6f:2d:02:2d:87:46:f8:b3:7f:6b:b9:
33:41:5d:07:ec:1e:92:8a:3d:2d:b0:47:e6:e8:2d:
da:3c:69:c6:14:b4:08:6d:97:d7:91:b8:4c:21:34:
ba:ef:46:90:58:2f:ef:38:b8:6c:7e:ef:81:f8:10:
e8:81:65:54:44:7c:af:5c:ca:3d:8e:e0:d8:d4:11:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:31:1E:7B:5C:E2:CB:33:98:1A:BA:6D:58:7C:D5:EA:14:4F:E7
X509v3 Authority Key Identifier:
keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:1f:ee:a1:7d:24:fa:75:99:04:bd:ce:b0:c5:e8:df:84:
b3:53:f4:ea:a6:c2:1e:fc:99:0d:b0:bd:59:5b:75:e0:37:10:
d4:38:d4:cf:63:4e:45:c4:6a:78:02:60:c4:1f:65:bd:24:5a:
3d:3e:35:1d:25:e2:79:33:e9:c9:11:00:d6:f0:0e:57:cf:89:
62:70:33:5a:36:ac:b5:b7:78:a5:48:8c:77:5d:35:ad:67:2b:
da:80:28:85:e7:54:2a:63:75:7e:bf:be:ae:ee:e1:20:78:f2:
c0:b7:3d:6f:5a:b4:f5:0c:c9:85:42:be:7b:9a:f0:61:28:d0:
32:72:04:3c:12:2d:d8:ec:28:8f:a6:28:cb:19:e2:44:48:14:
ba:d4:3d:02:66:f9:81:84:11:df:92:de:f9:0f:81:2d:c1:6c:
7a:de:7d:f4:72:7a:e9:d8:63:7f:bc:ea:86:65:1d:f0:8d:8d:
cd:e1:4c:18:9e:f1:87:7a:97:97:0a:31:3b:89:67:b1:6f:3b:
c2:79:5c:61:94:1f:f1:70:57:f8:7c:b4:36:7f:62:42:e0:c7:
c9:e7:e0:0e:ac:83:83:90:ea:22:6f:c5:48:a1:0f:22:05:17:
c9:e2:c0:a5:29:1e:11:2a:ed:c5:08:27:30:e0:1d:34:50:78:
61:52:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:57:53 2025 by rpki-client