Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: yA8RkJh4Kg8P32yVxfODZTpOvYveW7STZcRJYnndyV0=
Subject key identifier: 44:EC:58:BD:86:90:4D:DF:F6:00:52:06:73:AA:43:CD:09:94:F7:26
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 215C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 215C
Signing time: Fri 31 Jan 2025 15:54:46 +0000
Manifest this update: Fri 31 Jan 2025 15:54:45 +0000
Manifest next update: Fri 07 Feb 2025 15:54:45 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: swZerqASNIp5lvK9/jMoKBVuKVcUIpHwVtJ1Snau018=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8540 (0x215c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: Jan 31 15:54:45 2025 GMT
Not After : Feb 7 15:54:45 2025 GMT
Subject: CN=679cf245-d706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:63:cc:79:df:d6:f6:9a:70:54:76:7f:2d:
78:83:04:ca:9f:ae:24:7b:e1:a7:6a:61:ea:8c:2d:
f0:7e:af:3e:1e:49:d0:e5:52:67:33:7c:f6:e8:1e:
a4:05:da:0c:07:c0:b7:81:3f:fc:74:5a:2a:e0:1b:
8e:fb:35:59:f2:e1:50:8c:f2:21:ad:72:88:2d:99:
ca:a1:9a:50:80:0e:3f:26:99:09:42:38:25:5b:f4:
25:19:ad:15:50:95:43:be:18:6f:34:95:a0:bb:a9:
8d:77:73:4e:bb:28:a5:54:6c:bf:a1:5d:57:77:8d:
e4:8e:af:db:ba:99:92:1a:4b:bb:6d:82:d4:bf:2a:
35:2c:38:20:cd:61:d5:e0:d8:3f:d3:60:f4:81:4c:
cf:2a:57:c2:95:ff:6f:75:e2:fd:71:50:e3:6e:45:
fe:65:72:17:c8:a0:e0:5c:ea:27:78:1c:58:d1:c9:
d5:91:ef:bc:13:72:58:16:15:33:a9:5c:7b:b6:79:
fe:67:00:93:ad:6c:e7:5b:c7:db:bf:d1:14:1e:99:
98:0c:00:56:1b:f3:eb:db:f9:2b:89:18:af:2d:10:
c0:41:5c:f3:89:f0:fb:9a:d3:bd:1c:fa:2c:db:61:
09:15:84:6f:d5:81:51:78:67:b4:8b:53:18:b3:76:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:58:BD:86:90:4D:DF:F6:00:52:06:73:AA:43:CD:09:94:F7:26
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:74:86:c5:21:b2:f4:9f:6b:c0:72:1d:cc:4e:35:db:ef:e1:
0b:1c:59:ed:e9:17:94:3e:79:fe:7c:24:9f:39:43:3b:d0:61:
50:74:d3:3d:5a:39:b2:71:25:74:99:ea:a6:a6:17:11:0c:c7:
ba:3b:26:f8:72:e4:5c:66:bc:8a:49:f4:40:c8:73:1f:11:6f:
23:54:a2:70:59:6b:ec:d7:20:55:4d:f9:96:67:a3:b0:72:5f:
4f:79:12:b2:53:61:f8:d4:d9:9c:3e:23:04:85:e1:0e:f0:ff:
fe:be:1a:5d:ae:0e:95:ee:b6:29:28:27:32:c1:07:5f:d9:b0:
cd:d9:55:b1:fe:77:2c:a6:e0:88:df:44:c0:0a:30:ba:81:63:
57:80:10:a0:f5:23:e9:b0:1b:34:eb:0a:50:e9:94:d0:a9:b4:
5f:cc:aa:48:dd:ca:5c:d0:b1:42:5d:07:17:a2:d9:3d:3e:91:
34:4c:de:64:f7:c4:5b:86:54:63:f7:8a:b3:3d:22:22:fe:22:
b0:79:60:85:8b:e2:e9:a8:c6:76:69:f5:64:d8:73:43:ca:26:
a2:c0:20:dd:2c:37:ec:18:27:22:83:75:a4:85:48:fe:d6:1a:
0c:8f:f1:3b:a2:00:4d:c9:cb:fa:9d:9e:26:2e:b3:ba:6e:fd:
31:8c:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:21 2025 by rpki-client