Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json)
Hash identifier: cvPRj6yU2+HzO36i34e6CIl2AR6+dFpJl4x2UkdqcUw=
Subject key identifier: 25:0E:E8:53:2A:DB:11:8C:27:6A:04:76:34:25:F5:6B:63:75:8B:CB
Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Certificate serial: 0A2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
Manifest number: 1288
Signing time: Thu 30 Jan 2025 19:52:22 +0000
Manifest this update: Thu 30 Jan 2025 19:52:22 +0000
Manifest next update: Thu 06 Feb 2025 19:52:22 +0000
Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: OMPgEPt1hMlpV9bHyAroPfnmXZZtEadJeTW01VgzuGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C
Validity
Not Before: Jan 30 19:52:22 2025 GMT
Not After : Feb 6 19:52:22 2025 GMT
Subject: CN=679bd876-518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:4b:aa:a8:8f:52:33:9a:00:34:e5:de:96:
52:a6:7f:68:12:0c:f1:ca:4a:13:72:53:7e:81:d5:
15:89:57:cc:b8:71:66:16:c8:5e:98:99:1f:cc:27:
05:45:16:93:1a:8e:31:9b:c9:3b:a7:79:eb:6e:df:
e0:6f:08:58:38:c3:b8:51:4f:8b:f5:e7:51:39:05:
5c:e1:09:00:3e:19:fa:c0:2a:8f:89:ce:61:7b:a3:
b5:1c:a2:a2:11:43:f7:d6:68:f3:de:07:5c:b7:1b:
f4:d9:02:ab:74:65:1b:d2:0f:30:5f:3e:3d:db:14:
2b:1f:b9:e8:e0:02:7b:85:4f:6b:d7:bd:ad:e5:58:
0b:3c:45:61:bc:db:76:b0:aa:37:97:7a:72:18:09:
88:29:ac:f4:15:1f:37:ac:02:04:3c:1b:52:90:7b:
79:49:03:4a:0d:15:88:52:92:3a:e9:20:93:df:56:
c9:60:b0:34:99:56:24:ff:62:92:6d:27:23:bb:c0:
60:ca:67:b7:8c:ea:43:96:06:bb:3e:a0:5e:34:ef:
32:4b:59:77:8f:af:3e:1d:74:5a:71:8e:28:48:0f:
33:23:8c:4e:bf:7f:84:a4:0e:38:94:d3:0e:6a:18:
4c:e2:a8:e7:17:d6:10:7a:23:2d:46:60:a2:d2:f6:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:E8:53:2A:DB:11:8C:27:6A:04:76:34:25:F5:6B:63:75:8B:CB
X509v3 Authority Key Identifier:
keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:39:7c:36:e8:48:dc:17:a8:0b:4d:9a:e5:ba:61:20:56:dd:
83:57:cb:8f:51:93:22:ec:b3:dc:cb:aa:99:b4:7a:25:12:0f:
a8:81:59:ce:97:58:81:99:39:0d:76:04:db:87:ac:d2:f5:fd:
af:ca:70:e7:25:a1:13:07:77:78:a9:05:36:b1:bf:81:ce:95:
e1:ba:ab:0d:83:b9:9a:21:3f:21:a9:0a:00:b3:f1:72:b1:6c:
47:80:94:02:e7:8a:32:58:15:8a:8a:a8:52:43:ab:2b:19:04:
2e:d3:70:99:6f:3d:b5:0b:9e:80:26:d3:74:c9:8f:4d:84:16:
f6:88:cf:12:8d:54:af:24:41:99:4a:8c:b0:08:51:41:9d:c0:
68:d6:91:65:ce:b1:31:13:42:f6:77:81:c4:ee:bb:cc:d8:fe:
58:63:19:35:90:80:93:48:94:54:6c:1b:f7:a8:4d:c1:7e:b5:
de:5a:3b:46:fa:e1:5d:bd:0d:d5:f8:8e:a0:13:38:42:b5:f5:
3a:e5:60:60:cd:f6:5b:9e:7a:da:2f:2d:d3:9e:d3:cf:62:ff:
e6:77:56:94:4d:81:5c:32:75:18:87:9f:e3:7d:54:27:a3:0f:
a5:1b:d2:ed:aa:52:53:1a:81:ce:68:34:ca:0e:68:87:c0:cb:
b0:d5:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:34 2025 by rpki-client