Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier: PICtYR1a5Ys/Nremtku6lWP62DFRSDBJvV+EtBL8vxc=
Subject key identifier: 3B:52:A1:3F:29:D4:A8:19:AB:69:69:F7:82:44:5D:E5:02:D7:50:CA
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial: 344F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number: 344F
Signing time: Fri 31 Jan 2025 14:42:08 +0000
Manifest this update: Fri 31 Jan 2025 14:42:08 +0000
Manifest next update: Fri 07 Feb 2025 14:42:08 +0000
Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 2cC18mGNcqpLHEwSupeGr/pkyVlhoZHFQDN6XEVIZ88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Validity
Not Before: Jan 31 14:42:08 2025 GMT
Not After : Feb 7 14:42:08 2025 GMT
Subject: CN=679ce140-0fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:d3:bc:68:78:b0:af:45:1e:2b:58:73:05:
22:a4:ca:7d:1a:ce:f6:d2:a4:76:3d:8e:32:e1:4a:
be:ed:43:0f:70:92:7a:04:89:a1:ca:41:f3:5b:7c:
8b:b1:36:78:fb:0a:63:d5:e8:90:27:03:8f:c4:22:
25:c2:2d:d7:f8:a6:67:84:46:97:00:12:55:56:5a:
c8:c4:13:51:1d:a0:dc:0a:2d:a0:20:ad:1b:4c:17:
11:79:cd:1f:d0:1c:e2:00:81:6c:f0:d9:b3:ba:7b:
c7:15:48:0e:95:bb:63:72:50:df:01:c3:dc:ad:02:
54:81:51:4e:88:3d:f8:3c:9c:6b:33:d8:67:95:3d:
d3:0d:01:eb:51:f5:a6:17:35:c3:72:48:a6:4b:e0:
6f:80:c4:48:7b:29:ef:ff:51:bf:21:75:da:6b:8d:
aa:90:11:53:60:4b:ea:eb:26:ef:c8:bc:dc:4b:89:
a7:a6:57:a2:06:c9:ae:99:c0:7a:e0:f2:db:aa:59:
39:ff:80:51:29:af:a6:a1:8b:d4:0e:a2:d9:7f:26:
aa:c6:b9:6f:0f:be:87:4b:53:6b:c0:4e:f2:68:1f:
a1:ec:00:d2:c1:3b:db:23:93:15:c6:6c:30:94:47:
b0:92:be:20:9f:59:fb:dc:07:88:b0:6d:61:a9:8b:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:A1:3F:29:D4:A8:19:AB:69:69:F7:82:44:5D:E5:02:D7:50:CA
X509v3 Authority Key Identifier:
keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:2d:c6:c3:1e:10:70:2d:d4:d9:3b:2f:6c:0a:e0:86:c6:
c4:39:7f:98:57:2a:33:58:25:c6:af:d6:70:b2:98:19:e3:55:
58:49:20:cb:f6:1b:68:52:cb:e7:85:e4:a6:c8:6d:37:f4:99:
be:82:83:9c:c8:65:28:ff:fa:ad:f0:23:19:e6:c8:6d:d9:45:
62:04:bc:66:1a:9a:9c:e8:2b:a2:17:00:9c:fc:5a:45:de:94:
6d:86:56:20:0d:a7:53:99:8c:ec:e7:b2:1b:38:8d:72:cc:45:
99:4d:fa:cd:ad:5d:5a:8f:99:9c:9c:66:32:c5:83:78:2d:fe:
20:0b:80:a7:ac:a7:cd:fd:33:f8:92:01:5c:fd:41:af:db:d1:
93:ea:d0:42:9b:44:f0:b1:07:d7:b2:b7:ce:9e:e6:5a:47:e1:
99:4a:24:34:16:e5:58:75:e2:ec:00:9d:23:c8:27:9d:e0:a7:
1f:7c:84:12:62:8f:6f:12:0e:e2:26:57:73:ab:1e:c0:24:1c:
3a:57:b0:4e:45:7a:89:bc:20:68:aa:cf:4a:78:70:6f:45:c4:
57:5d:67:30:a7:eb:92:86:30:16:36:0e:83:61:8f:57:0f:a3:
b2:36:8a:06:16:99:16:82:45:1f:32:80:34:42:70:43:16:4b:
6d:0f:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:55 2025 by rpki-client