Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File: STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier: wJVf6hwqspefMahamhhjsdJpbZ04Oj7iQzbAbJRRUGo=
Subject key identifier: CF:44:27:13:43:71:F7:29:AF:A4:D8:FA:0E:F4:04:A1:78:1A:DB:87
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer: /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number: 40
Signing time: Fri 31 Jan 2025 06:30:35 +0000
Manifest this update: Fri 31 Jan 2025 06:30:34 +0000
Manifest next update: Fri 07 Feb 2025 06:30:34 +0000
Files and hashes: 1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: gcLOOjH6VYDx1IF1Hpd0U58mOqlDFbolsQ6xmIbUXMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Validity
Not Before: Jan 31 06:30:34 2025 GMT
Not After : Feb 7 06:30:34 2025 GMT
Subject: CN=679c6e0b-ea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:8d:dc:b3:70:14:e3:7a:db:f0:6e:dd:5b:
60:53:ca:a0:a6:28:a3:5e:6f:b3:f3:35:17:83:86:
4b:bf:ba:89:51:c1:a2:a2:d9:ad:0a:5b:d9:01:8c:
cc:ca:f7:e1:a1:b1:f3:ef:f8:4b:d3:7f:17:96:69:
a3:65:ae:13:29:76:b7:5a:b0:4a:d2:bc:ab:12:51:
c3:1f:70:da:83:aa:56:b5:99:e5:d5:37:9b:d8:74:
d8:8d:a4:ea:10:a6:ea:ce:98:0c:cc:b5:3b:b0:a4:
92:f9:a1:5d:1a:f4:d8:9f:e4:d0:53:72:5e:55:64:
ca:eb:57:9c:2b:37:33:d8:5b:3a:e1:41:95:f9:13:
a9:c5:2f:4c:39:b9:8d:3c:b3:aa:e3:f5:3c:57:85:
2e:21:eb:5a:bb:4b:ee:dd:71:10:a5:7e:9e:03:22:
69:b8:a6:7b:51:05:54:8f:50:97:3a:80:15:ca:76:
19:b4:09:74:5a:14:1a:c9:bb:f5:db:93:a9:45:c0:
79:1c:53:3c:13:a0:03:d3:db:ad:f9:0d:7d:8c:43:
f5:98:ad:47:86:aa:0c:f7:d0:e4:3e:21:09:60:f7:
fc:98:70:a3:dc:b0:1b:f3:21:51:b4:1a:b5:45:9f:
74:1c:15:d6:d1:5e:7e:ba:88:a8:3e:77:53:f1:0b:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:27:13:43:71:F7:29:AF:A4:D8:FA:0E:F4:04:A1:78:1A:DB:87
X509v3 Authority Key Identifier:
keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:2f:78:54:da:7c:c3:f0:fb:05:66:7d:2b:12:25:c8:ec:
dd:a9:37:dc:d8:b1:46:3d:9f:29:5f:74:78:50:7e:69:97:22:
af:42:f5:fa:88:79:f0:8a:f8:ac:b4:ae:9b:78:31:e6:c6:66:
44:40:aa:2c:8c:69:37:0a:20:a4:09:3c:59:cc:e3:4c:6f:9d:
d9:23:47:b3:8d:04:51:d0:62:91:99:7d:41:54:bd:ee:09:3d:
db:16:13:0d:5f:36:3e:02:48:da:66:f8:bc:9b:00:0c:d5:cf:
b6:69:63:9a:69:ee:f1:e6:de:a3:30:d0:8d:d4:48:1c:16:a9:
12:2e:e2:2b:4a:2c:81:89:55:2d:76:cc:6b:5b:b5:9b:20:6f:
3b:ac:ac:90:d4:73:04:6c:48:ac:5e:1a:b3:39:c5:00:9b:60:
40:97:a1:8c:f3:39:94:db:92:1c:da:8f:79:43:89:1c:93:b9:
1e:e6:70:25:7e:bd:71:13:c2:b6:50:9d:4a:ac:f2:b7:29:c8:
fc:ea:65:80:a1:d6:19:62:d0:8a:7f:69:0a:6b:80:13:04:a5:
a3:73:a9:1f:d3:00:53:1e:7a:06:f9:81:dd:8a:34:a8:ee:56:
eb:cf:30:6e:b8:0d:7d:42:a2:64:91:cc:9b:19:19:8a:8a:5a:
3a:55:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:23 2025 by rpki-client