Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File: rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier: Dj9Z9eKxdaWlwSiKOkhGE9E7M64myD3yVdiU7lmp2pY=
Subject key identifier: 75:52:36:7E:2A:27:CF:40:4C:F5:33:2D:D0:04:89:C5:61:01:60:19
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer: /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:00:46 +0000
Manifest this update: Fri 31 Jan 2025 07:00:46 +0000
Manifest next update: Fri 07 Feb 2025 07:00:46 +0000
Files and hashes: 1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: YufUTUCmianr+x+TVmMLGVUBSK8ycM3RlfDhKGKJrEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Validity
Not Before: Jan 31 07:00:46 2025 GMT
Not After : Feb 7 07:00:46 2025 GMT
Subject: CN=679c751e-e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:3b:bc:65:16:08:31:23:39:f1:e1:de:72:
76:85:9e:cc:2f:6c:db:77:77:39:b4:95:b5:26:e5:
e1:5e:7b:c3:87:db:d2:b5:37:f2:f5:51:86:2e:d5:
02:b8:0c:fe:8b:66:f6:df:9e:c3:99:9e:b0:0d:d2:
12:3d:69:0f:4f:fe:4a:2a:fe:8e:b6:81:af:d2:a9:
09:94:b1:ec:ee:81:ce:79:75:7f:73:06:42:70:39:
24:6c:ba:7f:3b:0b:9e:20:01:f5:95:2d:3d:77:58:
33:8b:22:0a:be:57:72:6c:dd:2f:1d:ed:54:b8:a8:
b9:56:1e:c2:57:50:cf:98:bd:0f:7b:18:e5:ed:81:
32:bd:80:b2:f3:a0:18:12:97:d7:54:39:24:00:82:
3e:7a:5e:ab:d6:b1:19:fe:ee:dd:e9:45:fa:2c:cb:
c9:e4:96:65:f4:55:e0:a8:b8:04:f8:41:94:5a:99:
86:1f:32:5d:4b:e9:d6:b8:96:55:60:a6:3b:14:19:
c4:2e:c1:87:4c:8e:4f:70:78:1a:85:98:8b:b0:5f:
16:e2:56:84:96:da:53:86:54:4f:26:6f:b3:1e:59:
e3:7e:40:a0:72:6b:cc:cd:5c:79:9f:c2:4f:a4:c9:
43:8b:a7:dc:82:88:12:2e:f0:f4:46:a5:f5:c6:d8:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:52:36:7E:2A:27:CF:40:4C:F5:33:2D:D0:04:89:C5:61:01:60:19
X509v3 Authority Key Identifier:
keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6c:f8:b0:17:c9:ac:b3:58:38:95:4e:91:ce:6c:3e:80:ff:
b5:7f:0e:5d:7a:f7:72:5d:ac:3d:38:a2:50:67:e2:f1:08:64:
f3:6c:a8:78:15:48:db:87:d3:d6:cb:98:d4:92:42:c1:f2:8d:
c3:5f:c1:50:63:af:2c:75:53:77:74:a8:e5:97:89:71:4c:fe:
1d:0c:24:6d:72:2e:c9:28:34:71:fa:19:13:5f:ec:c4:11:ca:
16:d9:38:ef:67:bb:02:24:8f:e2:b7:b9:6e:33:ea:69:13:f1:
bc:10:1c:9b:ec:cc:c6:38:db:85:55:93:c6:7b:e9:9c:22:19:
62:db:a3:96:70:1a:b7:eb:1f:83:54:8b:14:e6:75:1f:d8:7d:
f2:5c:e8:47:9c:ab:70:27:60:a8:ad:83:04:53:db:6d:e2:f8:
e8:28:55:29:89:6f:67:04:81:ef:cf:98:6c:f8:0b:7d:c5:b3:
86:e6:c3:d5:da:b1:1b:00:f1:9d:01:da:34:b9:a8:b4:c5:41:
49:8d:72:50:05:f8:85:7d:7a:f1:91:14:f4:66:4c:e8:3a:c3:
96:6a:86:3c:8b:10:f6:cd:30:84:70:d6:ef:fa:bf:d6:88:66:
02:8f:8f:ae:ae:9c:8f:f3:b1:5c:4e:78:bb:c2:e8:83:f5:7c:
14:22:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:13 2025 by rpki-client