Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json)
Hash identifier: GANqCxlFw8pTT5NxVQr9YcggiGNiFqa+idYSPSu6ajE=
Subject key identifier: 70:47:48:12:99:96:BD:E7:C3:C5:77:3C:85:C6:84:53:FA:B8:CC:BC
Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Certificate serial: 040A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
Manifest number: 040A
Signing time: Fri 31 Jan 2025 00:28:15 +0000
Manifest this update: Fri 31 Jan 2025 00:28:14 +0000
Manifest next update: Fri 07 Feb 2025 00:28:14 +0000
Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: QuKsHz1rHcAt3tCOMg7McPHXKgmYWYt3uXanVHMQiKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Validity
Not Before: Jan 31 00:28:14 2025 GMT
Not After : Feb 7 00:28:14 2025 GMT
Subject: CN=679c191f-28e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:2a:8d:72:34:6f:7a:34:66:6e:11:bf:93:
d6:93:ab:99:2f:f6:ae:a6:66:a4:d5:c6:b9:5e:40:
f4:9e:3d:0a:6e:29:ae:cd:5d:d0:75:ed:08:04:2d:
0a:fb:9a:8f:12:8a:5b:ed:37:9a:e7:ca:dd:f1:d0:
e4:a5:cf:5f:e1:77:cd:31:2a:4b:33:ce:38:bb:29:
d6:ce:93:0d:ab:d1:05:86:54:ef:16:fc:f3:d3:f2:
70:c0:ca:66:4a:b5:00:60:e9:9e:77:63:ed:3a:13:
a1:46:91:57:bf:bc:a5:36:89:f2:29:50:1f:d3:92:
22:3a:6e:6c:8b:db:e1:13:96:08:9a:89:2e:ae:45:
21:b5:dd:72:56:13:ce:fd:84:21:08:21:fc:d8:08:
91:3e:66:6d:6a:2a:0f:5c:e0:43:b3:25:49:a8:3d:
0d:01:22:9d:d0:06:eb:0c:e1:9c:c9:b8:3c:0d:5f:
8a:70:e9:d2:e0:e3:06:24:6a:fc:5f:43:a3:e1:2a:
54:cf:ef:1b:04:af:e3:86:19:9c:80:ae:65:92:c1:
d1:00:cb:d8:b4:89:e3:b7:6f:8c:fa:20:89:91:83:
55:21:39:00:66:b3:cf:b8:2a:9a:98:82:d2:e3:de:
6e:dd:fe:ad:37:3f:04:2c:cf:e5:49:25:b5:6d:00:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:48:12:99:96:BD:E7:C3:C5:77:3C:85:C6:84:53:FA:B8:CC:BC
X509v3 Authority Key Identifier:
keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a7:dc:9c:cd:ef:51:97:19:40:1b:10:ed:a1:17:61:df:24:
59:df:dd:55:b1:84:a0:04:cc:a8:4a:4b:56:55:e3:1a:a1:a3:
96:a3:76:b6:c6:cb:dd:47:ba:85:b4:10:f8:55:5d:ef:08:a9:
80:41:81:fd:ac:e0:c8:ef:09:a1:ee:5a:47:0d:3c:e4:fa:2a:
d3:2d:48:12:53:3c:d9:19:0f:30:6c:40:5f:27:d5:f4:47:9c:
3a:e7:1c:04:67:55:49:a5:86:be:dd:54:f2:f7:e6:a1:e7:8a:
7f:6e:e7:b4:55:29:c8:45:fe:61:30:cb:3c:d5:de:15:47:a6:
f7:dd:19:81:55:eb:32:f4:d8:27:dd:f8:d7:ab:2d:ea:69:e5:
d1:41:d8:47:c2:01:d9:62:9a:04:35:fc:e4:e5:3a:11:cc:be:
cd:22:76:5c:69:94:3b:19:1f:6c:b5:70:b3:db:44:8a:aa:ea:
34:e5:5e:ec:37:96:a1:e3:ce:f4:64:ba:48:b3:8e:9e:f8:a8:
85:86:6a:8d:3c:6d:b9:9e:50:74:37:db:9c:17:db:89:b9:d6:
cb:4c:19:e0:15:8b:ae:df:0c:21:13:4b:3f:39:8c:a1:82:2b:
9e:66:ab:e4:06:37:76:09:16:0d:63:77:73:31:97:08:69:42:
2a:73:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:23 2025 by rpki-client