Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
File: amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json)
Hash identifier: qZ4wZKCIPkA1mYWDPwpCaILvOxwowKg1bMN9dVt4XUc=
Subject key identifier: 71:F2:8A:32:FC:60:EA:ED:91:BA:46:3C:38:31:37:C4:8C:F8:04:F6
Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
Certificate issuer: /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
Manifest number: 0532
Signing time: Thu 30 Jan 2025 23:32:54 +0000
Manifest this update: Thu 30 Jan 2025 23:32:53 +0000
Manifest next update: Thu 06 Feb 2025 23:32:53 +0000
Files and hashes: 1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: budGmuht0hMy0/Yi9HtpZ5jmZ0LI27xURionDyIEl2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Validity
Not Before: Jan 30 23:32:53 2025 GMT
Not After : Feb 6 23:32:53 2025 GMT
Subject: CN=679c0c26-35d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:12:a9:80:5d:2e:09:f9:39:41:16:3e:74:
2f:19:f8:13:3f:90:56:60:02:6c:bf:57:6a:76:0d:
65:89:f3:02:49:9f:2e:de:c7:1d:a0:61:12:e3:da:
db:48:a0:28:e2:0e:4a:19:c4:ed:cc:5a:06:50:e5:
45:3d:bb:7a:78:12:11:64:64:90:86:68:24:b6:92:
fb:1d:dd:18:e1:0d:0f:12:48:77:60:97:e1:b2:c9:
7a:7a:bb:47:76:3d:dd:2f:79:d4:3f:7d:41:d3:d7:
f6:67:7e:76:d3:b7:60:cd:ed:c8:f5:ce:e0:09:2f:
54:a0:97:35:6c:ad:90:39:7d:a6:63:e4:b5:3b:cb:
9d:54:97:0a:f1:1f:00:a9:20:ff:d2:d4:4d:83:36:
9c:dd:2d:e6:f5:3e:cb:11:4f:6f:c9:25:ca:da:29:
73:40:6c:51:39:37:c2:b0:8f:6a:58:91:31:90:29:
14:a7:ac:02:f8:1a:a5:d2:ee:17:7d:94:f3:1b:66:
b3:dc:fd:da:8f:d3:e5:30:4d:c0:4f:c6:2b:5e:4f:
bb:88:b3:92:19:0c:9f:40:97:bf:bf:f6:eb:33:03:
83:34:86:04:ad:df:f4:2f:14:cd:15:80:e3:07:9f:
b6:c8:01:02:17:0d:2e:97:f0:d7:4b:0d:4b:ad:4e:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:8A:32:FC:60:EA:ED:91:BA:46:3C:38:31:37:C4:8C:F8:04:F6
X509v3 Authority Key Identifier:
keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:35:90:97:6b:ac:75:94:1d:10:a2:5f:62:0c:0a:3f:01:
89:73:b6:c1:ac:f1:65:34:b6:36:27:b6:f8:9d:51:09:96:00:
16:1f:0f:3c:8d:05:45:d5:62:49:91:a2:d7:81:5b:98:3b:07:
ae:ce:e8:bf:6c:4d:94:04:9c:b3:0e:52:f8:14:87:c0:e1:cb:
38:e9:20:84:b5:47:a3:3e:b4:15:c3:99:b1:d2:75:91:50:39:
19:fc:ba:5f:24:f3:7d:06:ad:e6:e4:84:22:69:81:fc:04:ba:
37:d8:ff:b7:06:6f:56:f3:b0:19:32:42:e5:61:90:7e:f8:2a:
2d:97:cb:ad:85:4f:33:6b:6d:af:45:ed:0d:d7:05:1d:13:c2:
5b:b8:1a:79:1b:5e:ec:4c:76:6f:10:81:eb:db:3d:82:4e:6a:
b6:f5:c2:c3:b3:d4:f4:89:5a:85:40:58:cf:5a:00:56:68:4f:
39:f5:d5:c6:af:59:3c:fd:da:3c:71:ce:19:25:70:29:3f:88:
73:9b:36:dc:34:58:ee:34:41:90:44:b1:ed:84:d0:49:34:a9:
99:7b:74:96:23:ee:ca:9a:81:44:e0:b2:9e:38:a1:23:93:fb:
27:98:90:ef:31:76:57:3b:b4:9a:5b:77:6f:6b:51:72:6c:5f:
07:74:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:29 2025 by rpki-client