Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json)
Hash identifier: cjIrIOGbAxzg2J/6RPYvhpSFBZk49z/eFX5yXwVqVA8=
Subject key identifier: 19:89:60:85:26:9A:3B:93:8D:A1:92:74:91:CC:02:AB:39:05:86:76
Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89
Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
Manifest number: CD
Signing time: Fri 31 Jan 2025 04:50:24 +0000
Manifest this update: Fri 31 Jan 2025 04:50:24 +0000
Manifest next update: Fri 07 Feb 2025 04:50:24 +0000
Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: I306D6bLYMuqg8BycEhelpMfJbEcrd5DaHWya7Q5Sik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689
Validity
Not Before: Jan 31 04:50:24 2025 GMT
Not After : Feb 7 04:50:24 2025 GMT
Subject: CN=679c5690-3dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:e3:75:6a:65:82:c8:56:e1:1b:a7:cb:e6:
89:0d:8e:b8:bd:0b:8a:99:92:a6:f3:00:05:ff:d6:
a2:3d:63:25:e9:9a:77:28:68:32:49:52:85:c8:5c:
6e:d2:6b:23:ca:15:f2:1a:76:08:db:86:1e:a3:d4:
74:6d:7d:91:d9:3e:43:57:82:2f:8d:60:ca:b6:87:
42:c7:a2:28:f6:68:5b:71:af:11:21:70:cb:6a:bf:
ba:93:6c:e1:99:db:55:22:be:4a:b6:bb:c4:64:e9:
dd:c1:46:56:79:9e:b6:ca:c3:2e:20:9c:cd:2b:1d:
3c:02:16:26:24:c6:94:c8:5a:7f:92:27:d3:c0:5c:
0c:de:fb:43:80:d8:8e:6d:b9:e8:61:7a:3d:8b:18:
a3:11:2f:9e:ca:48:59:4c:18:21:d3:52:b8:14:d4:
3a:be:fb:24:fa:cc:3b:94:f0:9b:8f:e7:e7:0c:0f:
23:8c:93:10:8c:8b:d5:29:ab:b9:c6:2e:77:d6:06:
d2:24:77:69:9d:7c:45:08:93:62:c6:77:e5:c1:20:
9e:9a:3b:78:f8:10:56:18:1c:ed:58:5d:6f:48:c2:
9a:41:e6:5b:27:95:a3:f8:c4:36:ff:d0:36:08:72:
c5:b9:6e:cc:fd:2c:cc:3e:da:01:3d:e9:88:4d:5e:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:89:60:85:26:9A:3B:93:8D:A1:92:74:91:CC:02:AB:39:05:86:76
X509v3 Authority Key Identifier:
keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cc:03:1c:77:43:57:22:7b:c2:86:b0:ab:d7:20:1d:32:c9:
a2:8b:33:f9:aa:7e:d5:28:92:76:7d:05:fc:94:ef:8c:08:4a:
50:31:34:a9:04:9a:82:0f:f6:45:41:a8:3a:c6:ad:48:fe:4f:
ec:3e:f0:88:a6:fd:a2:9f:78:f5:46:e0:06:5f:a7:3b:27:02:
12:47:d9:7d:99:67:71:f2:5d:69:48:33:b9:64:d0:c6:17:86:
44:fe:c7:44:30:12:13:62:6c:30:bb:18:aa:81:28:5b:6b:62:
34:bb:ca:97:2e:46:c6:70:3a:e9:53:85:26:7c:65:1f:84:b1:
8e:15:62:8d:12:ba:ed:57:5a:0c:b1:10:44:5c:18:62:3a:81:
a6:b0:11:0d:e7:b1:33:e8:dc:b6:1c:59:de:b4:f5:84:b7:df:
63:dc:0b:5b:95:0a:02:05:56:14:5d:2b:cb:9c:e0:05:06:72:
a4:8c:fc:19:f7:29:d8:f1:97:6a:19:c6:3d:4e:3c:d4:36:a9:
f0:c5:cb:39:9b:7f:62:38:80:6b:b8:7d:c6:bc:11:b4:e2:0b:
a9:03:d2:35:62:e7:dc:e9:3a:37:77:68:71:f4:ca:05:92:74:
ba:1e:01:93:df:c5:df:98:65:56:40:1e:7e:b7:40:7e:be:8d:
a8:e1:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:40:22 2025 by rpki-client