Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier: 16y17I79qrE9sp3FFCVKeWrdA7mtK0saG5petJ6atsU=
Subject key identifier: EF:77:D3:B1:80:B1:C1:DC:E3:C3:0E:3B:79:15:F1:A7:30:7D:1A:C4
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number: 02C2
Signing time: Fri 31 Jan 2025 01:34:36 +0000
Manifest this update: Fri 31 Jan 2025 01:34:36 +0000
Manifest next update: Fri 07 Feb 2025 01:34:36 +0000
Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: JbgxWCYMAg4tAEC0e+FtQk09WBE9izsgeSWeqzk7na0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Jan 31 01:34:36 2025 GMT
Not After : Feb 7 01:34:36 2025 GMT
Subject: CN=679c28ac-016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:f3:75:71:5f:94:33:e0:01:d3:f5:c3:f0:
c0:a4:42:1d:5f:37:2a:cc:e9:4d:0a:07:52:c6:70:
87:df:be:cf:e9:97:6f:62:d3:49:9b:93:60:f5:8c:
60:63:9a:d0:c4:7e:7c:c3:3d:27:6a:5f:30:47:b1:
38:9c:a4:d8:56:a0:6f:70:5b:a6:f6:bd:6d:48:03:
0c:fd:d5:c9:c7:29:f7:d8:4f:ff:c0:c0:38:75:7b:
1f:86:82:3a:51:24:be:29:a5:b0:f2:96:7f:cd:17:
e7:91:0b:6b:a5:65:ce:9f:5c:58:7c:26:c3:e7:69:
6b:9c:4e:3d:7c:04:c4:17:76:e9:bd:8e:12:2d:0c:
44:80:b9:47:df:a1:91:38:84:57:f6:fb:91:99:0c:
58:37:e9:4e:5b:31:4e:0d:50:fb:bf:93:68:81:70:
85:29:ac:1a:a7:a9:47:70:19:14:fe:ef:53:c0:a5:
98:c2:46:d0:4b:a0:2b:fd:a5:e8:73:dc:74:ef:fd:
c7:cb:9c:ce:82:a7:5e:16:43:95:d4:dd:9c:25:86:
df:e6:05:33:06:65:09:25:ec:bf:e6:b3:5a:ce:f5:
bf:41:fa:83:cc:5b:2b:46:99:ad:da:df:c8:1f:f3:
f4:c5:31:1c:50:b2:c2:0a:ee:c8:fc:bd:0d:b9:48:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:D3:B1:80:B1:C1:DC:E3:C3:0E:3B:79:15:F1:A7:30:7D:1A:C4
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:89:f6:52:79:cd:74:76:9e:c9:3e:3b:11:40:21:b0:92:
48:1b:c7:1b:8a:35:f3:dc:a0:73:0e:ab:2a:1c:5c:31:0c:f6:
69:46:21:f9:94:b4:68:51:e9:bd:b2:15:59:6d:af:63:6d:54:
96:ec:2b:75:03:8c:cb:c9:ba:a8:68:6b:a0:5a:8a:3e:3c:f4:
f2:a6:f7:97:40:19:9c:c6:b3:b8:18:40:ce:70:00:00:4f:93:
c4:08:84:22:a6:4a:2d:a8:7a:f3:22:72:9b:27:4d:05:07:99:
6f:39:9b:e3:5c:9f:a4:8c:24:2b:e7:55:0f:7e:03:cc:db:4f:
fc:bc:f8:cb:3f:0a:9c:4e:8a:71:f1:1c:9c:50:d0:21:a8:dc:
f4:04:8c:ff:4c:c0:50:48:fc:c4:8b:43:01:73:38:4f:1a:40:
33:b9:73:bf:8d:16:f2:43:7d:75:00:1c:4a:a4:e4:51:34:cf:
10:d6:1c:5c:65:ad:e1:37:74:5d:21:e5:86:17:32:5f:67:d7:
08:ab:98:22:ea:1c:14:fb:c0:bb:e6:fc:ae:3b:89:a0:ea:d9:
d7:63:df:7a:ae:7e:87:6e:82:de:63:75:b3:7f:70:f8:d3:58:
82:8f:b0:72:5d:cb:43:25:a4:ef:36:ad:ab:90:d7:af:a8:7b:
46:3a:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:58 2025 by rpki-client