Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier: XWKBQJZ42iBQob5JGctDE5R0Q2kAMrjr1AaxoZrZh3k=
Subject key identifier: 07:1F:0C:EF:18:F4:7F:F0:51:DF:18:D6:E6:EC:9F:36:21:ED:BB:42
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 05:02:01 +0000
Manifest this update: Fri 31 Jan 2025 05:02:00 +0000
Manifest next update: Fri 07 Feb 2025 05:01:59 +0000
Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: Vq2+6BCQc0DNwpUSx3lHS1v4kN4HC6I/rYMFjpXT6nM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Validity
Not Before: Jan 31 05:02:00 2025 GMT
Not After : Feb 7 05:01:59 2025 GMT
Subject: CN=679c5948-1d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:21:b6:9e:8c:ab:a8:c9:99:96:bc:d8:fb:
20:ae:c2:87:fb:de:52:c8:89:a2:84:7d:10:f0:48:
9c:83:47:b9:5a:9e:f9:86:56:c9:5c:9d:61:4c:2d:
92:73:e9:94:cf:29:aa:0f:6b:33:14:fb:5d:38:68:
b4:0e:06:7b:39:8b:28:24:80:ea:c5:15:f6:74:0d:
71:65:fa:b7:3e:38:68:3b:2d:36:06:4c:40:62:a7:
3b:b3:d9:6c:e2:7a:92:e4:e8:bb:4a:c1:ad:4f:11:
86:c3:00:09:4b:b4:6e:06:2a:3a:85:18:6c:dc:0b:
08:3c:13:24:0f:e5:12:d5:a8:2e:77:7b:13:b4:9d:
21:aa:fc:4f:2a:7d:44:77:53:e2:b5:a2:16:ab:ed:
d5:67:73:06:8a:cf:98:b2:f5:e9:e4:09:f6:12:11:
cb:a5:ed:7f:cc:b3:b9:a4:8f:5f:81:01:e7:e3:ed:
00:0c:c4:dc:b0:5a:2c:5c:57:6b:02:77:32:0d:9d:
5c:34:e4:18:da:f1:0d:f1:6b:5e:11:82:14:d4:5c:
00:26:9e:c2:a1:eb:59:b2:20:53:d4:cd:c5:67:d7:
2d:97:11:54:55:cf:44:66:b9:47:59:57:67:bf:6e:
cf:45:d5:7b:a6:3c:6e:1c:13:c8:7d:7b:b1:97:c9:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:0C:EF:18:F4:7F:F0:51:DF:18:D6:E6:EC:9F:36:21:ED:BB:42
X509v3 Authority Key Identifier:
keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:54:f0:b6:a4:15:a5:89:d0:74:91:65:09:ab:1d:05:fa:d6:
cd:62:9a:60:48:27:1c:5d:c6:b3:f5:76:41:46:f2:3a:75:51:
07:62:90:0b:8a:2b:6e:23:83:1b:54:4f:af:41:2a:9e:e7:ec:
8e:d7:07:14:0e:c0:70:ba:67:2a:f0:17:b0:ea:78:8b:94:a9:
53:fa:ff:88:01:67:2e:8d:17:e7:52:cc:80:92:7d:b5:bf:15:
5e:b7:90:e7:f3:0b:c8:3a:a4:b1:60:7b:09:81:fe:f7:81:37:
ff:58:e0:db:42:d6:ff:3f:89:60:a8:cd:9e:61:88:6c:42:26:
6c:d2:cb:f2:f7:af:8d:ee:66:fe:f3:f0:1b:c4:6c:59:7b:4a:
83:a8:37:c7:45:10:0a:06:2e:c1:af:0c:4a:fe:7b:63:16:b7:
2d:cb:1a:af:cc:9e:df:b8:13:80:cf:08:e8:5d:57:ec:d8:a7:
64:e3:f7:42:69:a2:5c:c4:4f:ac:6c:ac:98:17:e7:45:5f:d4:
fb:4a:d8:5d:71:03:ae:71:d6:43:1f:aa:28:82:a4:0d:eb:89:
0f:57:d3:5e:14:0d:01:bc:67:3f:d8:8d:2e:9b:1a:93:6b:5b:
21:fb:36:8d:a7:ee:19:34:71:ba:84:22:21:7d:f8:ae:71:c1:
2b:d4:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:37 2025 by rpki-client