Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier: l535wRJT/5XutGaF8ktXFi4HFgAevOmzVEF/Q3bdv8A=
Subject key identifier: 66:5C:31:CB:28:EE:C0:0C:71:17:47:8D:99:28:E0:71:BA:7C:C3:F6
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number: 3443
Signing time: Fri 31 Jan 2025 15:13:02 +0000
Manifest this update: Fri 31 Jan 2025 15:13:01 +0000
Manifest next update: Fri 07 Feb 2025 15:13:01 +0000
Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: F91X27aYA8hd7xE/MoLfiSoJYvQsX2WYt53ZzZG6YsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Validity
Not Before: Jan 31 15:13:01 2025 GMT
Not After : Feb 7 15:13:01 2025 GMT
Subject: CN=679ce87e-e413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:ba:36:39:18:d1:03:28:ea:47:c2:42:9a:
84:f5:33:8b:b8:eb:04:db:65:ae:d2:7c:db:f6:f3:
04:61:d3:81:b4:44:47:3d:33:7e:a4:f9:e1:02:41:
47:ea:94:ac:de:1e:9b:54:2c:7c:d7:2a:13:6c:6e:
72:4e:c1:44:68:e7:92:e9:11:31:c7:1c:3f:6a:3e:
bf:81:13:15:a1:a4:de:51:a7:9f:67:31:33:0a:ab:
86:57:c6:22:c4:42:ce:04:ad:35:3f:5f:54:a0:62:
21:98:56:02:00:c0:84:fe:b2:0f:1e:5c:7d:39:98:
5d:29:92:2b:a6:5b:ba:d1:5f:66:4f:e8:36:59:5e:
72:d7:68:de:91:c9:d3:af:d2:7e:a9:00:a1:0d:d4:
11:9b:22:ad:8f:77:b5:c3:9e:a5:04:31:db:4e:b1:
8a:eb:0d:72:07:68:db:d7:05:58:1d:e6:0b:96:97:
ee:9d:d0:a3:2b:52:fb:00:a4:52:78:6d:ba:54:f9:
1f:07:39:7d:97:c3:36:6b:b1:00:72:ae:8c:41:71:
92:18:e0:b7:af:9f:32:84:36:e0:00:43:75:98:aa:
ad:98:79:b6:07:ad:17:80:b3:75:35:21:38:a8:86:
74:01:08:4b:10:ec:5c:9c:51:48:ef:91:79:25:bf:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:31:CB:28:EE:C0:0C:71:17:47:8D:99:28:E0:71:BA:7C:C3:F6
X509v3 Authority Key Identifier:
keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a9:5d:cb:2a:8a:6b:4e:14:2a:82:9c:ce:7a:0c:39:be:d9:
8e:2e:98:04:a8:24:bd:68:7a:88:6a:81:ec:3f:f0:d0:fb:bd:
62:f1:be:e4:86:11:9b:cf:e6:5e:17:5b:a1:58:83:ac:72:6c:
c8:e5:c1:25:bf:5b:14:25:de:7a:46:96:69:31:4d:1f:cd:4a:
41:93:99:a5:d4:a2:3a:c5:47:6a:0d:8c:e9:6c:30:eb:15:41:
31:22:24:6b:c9:88:4e:fd:a1:2b:d4:f8:6d:5f:45:82:4a:21:
55:cc:f6:56:78:f5:35:dd:13:f8:62:1b:25:a9:d0:95:9f:2f:
db:4a:f1:07:d2:cd:dd:18:3c:77:59:ce:df:15:32:61:bc:86:
6e:8f:85:24:c4:59:b1:45:2f:c3:59:ac:c7:44:2b:54:d0:4c:
2f:d5:98:98:bf:ba:b0:37:6e:23:7f:71:f1:bd:55:7f:0e:3e:
d8:6e:ae:dc:f8:1a:7c:36:71:3e:77:5d:ed:5e:9d:f9:58:25:
4a:96:63:ef:c4:6b:0b:a4:bb:57:8f:5e:a1:26:30:50:36:a3:
22:df:4b:4d:47:d8:24:6f:14:e1:fd:ed:36:8b:b3:42:be:df:
b4:1d:ad:1a:52:69:16:2d:ab:ce:d0:cd:92:30:12:9e:28:ce:
a0:e9:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:48 2025 by rpki-client