Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
File: 0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft (raw, json)
Hash identifier: tsEEcpaRZ7MR38fHrFnQcGhvl5Gn4Pzvm86iwAcHOaE=
Subject key identifier: 0E:68:54:D6:F2:60:27:84:3B:D3:82:5C:52:B6:77:91:62:2D:AB:14
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
Manifest number: 01BF
Signing time: Fri 31 Jan 2025 02:47:43 +0000
Manifest this update: Fri 31 Jan 2025 02:47:43 +0000
Manifest next update: Fri 07 Feb 2025 02:47:43 +0000
Files and hashes: 1: 0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl (hash: sLqNJpoyMP7zjakaDDLXQyX5iXklZjwJVCMe8UEMYUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Validity
Not Before: Jan 31 02:47:43 2025 GMT
Not After : Feb 7 02:47:43 2025 GMT
Subject: CN=679c39cf-047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:2d:73:2b:6d:a8:9e:b4:f5:ab:a1:d0:dc:
a2:2d:66:45:62:42:76:c1:f8:2d:10:1e:e4:b0:62:
2d:9f:5f:d9:f9:84:dd:8e:bd:75:9e:7c:39:02:70:
aa:cf:35:bd:04:bb:d2:ce:5b:45:d2:68:89:b1:6b:
df:ae:40:ff:e4:99:ad:70:f3:4e:99:19:91:b3:ce:
8c:05:b4:4b:9c:2d:0d:e5:ca:ee:f3:63:98:d3:54:
4d:2d:2a:c0:af:c7:00:f7:78:09:0d:86:1b:f3:7d:
71:68:61:fd:6a:e4:b7:f2:45:ba:e0:5e:0e:8a:9a:
7f:d8:af:6d:ac:df:0f:22:81:9c:11:d5:dd:58:32:
cd:56:d0:3e:6e:31:11:c0:42:ba:cb:a1:bf:e5:a3:
eb:14:a1:8d:3e:8e:8b:1e:52:c2:c4:c9:16:8b:de:
35:8d:35:42:13:64:d5:ab:74:55:d0:d7:51:8c:9a:
ec:0d:c7:2d:fe:1f:1a:ef:6b:64:ab:89:8a:47:78:
98:a1:d7:1e:27:b6:d0:eb:fe:7a:3e:64:36:91:59:
31:99:95:9f:c3:7e:3c:47:d2:d2:29:7d:21:bb:42:
82:03:09:68:eb:55:e8:b6:d3:8a:31:1b:83:d2:90:
d8:1c:0d:26:91:7d:8e:40:97:03:b5:7a:3a:38:25:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:54:D6:F2:60:27:84:3B:D3:82:5C:52:B6:77:91:62:2D:AB:14
X509v3 Authority Key Identifier:
keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:0f:a0:57:7e:71:d5:71:93:7d:b1:b1:ab:d3:77:f4:1b:
3e:37:a6:e2:df:e7:0d:96:14:c1:c0:80:8f:21:e5:ab:42:dd:
d5:d1:98:87:d6:56:6e:cb:ed:da:5e:90:5d:1d:39:aa:8f:09:
c1:12:95:3a:e3:b8:33:ee:5c:bf:87:a5:49:57:b4:65:45:7a:
c5:a2:f1:a4:1f:d1:44:c7:e0:be:9f:72:be:12:5b:d5:c8:b3:
1d:11:1b:d7:fe:07:59:56:e6:e3:c2:5f:fd:bf:ce:a4:12:91:
bd:bd:ff:b8:05:94:77:96:7f:07:1b:d6:67:b0:dc:e4:d4:c0:
84:b7:1b:fe:bc:47:8a:0c:d6:c5:e9:a4:b1:bc:ea:11:a4:11:
1a:83:c0:1c:c3:64:c2:8f:d1:50:49:e9:4c:3c:d3:c8:65:e4:
d1:6e:b1:e8:57:ef:b7:2e:98:f1:ca:e1:03:e9:93:bf:5d:39:
ce:13:a7:a8:7c:46:5b:f0:4e:59:95:04:c6:58:46:ae:c1:cd:
29:c1:79:a8:44:80:ee:80:b9:06:ce:1b:92:a8:24:bd:9e:f7:
e6:a9:90:9d:71:6f:3e:73:df:8d:b3:20:af:b2:47:ac:5b:ca:
1c:83:1b:af:9a:1b:b6:e9:23:67:06:0d:8f:b8:14:4c:a8:1c:
b0:5d:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:52 2025 by rpki-client