Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier: jcSlo1uijnklAnpZHHNo0tAGN1Rurltc+VczDBq1C7A=
Subject key identifier: 03:6A:74:50:28:46:64:60:90:6C:13:3E:18:1D:C7:47:D3:82:6B:78
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial: 1239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number: 1239
Signing time: Fri 31 Jan 2025 17:07:20 +0000
Manifest this update: Fri 31 Jan 2025 17:07:20 +0000
Manifest next update: Fri 07 Feb 2025 17:07:20 +0000
Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: Zg8c61y89ylgIgrn7PI/UPpV1SGDI4goJB+jlY9ZbqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Validity
Not Before: Jan 31 17:07:20 2025 GMT
Not After : Feb 7 17:07:20 2025 GMT
Subject: CN=679d0348-d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:2c:b9:3d:c5:1e:81:d2:db:de:d2:0c:a0:
87:52:b9:70:ec:8a:ea:e7:f4:a1:0a:68:e0:89:65:
04:4a:23:79:1b:d2:74:3c:be:53:ff:d5:80:ff:1c:
0c:c8:65:8c:93:52:65:1d:7c:fe:3c:58:e0:4d:0d:
95:84:8e:65:35:95:d8:70:b5:46:5c:9d:11:b3:3f:
f3:4d:4e:27:4a:6c:51:2f:5b:b2:49:9c:80:b3:2e:
af:5c:a1:e6:ff:10:e3:dc:fe:e1:37:6f:cf:6e:dc:
35:a9:05:c5:dc:14:09:ba:5b:fb:04:4f:df:b5:f0:
42:2e:3b:c7:de:e9:28:68:6b:0e:a6:2d:80:70:61:
92:d1:f9:d7:7b:7b:e6:6a:c6:f9:b2:fb:85:5f:d5:
db:82:56:00:05:7e:de:30:b9:ac:5d:c3:20:6d:d0:
01:21:6d:d7:4a:9d:35:0f:a8:9e:0f:8b:a2:39:e0:
55:8a:75:0a:11:5e:d0:ba:7e:81:55:42:86:47:f5:
9d:e0:c9:36:57:90:97:4e:4f:cd:a8:f0:db:f3:98:
c8:7b:e5:b8:c9:5e:e8:bf:5f:a3:34:ae:0b:5c:ad:
89:38:85:16:ed:71:58:d7:99:ff:6a:e2:4c:76:92:
17:cf:ed:45:18:22:96:38:65:42:a2:8b:35:ff:fd:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:74:50:28:46:64:60:90:6C:13:3E:18:1D:C7:47:D3:82:6B:78
X509v3 Authority Key Identifier:
keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2d:41:43:d6:e9:ce:43:8b:f5:82:54:29:97:78:94:4e:bb:
c8:dd:85:16:08:c6:70:89:d4:1b:28:8f:71:92:6a:db:35:5b:
7e:a1:d6:c6:10:e9:e7:bd:b4:9b:00:9c:8c:10:b3:a2:33:05:
01:8b:54:63:f9:38:5c:bc:0e:cf:ff:41:44:3d:e4:01:1c:ae:
3e:ea:bf:90:9a:56:58:56:d2:ec:3d:80:57:f8:c6:b3:66:ea:
51:ee:17:4a:ea:bc:98:0c:d8:5b:49:f5:91:db:88:5f:13:e8:
2c:c7:fc:17:c8:4c:f5:71:81:bf:e0:97:1f:85:26:97:2c:8c:
48:dd:dc:7b:00:f9:61:ab:23:20:46:66:24:c1:cd:3d:f4:56:
02:97:60:2e:b9:0a:a1:fb:9f:59:c9:61:60:8d:1e:94:ca:8a:
c5:da:e4:aa:6a:8a:8d:ff:f2:47:43:c3:50:d7:76:c1:14:c0:
e7:6d:85:a0:8f:68:16:4e:bb:4f:92:2a:59:7b:14:53:25:8f:
c1:57:7c:a1:4f:b9:2b:f2:55:8f:09:cf:a6:c3:5b:9e:8c:6e:
4c:29:c9:1a:10:9a:50:c3:fc:d6:5d:55:28:98:d1:65:f7:55:
24:9c:b4:a5:f8:5e:bb:15:68:8c:17:ec:87:24:5c:fa:67:9d:
e6:f1:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:30 2025 by rpki-client