Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json)
Hash identifier: 8W5lK8RTzCKAVUoL+tqH1YxkxlBH2YTB1QtH4Ppkx0w=
Subject key identifier: 95:42:8F:5D:9C:1E:E7:5F:73:86:52:E9:B6:EF:61:E9:C5:C7:7D:99
Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 14:43:37 +0000
Manifest this update: Fri 31 Jan 2025 14:43:37 +0000
Manifest next update: Fri 07 Feb 2025 14:43:37 +0000
Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: xfXND4JnAZ+siTxv6/5EAHP1Ka0fm0cSVEZadhBnVbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Validity
Not Before: Jan 31 14:43:37 2025 GMT
Not After : Feb 7 14:43:37 2025 GMT
Subject: CN=679ce199-c8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:71:7d:b1:35:c0:ef:d3:23:62:f5:b9:0d:
8b:b2:7a:96:62:08:ef:d0:a0:39:b6:be:ea:ac:d2:
fa:75:19:f2:1c:e6:d3:ce:0a:65:89:d9:a5:60:a6:
2f:13:ca:90:aa:27:4e:9d:41:6b:ab:61:a9:90:a6:
21:a6:9d:de:6a:f3:a0:8a:3b:9f:6f:00:37:5b:92:
97:11:b4:fc:4c:f5:bf:f3:34:70:cb:dc:41:4a:e8:
5d:27:37:cc:d1:0e:cc:b2:f0:9b:4c:cb:7c:ff:eb:
fb:17:0c:9f:83:10:a4:22:61:ef:b3:0c:38:b1:6f:
0f:ff:d1:d9:a9:32:ff:61:21:61:f6:d6:5c:a1:5c:
04:06:36:1d:13:38:08:c9:0a:ca:85:3d:21:66:74:
ad:db:44:16:27:03:df:63:f4:df:69:55:02:f9:97:
ff:55:c0:94:b3:05:da:7b:44:eb:e9:1f:a2:97:41:
e3:e1:bd:ac:c9:71:ba:13:40:9f:17:99:7f:57:ed:
9f:5c:8f:27:37:a3:c0:8f:fe:91:4a:92:e5:8d:96:
4b:4b:ae:1a:d6:7a:46:ac:e8:ce:9e:06:df:f3:ad:
d4:76:e4:36:1a:af:36:f9:2a:f9:7f:99:2d:3f:9d:
5a:11:96:85:6f:63:75:3e:62:44:2a:39:51:db:de:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:42:8F:5D:9C:1E:E7:5F:73:86:52:E9:B6:EF:61:E9:C5:C7:7D:99
X509v3 Authority Key Identifier:
keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:33:05:51:74:f7:91:70:25:8d:eb:a4:d6:fa:a4:c2:16:
44:16:55:8d:5b:10:6c:42:30:20:d8:d6:28:62:24:92:18:58:
a4:8f:6c:89:dd:9e:65:6a:e8:cb:9a:58:c9:cd:5f:f6:7d:45:
e4:13:25:3f:36:8a:b0:39:2f:52:49:a8:cd:3f:09:67:05:46:
3d:07:bf:b7:45:fa:7b:bb:86:b7:e7:fe:98:c7:02:a8:56:20:
ab:f6:c5:21:5d:4f:af:cd:0b:39:d4:c3:30:d3:e9:49:1a:a3:
56:40:79:17:5c:0c:e8:83:72:80:71:f6:2c:2e:fe:40:fe:e3:
cf:c9:46:5c:24:2e:e0:cf:61:75:8f:02:70:5c:f2:9d:01:97:
5a:37:dd:b0:19:bd:b5:be:01:d1:b3:27:96:00:aa:cc:6f:3e:
86:47:1a:13:da:13:94:96:a3:bd:17:e9:14:26:5c:7f:f0:64:
4b:a2:f3:28:36:ee:6b:78:cc:69:b7:9a:08:ba:83:b4:62:8d:
5a:ac:33:e7:c4:d7:fc:a5:5f:11:0f:d6:b7:b7:b7:5f:e4:e6:
2e:15:7b:5e:de:c6:87:e1:b4:6f:73:8c:7c:33:e2:3e:7b:d6:
db:d8:28:0d:3f:a6:cf:f6:64:55:cd:e3:50:44:f4:9b:40:36:
03:d8:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:33 2025 by rpki-client