Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json)
Hash identifier: S/lvBG51tMSWLyiwBOUvB2CgK/12/mW0BnHzQC5pjSo=
Subject key identifier: 4C:5E:75:36:BA:DB:8A:E6:32:93:97:85:2E:5C:84:5D:F5:E3:63:46
Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
Manifest number: 0129
Signing time: Fri 31 Jan 2025 03:44:56 +0000
Manifest this update: Fri 31 Jan 2025 03:44:56 +0000
Manifest next update: Fri 07 Feb 2025 03:44:56 +0000
Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: 9vmW9Y5lORHiPWcg9yQ0XdPxzzWJONPhsUmGJwcG14s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Validity
Not Before: Jan 31 03:44:56 2025 GMT
Not After : Feb 7 03:44:56 2025 GMT
Subject: CN=679c4738-c32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:2a:62:c4:b9:b1:45:f6:c4:45:ec:82:ba:
f7:e7:fb:bb:6c:78:da:bc:3b:c9:20:b6:ed:82:87:
81:6d:89:8c:e5:0a:82:53:f2:fa:59:14:79:de:81:
af:1b:96:3f:71:b5:df:26:e1:87:a3:ce:bf:dd:3a:
85:16:d3:ac:ef:e2:9b:90:6c:d9:29:a2:c9:b3:54:
7e:87:14:2a:55:7f:2f:02:6a:3a:1f:26:aa:7a:5f:
1b:19:a9:8d:6f:fe:fd:f9:e7:70:be:9d:ab:80:70:
e3:f8:f2:97:bf:12:17:9d:72:d1:48:8c:25:91:b0:
f4:5a:81:ea:fe:22:b2:86:36:4d:73:21:3b:f4:67:
2b:f5:c2:76:9c:76:c3:27:01:c7:cb:28:1e:a2:d3:
9c:d7:10:0f:52:ce:7f:cf:b8:6b:32:4f:16:6f:8a:
32:b9:37:9a:69:60:f0:ce:77:e6:1f:cc:b4:ce:cd:
00:0b:9c:a5:84:30:bb:38:5e:2c:a5:ea:e5:6b:59:
d0:b8:38:b0:6c:3b:3e:95:c2:13:f4:ea:99:0b:fe:
e9:92:12:0d:92:1f:97:32:27:0d:1d:15:93:b0:ef:
31:8e:31:e0:39:f2:38:13:83:c4:41:4f:72:33:56:
9b:e5:c3:c8:2c:6a:b8:52:87:06:a3:ad:74:1b:c2:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:75:36:BA:DB:8A:E6:32:93:97:85:2E:5C:84:5D:F5:E3:63:46
X509v3 Authority Key Identifier:
keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:39:aa:38:38:d4:da:29:ad:b7:03:6b:8e:d4:9c:ee:90:
63:fe:79:81:b1:9a:41:c2:af:44:a6:36:e8:f4:b0:a8:8b:08:
78:57:ac:71:d9:c7:4b:7d:d1:b3:51:8e:ae:25:4a:2a:0d:6a:
96:e5:21:6e:b3:f9:e6:8f:b8:33:46:2f:a2:3f:9d:6a:1c:7c:
97:de:02:1a:62:00:05:38:6a:46:f8:0d:c2:0f:e9:97:d2:7d:
66:d9:ef:bc:39:da:46:47:e3:86:c5:a6:68:49:22:a9:24:96:
f6:d5:d0:54:bf:d1:52:cb:c3:ad:3d:86:81:52:f7:6b:9a:f2:
18:15:dc:4e:1a:fb:2c:18:ec:9b:41:96:c6:72:15:ed:1e:c9:
6c:69:9f:39:55:19:31:f1:57:7a:91:ea:b3:3d:ec:a2:7f:e7:
7b:f5:30:a9:14:78:51:81:f7:8f:83:f2:b8:19:df:01:2e:48:
78:f0:a2:10:ae:62:79:27:72:b3:e1:72:76:ca:60:7c:f3:a4:
86:1f:74:fa:83:9b:69:9f:6a:bb:bf:84:c6:9c:c8:3a:1b:86:
55:9b:80:38:cb:d3:4a:e8:e3:0c:4d:3c:a9:76:da:2d:76:99:
70:f2:48:11:c2:01:d9:79:a4:e3:5c:df:f8:95:71:c8:b6:81:
34:fd:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:46 2025 by rpki-client