Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: 8IC/UvOmTEVHIakQl+nsdHETGQaS80mSbKwXd3lME5E=
Subject key identifier: 78:AF:F2:9D:F7:A6:3D:0D:C6:89:08:A2:8A:98:78:FC:AF:11:8C:A0
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 0694
Signing time: Thu 30 Jan 2025 22:11:11 +0000
Manifest this update: Thu 30 Jan 2025 22:11:10 +0000
Manifest next update: Thu 06 Feb 2025 22:11:10 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: 5hsHgNqbHfd0D5SH9NqlRidhX88q2RzKSppb/NhKcgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Jan 30 22:11:10 2025 GMT
Not After : Feb 6 22:11:10 2025 GMT
Subject: CN=679bf8ff-2960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:00:e1:eb:ee:e4:62:a2:36:3d:9c:23:8e:
c2:79:30:63:81:fa:7c:44:19:f1:bb:64:e6:5f:c3:
7d:a2:57:2d:a4:2c:64:36:87:5b:e4:90:9f:95:40:
31:9c:bc:59:dd:d9:69:f9:77:83:3f:50:15:45:19:
55:91:72:44:d7:87:40:b8:79:7e:3c:f4:0c:5a:eb:
7d:47:22:a7:aa:51:6c:d2:1e:26:7f:7b:41:9d:c4:
b1:56:b6:7b:26:be:cb:58:80:ed:06:53:4a:eb:54:
7b:85:d4:8c:8e:3b:cf:2a:4f:1f:c1:a4:41:da:d8:
fb:b8:54:e4:98:79:91:3b:b7:d9:2a:96:5d:a3:5a:
d7:5e:0b:c0:cd:ca:81:64:38:fb:ed:f2:64:f1:18:
66:e2:b8:26:db:5b:e9:90:50:60:4c:a7:43:9f:cf:
25:02:19:53:86:58:49:42:8a:f2:04:56:2b:dc:51:
b0:2d:d9:59:01:3c:e3:ee:11:7f:79:ff:33:a5:b6:
f8:e3:55:73:02:45:3c:a4:8c:45:48:f4:6f:2a:a3:
fc:05:b3:f0:41:ee:a4:c7:d4:63:d6:b3:07:96:95:
9a:be:f8:33:2c:00:e0:ca:70:b9:6d:f9:72:ce:50:
ea:a5:28:5a:a9:79:a0:41:6b:c9:38:35:7b:bb:ac:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:F2:9D:F7:A6:3D:0D:C6:89:08:A2:8A:98:78:FC:AF:11:8C:A0
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:c8:b3:da:e3:6f:62:28:d5:75:14:14:fe:f8:48:db:0f:
4b:46:bd:68:03:a2:3f:34:a4:e7:11:d6:3f:30:c4:db:62:7f:
0e:ee:bc:cd:3b:9a:ba:20:ae:23:d4:44:50:79:ab:ef:47:8a:
8b:d8:65:ce:c1:c6:2a:ac:d6:d9:4b:17:99:b7:2c:2d:d1:f7:
be:05:dd:5a:77:d7:99:b6:29:d3:0f:a1:eb:3d:2c:3e:56:26:
22:f1:20:7a:88:b7:d1:b5:25:d6:48:f7:a2:37:6b:cd:d9:95:
4b:7b:eb:33:a8:d4:0f:d0:8c:ec:50:e4:36:71:90:bc:83:e8:
d5:ca:4c:d1:31:7c:8a:2e:a9:fc:40:ef:0f:ef:fa:c3:89:14:
21:26:ed:36:5a:02:9b:74:af:99:bf:3c:ae:0b:0a:0a:16:aa:
7d:29:3d:33:35:89:f4:5e:c8:92:d5:14:84:db:38:b0:a3:65:
0c:84:fd:41:80:a9:46:77:25:f1:ce:d1:be:0d:f1:4f:d0:91:
f7:84:4c:4a:b5:e7:f4:2c:e3:d6:7e:92:6e:1a:2e:e8:a4:59:
6e:a5:70:16:cc:a2:c6:e2:b3:10:21:33:5d:b7:32:73:cc:5d:
42:85:74:93:f1:33:ec:af:3e:a2:3f:65:b7:c3:62:3d:f5:c1:
83:05:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:59 2025 by rpki-client