Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier: gjY+ihTKzF/Rl1AnTxYWVCzwgEvUyfPRiYZmwSKPPPg=
Subject key identifier: 7A:59:1C:F1:CC:1F:4C:18:B1:32:9F:25:28:69:21:EB:1E:3A:6C:1A
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number: 023A
Signing time: Fri 31 Jan 2025 01:57:43 +0000
Manifest this update: Fri 31 Jan 2025 01:57:43 +0000
Manifest next update: Fri 07 Feb 2025 01:57:43 +0000
Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: fnDObuvgKSfGkdt0PmIpqFXwkrvajAJTDAaBhxxPi5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Validity
Not Before: Jan 31 01:57:43 2025 GMT
Not After : Feb 7 01:57:43 2025 GMT
Subject: CN=679c2e17-1c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:30:01:9d:75:25:33:35:23:8c:9b:88:46:
3b:55:6d:cc:e3:ac:47:90:f4:67:34:29:71:d6:47:
6f:a8:af:19:26:65:50:60:e4:b6:fc:fc:0c:79:17:
a8:5f:3e:36:b3:68:a9:17:2d:48:cc:ba:22:e7:9d:
5d:78:e5:d8:9e:37:51:33:f5:a1:10:e6:a2:83:37:
6e:6e:44:69:66:ee:62:08:2d:84:e7:66:7d:e6:77:
e3:e1:ef:78:da:75:9c:75:c3:e9:8f:ff:3e:db:dc:
00:f8:89:f8:a0:42:9f:57:9e:03:90:a4:5c:fc:9a:
e0:9f:91:e2:a3:63:5e:1e:e6:89:00:01:c2:9e:39:
b2:f9:f8:e8:37:cb:11:67:be:5f:ec:c9:b2:4b:a8:
84:fc:46:5f:f6:3e:85:8f:ce:0d:d2:a5:66:71:41:
ac:0e:8c:45:c2:50:2d:22:f9:f9:04:57:58:8b:3c:
93:94:2a:df:21:79:c8:dc:cc:04:e5:de:87:26:29:
03:8f:16:7a:e7:7d:5c:53:13:12:f0:5c:68:05:fe:
ab:49:d9:bc:fa:c3:81:d0:8e:1f:5d:c4:8a:d2:81:
76:4a:bf:66:6f:68:75:83:2c:1d:7e:5a:62:ab:94:
33:5d:c5:25:2a:85:24:61:d2:73:ad:0b:db:50:ce:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:1C:F1:CC:1F:4C:18:B1:32:9F:25:28:69:21:EB:1E:3A:6C:1A
X509v3 Authority Key Identifier:
keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:97:f1:06:71:17:ab:43:48:c5:a9:b5:3f:e5:3f:8b:c8:
b6:cb:de:c2:03:71:58:b6:43:62:8b:e9:1c:f6:64:7d:5d:a0:
2d:25:0f:85:fa:b9:c9:f6:4f:c6:b3:65:47:fc:a4:45:6e:20:
b4:9d:05:33:0c:b3:a9:f7:fc:cf:a9:21:f5:08:56:83:2f:2f:
b1:31:14:41:20:3f:17:d4:91:c4:c0:cb:39:b9:f4:be:20:48:
22:96:54:2a:3b:a0:df:71:b8:43:7c:b5:29:63:3d:cc:12:01:
5f:69:ae:ad:96:5d:4c:f5:0a:43:f8:e1:4c:ef:40:b2:a5:c3:
51:7e:df:a0:0a:aa:20:42:59:ac:ed:56:e2:83:24:46:ed:e9:
15:21:83:13:c7:18:d9:ec:76:d9:be:f2:ab:fb:bb:fd:a6:a5:
be:8d:4f:6d:a0:bb:ef:a0:15:57:87:c5:26:df:ef:02:2b:63:
4f:75:6c:64:e5:33:d0:ad:ff:3f:e4:aa:89:89:f7:b1:5e:11:
3d:d4:48:3a:9b:d7:a6:ac:d6:4f:86:2d:0f:8f:36:e9:f1:17:
4a:6a:54:a9:61:58:8e:0b:b5:9d:95:92:e5:48:9d:b5:c2:46:
7e:9d:b4:64:b6:16:3f:07:86:3d:ef:1b:83:db:62:81:08:1d:
5a:6e:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:51 2025 by rpki-client