Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File: dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier: XxmJtr60nZpsimaLGDXf3DUFwmYFaw7ethTVJe4mMa8=
Subject key identifier: B9:96:17:83:C4:B0:7E:A4:9C:20:C3:56:5B:C0:38:09:AA:78:17:3B
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer: /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number: 0370
Signing time: Fri 31 Jan 2025 01:00:00 +0000
Manifest this update: Fri 31 Jan 2025 00:59:59 +0000
Manifest next update: Fri 07 Feb 2025 00:59:59 +0000
Files and hashes: 1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: 38zqpB6+Zx7Et5w+my4087f2NGLKnHsELAGj21rxksk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Validity
Not Before: Jan 31 00:59:59 2025 GMT
Not After : Feb 7 00:59:59 2025 GMT
Subject: CN=679c208f-9d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:fb:ef:c0:23:45:94:53:76:dd:a8:a4:03:
31:23:d3:ba:c4:be:eb:63:5e:a6:a0:c1:84:35:12:
4f:a7:81:1b:5f:fa:51:9a:2a:ad:43:02:d6:35:9e:
b6:a9:f0:1c:83:4d:cb:3a:b8:96:63:4b:f1:55:41:
8c:5d:07:2b:c8:2e:d3:f1:af:d6:68:d2:70:16:99:
cf:8d:a1:5b:8e:af:71:fb:99:d3:a7:63:1f:81:81:
bf:a4:a3:96:ab:fd:c7:4c:ef:79:ad:6d:cc:7b:dc:
0a:e9:53:ec:61:f9:97:ad:b5:2a:41:f4:74:05:88:
9b:c8:80:5a:c8:32:b7:ff:9e:41:99:c7:4a:43:8d:
10:57:99:dd:e5:0e:23:c4:2c:4a:6a:b5:93:36:17:
ca:d0:91:b8:81:05:95:63:6a:6b:79:d3:28:2f:97:
28:45:49:c6:81:1e:ff:52:b6:c8:8f:8e:25:8c:f3:
bd:a0:c0:b0:0b:e6:06:c7:ba:dc:38:65:35:dd:f3:
4b:e4:f6:25:45:4b:86:f4:bb:c6:01:5c:e9:30:4b:
82:4d:d9:a4:b1:ae:dc:72:47:3c:59:4a:77:ba:a1:
4b:47:24:44:98:64:eb:5e:03:bf:80:5f:f3:75:37:
78:e2:d8:06:0a:52:d0:fc:8d:79:a2:72:6b:37:01:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:17:83:C4:B0:7E:A4:9C:20:C3:56:5B:C0:38:09:AA:78:17:3B
X509v3 Authority Key Identifier:
keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:91:a8:ca:35:44:79:21:72:7c:f6:d8:d6:5b:6d:e1:ba:
42:e2:46:9c:49:08:57:51:cd:51:b7:02:fa:c7:ae:10:7b:00:
45:65:cc:b1:12:d4:62:a2:62:67:f4:c2:a3:3d:2e:40:74:a5:
e6:c7:43:92:0d:2c:03:12:58:2e:80:fa:6f:c2:e0:7a:8d:cf:
20:b8:95:8f:a8:d3:c4:36:be:50:78:49:7c:d8:3d:d9:c3:9b:
33:25:c7:ab:df:d4:e0:f2:ef:a0:56:bd:47:25:02:c0:1b:29:
8d:38:a3:bd:75:00:42:8c:78:12:d4:8f:06:e5:f6:77:d3:13:
cc:70:89:0e:6d:32:a9:08:a6:fd:24:30:71:f0:95:31:cf:28:
7d:a7:63:34:6f:67:b9:ef:81:d0:91:04:3a:bc:7d:dd:0f:96:
76:ca:84:1e:6e:1d:ad:8c:46:9e:2a:1f:ed:96:d3:5c:3d:c8:
e8:a0:87:82:49:2c:fd:61:e8:02:25:5f:ae:d7:b8:67:29:7a:
72:d9:87:2a:b3:22:48:25:ad:0b:2b:e9:2c:66:c1:1c:60:24:
70:cb:0d:45:b9:e9:23:74:f9:d6:ba:5e:93:77:02:c8:0a:80:
c2:aa:5a:5c:61:1e:a9:b1:e4:c1:8b:a3:c5:50:22:d4:d2:bf:
05:08:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:30 2025 by rpki-client