Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json)
Hash identifier: oJwk04vZW/vyjYnHhYXcmMy68Y29W6dfmdrHYJP6mQ8=
Subject key identifier: E9:9B:AD:B4:EF:BD:F1:7A:FC:00:AC:E3:A8:C2:86:E7:77:2B:A0:60
Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29
Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
Manifest number: 3444
Signing time: Fri 31 Jan 2025 15:12:48 +0000
Manifest this update: Fri 31 Jan 2025 15:12:47 +0000
Manifest next update: Fri 07 Feb 2025 15:12:47 +0000
Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: gBHaO+XEKLtzCKW1YDqA1R/tNkAPJ8p7+vydeeyN0CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929
Validity
Not Before: Jan 31 15:12:47 2025 GMT
Not After : Feb 7 15:12:47 2025 GMT
Subject: CN=679ce86f-dae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:08:9d:0c:5c:03:6e:b2:43:6b:86:9a:c2:
aa:e8:f6:84:f3:d9:38:95:dc:52:f7:87:30:1a:d6:
02:bb:71:76:34:31:9a:88:22:77:b6:a3:2c:25:b3:
a5:22:a5:74:e5:c5:da:df:7f:37:f6:89:86:0d:b7:
3e:39:fa:7f:6c:fd:04:9e:63:60:75:5a:d2:12:d9:
9b:79:f6:bf:16:50:6b:63:1b:ae:06:b0:c4:b7:dd:
7e:d4:b3:d1:91:30:40:8f:65:46:99:82:d0:13:54:
9e:ce:67:35:4a:e7:e8:64:fb:5c:97:b4:1f:ee:54:
5e:65:9d:bd:7f:bb:e0:bc:b7:ea:1c:37:2b:eb:ee:
10:ee:99:c5:65:5a:83:7f:64:6d:b7:16:ce:44:26:
df:eb:e9:d4:a7:3f:4c:74:a1:cb:e5:54:91:89:cd:
0a:d5:8f:db:f6:d9:81:23:54:3f:c8:5a:d1:76:f3:
ed:b9:e6:81:58:eb:e2:d3:30:80:d1:17:71:1f:08:
74:bc:32:b3:ae:81:c1:a0:42:86:6b:03:0f:99:be:
81:59:51:f3:6c:36:a4:b0:60:36:90:6b:1e:aa:a1:
86:61:f1:e5:22:ff:21:cc:03:f2:1a:1d:25:39:2b:
1e:0f:e6:c1:47:02:0d:31:19:a0:03:00:87:60:e3:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:AD:B4:EF:BD:F1:7A:FC:00:AC:E3:A8:C2:86:E7:77:2B:A0:60
X509v3 Authority Key Identifier:
keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2a:e9:6b:2d:f0:06:d6:63:dc:f2:7d:89:ea:57:bf:33:c8:
cc:06:84:3b:4e:b7:43:aa:91:57:4e:87:c1:fe:96:a2:99:8d:
d4:6c:12:01:55:0a:ad:b6:c3:3a:c1:26:b3:db:32:e4:3d:77:
79:17:a4:b3:57:72:81:e1:2b:4f:c8:b1:a4:cc:ed:33:b7:ed:
9f:df:d1:21:e7:0e:b7:2c:79:3f:0a:c5:1e:a9:27:16:7b:af:
64:87:0f:af:d3:4a:f6:0d:66:54:6f:e1:d6:78:6b:39:8b:f4:
a9:0a:c2:43:e0:82:d5:72:81:18:2e:9b:75:cd:58:75:4f:de:
d2:7e:d6:27:0a:15:eb:89:0f:35:15:4b:37:a7:43:ec:b5:2f:
58:44:a8:bb:02:7a:90:42:a0:16:a4:6a:75:23:5f:69:23:15:
9e:b0:66:96:7f:3f:c6:9f:f9:a1:13:d1:14:01:79:d3:6b:3f:
14:89:9b:35:db:34:c6:5f:cc:62:87:90:a2:45:87:69:ee:d8:
bd:32:9c:09:61:57:a6:59:87:b2:55:4e:bb:a9:16:53:47:66:
24:89:c0:bc:17:5b:f4:60:8b:9e:01:96:1a:07:7b:a3:d9:13:
65:fe:51:d7:e6:50:f8:2c:20:7b:de:87:d1:1d:2f:c1:08:8e:
3c:96:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:46:45 2025 by rpki-client