Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier: Y41z+0vtCuWAYTCWrhHFGo2Ed1gX6GzFyfSPQc9cYds=
Subject key identifier: B0:0D:A0:F9:BB:28:16:16:1C:69:5D:EA:6D:7D:7E:BC:DC:F3:D0:80
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial: 14CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number: 2AD0
Signing time: Fri 31 Jan 2025 16:50:20 +0000
Manifest this update: Fri 31 Jan 2025 16:50:20 +0000
Manifest next update: Fri 07 Feb 2025 16:50:20 +0000
Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: VqL7wl7Wx3ZEPLCSK5KQB93Ry3rN8BgwT8HHJsxx8XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5326 (0x14ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Validity
Not Before: Jan 31 16:50:20 2025 GMT
Not After : Feb 7 16:50:20 2025 GMT
Subject: CN=679cff4c-394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:3e:b1:51:1d:6d:10:23:20:af:8b:51:6a:
32:aa:ed:d3:e3:f6:e9:6b:3c:a6:6d:b1:57:e6:51:
09:a6:cb:8a:9a:db:15:91:73:f4:35:68:48:d2:b0:
32:b8:f5:d8:dd:11:1e:11:12:57:7f:ec:93:e9:72:
60:2d:9f:d7:5e:d3:af:9f:8b:a1:e3:42:81:1e:62:
1e:fb:a0:15:1b:cd:5c:ee:09:57:8d:fc:4a:06:b9:
cb:47:f3:1b:11:9c:b2:f0:05:78:51:3b:4f:14:ad:
9c:17:1d:9d:7f:ef:97:ae:f0:cc:a8:93:57:fb:67:
bb:aa:82:88:b8:ea:38:d2:1c:cf:95:50:be:68:b4:
cf:90:d2:d7:81:7c:a2:46:5c:01:8a:bb:40:de:d5:
d7:14:e6:da:1a:64:7a:a5:8e:a6:25:b8:05:64:95:
ff:7f:03:9d:72:b4:35:e7:e3:a5:d9:22:7f:3c:ec:
e4:84:0e:a8:3a:f9:cf:b2:f8:7e:41:7a:b6:18:90:
d7:0d:3c:ea:39:8d:00:cd:67:1d:cc:a5:cb:66:af:
74:83:d3:05:30:fe:29:5a:14:46:ae:82:00:f2:72:
88:01:77:f8:04:4c:ab:bc:7c:de:18:ec:c9:34:46:
ad:d9:6d:04:59:de:8c:6b:14:a8:09:b7:70:4f:d7:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:A0:F9:BB:28:16:16:1C:69:5D:EA:6D:7D:7E:BC:DC:F3:D0:80
X509v3 Authority Key Identifier:
keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:64:9f:82:1a:a7:42:c7:27:e9:6f:87:bb:e6:85:d8:e5:
89:71:f5:96:5b:0c:20:02:f3:4c:ec:40:f3:b7:43:58:10:23:
f5:02:1b:a6:98:82:54:7e:de:6d:65:e8:65:8e:fb:88:b0:ef:
b7:47:6c:b3:e3:6f:69:42:27:43:6d:6c:a0:9b:cc:a5:2e:cf:
54:88:65:1a:8d:9e:89:6a:e6:6d:bf:25:3c:96:6f:25:c8:d2:
f1:b5:17:05:87:a0:ef:91:46:46:ee:e9:35:bd:30:b7:0f:9d:
76:71:32:68:14:2a:e9:80:3a:31:8b:d7:c2:9a:c4:db:37:70:
0d:7d:9f:2a:7f:95:8f:25:ec:c6:e6:9b:99:17:c2:ed:63:a4:
f4:d2:3d:22:76:90:a0:2d:19:f9:6d:fe:23:9d:55:fd:a3:d2:
30:44:8f:5d:f7:3a:5d:aa:14:5d:3c:fb:3a:cd:74:81:a4:f2:
fe:ce:16:52:56:f6:7a:91:d1:90:43:49:27:b2:5e:a8:e6:b5:
7b:cd:da:03:16:80:40:1b:17:37:5f:50:1b:4d:fc:aa:9a:5c:
67:b3:b3:f4:fe:c8:cc:bd:66:9f:f1:b1:96:7b:3b:92:79:b0:
a1:1e:59:95:91:40:cd:93:d0:8a:d3:d7:7a:f9:02:96:73:18:
16:83:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:33 2025 by rpki-client