Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
File: lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft (raw, json)
Hash identifier: +SbuAfxSXMwhB3IEw1Sy/JV0tBrRawn6XPVUwRdydPM=
Subject key identifier: D2:62:79:90:C3:16:FD:2F:C0:C8:5C:31:05:CA:C5:3D:F7:A6:CC:67
Authority key identifier: 94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3
Certificate issuer: /CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3
Certificate serial: 267C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
Manifest number: 31A8
Signing time: Fri 31 Jan 2025 15:42:15 +0000
Manifest this update: Fri 31 Jan 2025 15:42:15 +0000
Manifest next update: Fri 07 Feb 2025 15:42:15 +0000
Files and hashes: 1: lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl (hash: Jce/W5JGThsDf3YSN704WQ0DYgNkeCdp7LXNYXAu1vQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9852 (0x267c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3
Validity
Not Before: Jan 31 15:42:15 2025 GMT
Not After : Feb 7 15:42:15 2025 GMT
Subject: CN=679cef57-e026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:09:ed:1e:41:da:8c:ac:57:03:ae:dc:3d:
7f:39:84:ca:a4:ca:fd:4a:a9:2b:23:d4:b0:a4:df:
2e:6e:73:b6:eb:40:d0:fa:71:a7:eb:22:74:64:5e:
e3:10:d5:5e:d2:84:c9:7a:00:42:d1:22:82:4b:74:
16:a8:d9:5c:c8:b5:8f:db:c9:0f:c2:ca:5c:a6:70:
ec:c2:04:28:2a:fe:0f:29:d2:58:30:c1:7d:2b:96:
0f:35:1e:fe:5c:6a:8d:7b:34:d0:a1:be:ea:f6:63:
2e:a5:48:d5:86:36:2e:8d:f5:ea:39:63:cd:ab:29:
e1:0a:36:1b:3b:69:62:80:a4:af:28:9d:af:76:b2:
46:09:99:31:9e:91:d4:1c:f0:62:ee:53:3b:9c:79:
2a:39:cf:a0:08:90:28:06:3e:2f:50:64:59:25:9c:
a5:13:48:89:71:92:fb:63:dd:52:0c:c3:02:ac:73:
c0:c6:c1:0a:8a:51:88:6a:86:18:1e:5b:6f:be:c8:
92:dd:e3:17:53:eb:ea:b2:97:bb:7f:e6:ad:0e:53:
e1:b5:ec:48:a0:83:36:85:56:72:20:d8:78:9e:69:
05:1d:ce:e0:df:61:af:e2:bc:6c:4f:99:18:eb:32:
fd:f4:f0:e5:76:f1:94:d2:7b:41:59:2f:15:eb:fd:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:79:90:C3:16:FD:2F:C0:C8:5C:31:05:CA:C5:3D:F7:A6:CC:67
X509v3 Authority Key Identifier:
keyid:94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:38:bd:eb:e2:7b:d1:5b:39:e3:74:6c:e4:11:90:a8:24:
ab:e0:e8:fb:d4:23:d1:a9:19:2d:59:4e:6f:cf:82:fe:9f:a2:
05:a5:53:fa:86:0f:51:86:38:b8:28:95:47:bd:e8:53:32:1b:
f7:c8:ce:d8:68:36:14:1d:56:11:a7:ef:d6:9b:1e:c0:93:fa:
48:72:e7:1a:a0:69:64:94:e2:b6:91:2f:2d:16:6e:74:d0:03:
a7:92:b4:71:8c:62:a9:53:12:a7:01:29:1a:80:55:e7:b9:a4:
e2:3b:80:b8:14:5e:77:5c:33:eb:2c:7a:7c:66:aa:04:66:4f:
fc:d4:7b:fb:f9:ec:c9:2a:d2:35:f6:1f:00:a1:0a:63:a4:a2:
e2:bb:7f:c8:73:2d:05:96:d8:ac:0e:c0:4f:2c:19:42:34:71:
da:83:b1:17:c9:78:d1:54:60:4e:bd:93:b3:6b:68:53:c8:66:
e8:87:bc:c4:40:1b:bf:2c:b8:c7:fd:97:fa:68:3a:e5:dd:6c:
8e:58:04:fb:90:2c:03:56:09:b5:b9:cf:1a:b8:b7:aa:7f:db:
a0:3b:e2:74:c7:54:40:5e:2f:63:1e:a5:89:c2:82:79:b0:19:
18:d7:b9:e1:e6:e1:c9:ce:f0:55:3b:31:b7:90:35:7c:0f:18:
d1:41:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:45 2025 by rpki-client