Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json)
Hash identifier: iUKWBsvQOqOwsmglrEyD9zuMHhgtFe4yw6fgVET7Lt4=
Subject key identifier: 96:3F:A1:B0:AC:19:1C:4F:CC:91:26:5B:EC:A8:6C:76:40:92:13:C0
Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 02:24:48 +0000
Manifest this update: Fri 31 Jan 2025 02:24:47 +0000
Manifest next update: Fri 07 Feb 2025 02:24:47 +0000
Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: suJe4QlLGip904xNeRDB66nSiqx7alBeyJ/lMxNJWgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6
Validity
Not Before: Jan 31 02:24:47 2025 GMT
Not After : Feb 7 02:24:47 2025 GMT
Subject: CN=679c3470-19dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:e3:42:29:48:b8:b5:96:90:79:7d:7d:ab:
53:95:41:be:3f:ff:40:de:02:bd:f0:22:7c:26:47:
d9:33:5f:c6:62:f7:36:10:5e:78:96:95:13:a4:c3:
d1:db:48:8c:f0:6d:af:62:b6:da:22:1e:ec:6f:9c:
91:31:c9:1b:22:19:4c:a1:6e:af:b7:ad:0a:f3:87:
0f:c1:09:a4:39:0c:11:d8:44:bf:c5:ad:9c:a7:90:
fe:da:9f:11:b3:39:97:05:82:81:2d:d2:92:1d:00:
df:51:7f:9d:24:95:2b:d8:2c:60:ec:52:8d:4e:dc:
06:e9:9f:6d:9a:69:5c:6b:7c:e4:74:84:b6:56:d5:
81:35:e6:58:23:c7:5f:6e:31:bf:96:3f:c1:49:41:
75:8e:e0:3c:d2:ca:bc:18:a0:bd:d6:65:27:37:19:
89:31:dc:ff:78:ae:9e:73:14:f5:9e:17:74:b6:e2:
00:83:0d:1b:fa:8a:be:d3:86:a3:a7:37:bc:0c:53:
73:0d:c0:0b:e9:12:fb:59:4b:a4:86:5d:6f:25:43:
ab:6a:78:8f:b0:0d:04:ce:70:09:6a:fd:60:e4:62:
d8:5a:83:78:3e:3c:af:f4:bd:6f:5f:1a:44:0d:87:
77:fd:4b:02:ec:6c:e2:79:8d:3f:10:d8:f4:24:8f:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:A1:B0:AC:19:1C:4F:CC:91:26:5B:EC:A8:6C:76:40:92:13:C0
X509v3 Authority Key Identifier:
keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:90:84:4c:45:c7:9b:79:c9:0b:7d:22:8a:61:83:70:25:
68:86:bb:ce:df:9d:3a:c9:61:c7:24:d7:ca:f6:b6:ef:a4:18:
8d:86:57:25:5c:8e:9a:2a:27:4c:ad:62:68:53:51:b0:25:8b:
e6:ea:a8:16:0d:d0:a8:e3:de:17:9e:e8:54:03:08:f9:86:81:
81:49:c5:c8:44:db:32:db:9b:9f:40:ac:1c:d1:8d:f7:01:d9:
d2:0d:73:ba:12:c1:00:77:5d:0e:4d:54:3b:62:e1:2c:23:9c:
a5:52:c2:c0:6c:a0:40:73:da:cb:4e:ae:64:5c:ef:7a:79:54:
95:ca:15:e1:0c:01:b1:3a:42:62:62:40:73:b6:7e:5e:5a:49:
c2:64:79:7b:75:3f:68:a7:04:12:ba:e6:d3:24:c9:17:fd:1b:
1d:0b:2b:c4:94:55:f4:52:44:b9:63:94:77:50:63:d8:0c:52:
32:59:f3:c2:06:69:71:f6:c6:0e:d9:cd:bd:a5:f6:0a:64:9a:
e7:4b:f8:ee:12:1c:c8:a9:dd:7c:65:73:33:ce:08:b7:24:9f:
44:0a:40:62:cf:fa:c5:5f:f5:fd:94:9e:4f:56:5e:ed:ac:34:
e6:e7:e2:ec:f9:48:50:95:24:48:f3:55:2b:d7:34:f4:ae:9d:
ea:a5:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:48 2025 by rpki-client