Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier: q2K9nyXiAKSR9Bewr7lqFMI5JOIchFIwWxbUtawTaMc=
Subject key identifier: 29:0A:A8:26:8A:4A:33:33:3C:E0:F6:B7:57:3A:FA:3A:11:96:8C:65
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number: 02
Signing time: Fri 31 Jan 2025 14:16:12 +0000
Manifest this update: Fri 31 Jan 2025 14:16:11 +0000
Manifest next update: Fri 07 Feb 2025 14:16:11 +0000
Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: V/VCCWZyZuFQodaLX6lDeZRX6ZggN0Dc+xDH0mb1/A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Validity
Not Before: Jan 31 14:16:11 2025 GMT
Not After : Feb 7 14:16:11 2025 GMT
Subject: CN=679cdb2b-3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:df:8d:c9:9a:cf:9b:63:a1:e1:1d:3a:34:
ef:fd:03:65:1a:63:4d:52:12:98:1e:47:37:23:50:
58:ae:73:7a:7f:fa:81:61:0c:fe:a8:f1:d3:7a:f5:
5e:30:65:56:a5:ff:5d:c0:7b:a2:47:77:4e:6c:60:
0b:30:84:2d:1d:a3:af:90:7c:54:94:3a:f4:fb:65:
c3:2c:7b:1c:31:35:c7:bc:d3:17:b9:9b:19:67:18:
1b:11:fd:f8:ca:8b:c7:e2:58:18:6f:c0:14:f8:d6:
5c:e7:51:2e:81:70:5c:13:12:b8:c0:10:75:99:7d:
34:81:00:8a:3a:74:9b:8b:64:e2:7b:70:04:b6:d5:
c3:e6:dc:67:f3:a9:54:d2:a4:76:bd:33:f7:40:12:
6e:77:f0:69:51:38:2f:2a:af:0f:1f:72:b4:b8:5f:
1c:af:32:54:cb:c4:ce:c4:57:f5:1f:7b:d2:39:60:
1c:86:eb:4e:30:65:ca:fd:5d:0f:ec:b9:74:b8:62:
eb:46:00:c4:d3:e8:69:eb:22:02:9c:c7:f7:2d:ea:
55:85:77:ce:ba:94:12:71:f5:9f:c1:66:33:34:19:
bc:06:97:38:8d:c0:88:38:d8:a8:0f:b6:96:9d:12:
61:d0:af:68:80:71:07:60:ed:50:dd:83:ad:49:dd:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:A8:26:8A:4A:33:33:3C:E0:F6:B7:57:3A:FA:3A:11:96:8C:65
X509v3 Authority Key Identifier:
keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:5a:c4:fc:75:1a:21:d8:ac:67:89:8f:f5:39:7e:05:d5:
d2:d4:81:5b:56:39:e6:ee:2b:24:cf:a6:dd:00:4c:c9:39:d8:
31:5b:3d:14:29:f4:54:64:f0:e8:2f:8f:e6:ee:7f:c6:ff:47:
cf:6f:e0:97:bc:26:b7:0d:78:94:48:87:cc:62:d9:b9:dc:5a:
e0:a4:1e:06:e1:1e:c7:30:61:b4:24:1c:ac:e6:0f:3b:3a:95:
e9:1d:1f:f1:78:26:0c:e0:8e:f7:f6:e8:78:bb:f2:42:b7:9e:
42:7a:1a:0f:a6:4e:a3:7b:7e:f6:ed:0b:f2:9c:e4:27:dc:dd:
61:81:61:a0:17:81:10:8a:a2:aa:82:fd:6e:7b:29:98:d1:0a:
03:7b:70:a8:5b:80:7e:d6:58:a8:2e:8e:6a:4b:24:8a:13:7e:
ab:3a:98:43:00:f0:2f:b2:64:e5:09:42:73:79:4f:fb:fb:3e:
bd:f8:9b:0a:8c:cd:57:42:a8:17:78:64:07:27:a2:7b:a7:dd:
9f:67:ef:11:83:bf:0c:51:a3:c3:5a:41:b0:e8:3b:7e:7d:bb:
74:cd:60:89:77:8a:8b:56:a7:61:ca:72:d0:b8:eb:7b:d6:28:
f6:35:bf:28:4b:de:25:3e:fd:38:f1:d5:90:28:8c:03:db:39:
58:a6:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:11 2025 by rpki-client