Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier: HUiT5Haw5erIFh3ZQXzD4Pp/JH3NbMnd+u0dT/33Vwg=
Subject key identifier: 55:C5:07:ED:0A:29:0F:EA:45:D0:2B:85:4C:8C:87:4F:AF:59:4B:CC
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial: 0407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number: 05CB
Signing time: Fri 31 Jan 2025 00:33:34 +0000
Manifest this update: Fri 31 Jan 2025 00:33:33 +0000
Manifest next update: Fri 07 Feb 2025 00:33:33 +0000
Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: isyNAhQWrVEd+4jaV+/kdeID6ro4K2gp/f10XSCidNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Validity
Not Before: Jan 31 00:33:33 2025 GMT
Not After : Feb 7 00:33:33 2025 GMT
Subject: CN=679c1a5d-d688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:32:0d:03:64:00:49:02:84:74:7d:8f:f0:
f6:4f:39:18:be:28:85:c4:3c:16:1a:8c:aa:7c:31:
e2:42:ab:8a:78:a4:cd:c3:6b:fb:d3:93:7f:a2:dd:
09:ca:e7:70:b8:dc:4a:fd:50:a2:18:7b:d6:38:0d:
b3:3f:79:e6:a7:0e:f6:a1:bb:a4:25:d4:36:bc:f2:
26:e0:da:07:78:8a:6d:39:9c:53:87:f9:57:3b:5a:
cc:01:dc:0a:ca:b4:0a:c0:02:8f:8d:a0:c9:75:bc:
e4:9a:d9:4b:54:a7:9a:dd:40:27:6e:ec:86:bc:34:
88:2b:68:0a:38:a2:9f:c6:1d:53:3f:0e:d8:4d:85:
e6:a3:ba:f2:3a:33:94:0c:ff:d9:ab:22:21:39:67:
b4:13:d2:17:6d:ab:6d:a3:bd:f2:31:7a:13:a5:32:
54:8a:6a:aa:aa:9f:38:db:ef:b6:7c:2c:40:85:2b:
1a:8f:df:97:bc:22:1a:53:17:b9:f4:30:8d:02:c7:
eb:cf:b7:f8:96:04:98:d0:85:b3:e7:00:f1:e9:60:
32:20:52:51:40:be:83:aa:03:d0:77:b2:98:50:43:
15:e6:02:2a:2f:f5:7f:8d:c7:37:f6:ec:c6:47:17:
bb:fb:f2:c6:fc:c9:03:ed:d5:92:25:89:16:c4:87:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:07:ED:0A:29:0F:EA:45:D0:2B:85:4C:8C:87:4F:AF:59:4B:CC
X509v3 Authority Key Identifier:
keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:2d:62:db:e6:1b:96:35:81:e3:0b:ad:69:00:42:e0:ec:
28:96:cf:29:c2:8e:0d:07:e9:d9:ff:ac:a2:0b:4a:d5:f1:7a:
9a:40:2a:87:b2:58:c5:a7:b6:89:3c:86:cb:b2:f1:49:2e:31:
4e:3f:3d:07:d6:c5:53:8c:37:65:c9:5e:98:02:c8:79:71:68:
ed:99:1a:fa:60:ed:5c:67:7e:bb:0c:72:b3:16:7a:4e:63:fc:
e0:d5:9e:05:33:52:8a:39:96:40:76:7b:0a:6e:d8:6c:90:e5:
ab:c9:b0:bb:2a:a8:80:3a:85:68:8a:59:cb:bf:cd:b1:aa:19:
70:3e:81:84:65:b4:42:34:3f:c3:7b:c8:b0:7b:75:5a:a6:18:
a9:75:fd:ee:cc:95:f6:06:00:4c:82:20:77:47:0f:ed:e3:da:
8d:66:a6:be:58:0c:69:a8:ae:70:23:88:c2:5e:06:42:2f:02:
21:3c:a6:51:d5:81:df:25:99:32:4f:ec:2b:3a:bd:51:ed:94:
5f:46:8f:c3:74:7b:7f:37:08:88:01:c3:c4:93:8e:ab:8c:68:
c8:bf:4e:92:8a:37:f2:69:a7:5e:36:44:3c:0c:b3:73:b2:eb:
40:9a:e4:b8:72:77:f5:cb:33:8e:62:6c:2f:3f:e4:b4:50:83:
4d:f8:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:12 2025 by rpki-client