Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: pXY01nNr1quhBez1PsOvEpQ/N2FZzmM3RPVZDxYuUPg=
Subject key identifier: 3C:D9:A8:78:C5:19:06:15:F5:55:75:95:CB:D3:7B:EC:55:C2:6E:82
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 01AD
Signing time: Fri 31 Jan 2025 02:26:49 +0000
Manifest this update: Fri 31 Jan 2025 02:26:48 +0000
Manifest next update: Fri 07 Feb 2025 02:26:48 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: P3zIa1w9sejFJClFAG+2wD8jLiRl4vd1j73T+Ej2tLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jan 31 02:26:48 2025 GMT
Not After : Feb 7 02:26:48 2025 GMT
Subject: CN=679c34e9-60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:4a:7e:c1:40:ef:a4:2b:23:57:b5:2a:d3:
ab:cf:fc:10:af:6c:cb:dc:b7:7c:24:1d:73:a5:cb:
e4:8b:09:6b:0d:f7:c3:45:49:67:54:db:fc:42:7a:
d0:49:bb:fd:56:6a:03:33:d0:83:d2:66:9b:69:d2:
60:7f:9b:c9:cc:3d:8a:a1:90:c0:f0:6b:38:3e:04:
63:6b:c9:24:bd:56:c6:7c:9d:f4:ca:dc:da:44:2e:
f4:08:d1:40:04:82:09:3f:f5:98:29:13:3b:0c:68:
2e:f9:75:92:90:5a:be:77:04:7f:dc:8d:c9:13:7d:
b8:73:86:33:98:c4:1b:51:ad:55:65:86:c3:f5:9e:
58:5c:b5:3f:db:3a:5b:86:e4:b3:7a:eb:c6:7d:b4:
cd:d7:e5:3a:c8:8c:70:14:c8:d9:d4:e1:83:8c:b8:
4a:cb:e1:55:ec:0c:03:2e:3a:b1:13:0b:dd:d4:d8:
3b:7e:08:cf:eb:2f:c4:97:fe:dc:39:66:27:8a:bb:
87:5a:98:17:16:2d:46:dd:f6:67:87:72:ff:68:5e:
46:68:9b:d9:ca:76:ad:37:96:88:7a:28:ff:79:1e:
94:68:43:fe:bf:e9:ed:88:ba:7d:d4:9d:5e:00:a2:
7c:e2:1b:c3:5e:00:13:45:68:9f:f9:17:87:be:3c:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:A8:78:C5:19:06:15:F5:55:75:95:CB:D3:7B:EC:55:C2:6E:82
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:44:ae:d0:d6:94:c8:e5:72:ad:99:7d:ba:22:fc:22:50:f0:
51:b2:f3:25:ee:28:a0:c6:65:82:c8:85:84:c0:d3:dc:cf:98:
0a:da:01:50:1a:78:6e:93:66:ba:5e:68:5e:2a:c4:61:a2:d4:
c2:01:3c:6a:62:4e:8f:37:05:b8:c9:e8:b7:6e:93:fd:d2:f2:
8e:87:6a:2d:2b:46:90:7a:24:36:81:aa:00:7a:2b:ff:1f:bf:
50:40:94:52:26:43:5f:06:95:bf:e6:20:f1:53:55:7f:96:9a:
45:b6:17:dd:5e:71:40:fa:6b:ea:a4:89:f9:b4:aa:a2:0c:0d:
6e:42:99:69:5c:a2:b3:7a:35:3a:31:af:8a:48:d1:a6:8f:7a:
ed:87:e0:17:58:d2:98:27:c1:9c:04:71:33:88:85:02:be:7c:
82:f5:7e:bf:88:c2:69:de:c2:ca:3b:56:bd:2e:51:c1:57:95:
f7:4e:6a:6d:e7:70:b5:13:88:7c:c1:5c:71:4d:76:58:a4:c4:
69:d4:c7:f7:a0:2d:a4:b1:1b:33:7a:1f:df:2b:8d:b4:a9:f8:
e4:9a:83:00:57:a5:d0:62:e4:f0:60:37:77:fa:f8:7c:61:8a:
9e:e1:0e:0d:cb:37:6f:07:f3:28:a2:6a:d0:c2:7e:98:be:92:
4b:9d:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:31 2025 by rpki-client