Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
File: r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json)
Hash identifier: URxDE8J8XkP5qnc3aMHys9TVeVDgo7cEVWgcMgxEa3U=
Subject key identifier: CA:EE:28:2D:B2:C8:2D:B2:14:4C:2B:21:B2:92:6D:11:36:68:17:A5
Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1
Certificate issuer: /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
Manifest number: 47
Signing time: Fri 31 Jan 2025 06:24:54 +0000
Manifest this update: Fri 31 Jan 2025 06:24:54 +0000
Manifest next update: Fri 07 Feb 2025 06:24:54 +0000
Files and hashes: 1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: 73vz4BmWNhjrcucwdzCW1b4YOCSmPMKkb1fk//UrrPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
Validity
Not Before: Jan 31 06:24:54 2025 GMT
Not After : Feb 7 06:24:54 2025 GMT
Subject: CN=679c6cb6-e586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:10:8c:ce:ba:b9:99:13:cc:ca:bb:20:81:
04:fc:10:d4:73:74:37:4d:7a:72:2f:39:4b:4a:6d:
c4:c2:82:c9:c5:39:8b:d8:18:1d:96:69:40:d6:8e:
39:b5:23:ab:ba:f3:f8:b9:85:9a:2d:36:cc:32:a2:
08:73:82:41:a0:f3:74:84:d2:ae:cf:3a:eb:d8:da:
fe:b0:ec:d8:25:f0:05:60:04:15:b6:85:08:22:d5:
63:e2:65:91:f9:3f:64:75:d7:41:c0:93:bf:4d:10:
93:98:72:eb:cb:19:79:28:85:c8:51:1d:b0:0f:e3:
cf:94:e7:d5:fd:83:58:36:32:37:bc:42:6e:17:e6:
9f:13:9c:7f:ca:a0:e7:9e:26:1a:36:24:fa:04:76:
0a:e5:da:59:3f:fc:85:1b:46:05:99:7d:bf:79:5a:
a9:f9:10:a6:46:51:e0:b2:09:2a:2c:d8:70:64:ec:
06:76:36:12:36:23:9a:2c:05:c1:0a:43:9b:b1:3e:
fa:6e:49:d6:6e:61:a7:51:50:1d:3d:bd:2f:a8:77:
08:82:ed:f7:e2:fb:03:db:a5:a9:1f:7e:37:a7:6d:
c0:37:e0:3b:60:95:63:cb:fe:fb:50:45:91:4a:3b:
48:5e:ac:c0:56:f5:ca:8d:22:c8:17:00:34:2c:61:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:28:2D:B2:C8:2D:B2:14:4C:2B:21:B2:92:6D:11:36:68:17:A5
X509v3 Authority Key Identifier:
keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:88:32:be:7b:60:81:e7:f7:3d:21:f5:00:61:87:3d:83:09:
bc:e6:e2:36:33:51:d7:6c:7e:8f:55:53:e5:5f:59:3f:1e:c0:
1e:18:f2:2f:6f:1d:1e:69:fa:ed:7d:60:22:94:ea:03:00:84:
42:49:14:00:8d:31:d0:e3:4a:73:82:3b:89:a6:98:08:3c:11:
11:47:61:fc:d3:db:a5:72:9d:e6:2b:3d:7a:91:64:c8:41:1b:
cd:3c:c4:f2:c4:73:ae:34:28:7b:0a:57:01:88:1a:9a:75:f3:
e4:a7:5a:e4:04:d4:32:76:86:ff:60:21:eb:2e:63:e2:ad:a0:
55:28:83:bf:b3:24:03:d8:b7:86:38:5d:20:ea:fa:27:e1:9a:
c2:8e:44:f5:be:ee:2b:d5:f6:51:72:7d:2e:45:a6:93:1f:1e:
0f:e8:08:55:54:f1:4f:16:ea:f1:6f:53:e0:4e:4d:58:e2:24:
75:70:8c:20:ba:f7:04:19:2c:c9:0b:52:0c:0c:ab:85:a4:f0:
78:b0:83:4e:e9:2c:7a:86:1b:98:4d:8b:f5:04:8c:5e:61:bc:
32:72:f3:cd:e0:fd:12:7b:b2:63:6c:46:1d:b3:d8:31:79:22:
9d:05:5f:a0:38:67:97:8a:7f:6e:25:3d:9f:b4:63:d3:0d:a5:
75:94:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:50:15 2025 by rpki-client