Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft
File: bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft (raw, json)
Hash identifier: giyBQIGjAJSKSeEQJC6KYAv/Jq4MRQ6JbdGTRTcmzkc=
Subject key identifier: C5:BD:AF:CA:7D:D7:71:90:84:BC:91:A3:EE:E7:9B:77:1B:F1:15:9F
Authority key identifier: 6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23
Certificate issuer: /CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023
Certificate serial: 0ADF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft
Manifest number: 0C09
Signing time: Thu 30 Jan 2025 19:28:00 +0000
Manifest this update: Thu 30 Jan 2025 19:27:59 +0000
Manifest next update: Thu 06 Feb 2025 19:27:59 +0000
Files and hashes: 1: bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl (hash: dkdbSV+qn6O3QtEFwtycFrXN9wQ1aTZN1Do/fBa8R7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023
Validity
Not Before: Jan 30 19:27:59 2025 GMT
Not After : Feb 6 19:27:59 2025 GMT
Subject: CN=679bd2c0-a47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:34:a1:f0:e3:44:21:e9:98:83:dd:44:bd:
73:c4:ae:f0:df:e9:39:f6:31:f8:4b:81:93:9c:92:
8d:53:e9:30:52:24:5c:97:45:ab:ff:10:89:dd:89:
61:44:ff:b2:98:ae:e7:93:f3:35:0f:98:d4:69:1b:
ac:36:08:0d:4c:2a:e7:4e:05:dd:90:b4:d7:4f:b6:
88:c7:05:41:f2:91:70:62:d4:ce:88:6a:0d:0a:ce:
a1:66:7c:15:60:6d:00:cc:4d:6b:f5:9f:a5:0f:c5:
17:c3:40:80:3b:7a:56:e9:49:e4:56:0c:24:4f:66:
4b:46:c6:c5:b0:16:44:a8:e6:b8:48:79:14:10:c5:
ba:d9:fb:b0:be:65:25:22:17:77:67:5e:22:2a:6e:
10:0c:95:67:ed:d0:6b:2d:13:5c:36:8b:c2:36:b6:
44:39:03:1d:29:99:f4:d2:8a:86:8d:41:d0:7a:5c:
9a:cd:6c:f7:77:7d:45:52:85:ae:f5:61:ca:f3:26:
49:be:4f:8d:7f:08:15:88:71:14:38:99:8e:af:9f:
dd:85:80:15:6b:b4:e4:92:28:a6:1d:f7:04:4f:9f:
83:06:1f:37:4b:6e:67:44:dd:15:56:10:71:c9:93:
45:42:fc:41:42:95:25:14:d1:71:6e:20:f5:18:f5:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BD:AF:CA:7D:D7:71:90:84:BC:91:A3:EE:E7:9B:77:1B:F1:15:9F
X509v3 Authority Key Identifier:
keyid:6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:23:6d:22:4b:65:96:17:fa:7c:e0:0f:e6:d1:52:c2:5f:ad:
64:f5:57:fc:11:8c:ef:79:c2:ae:40:66:35:02:51:64:7a:c5:
d6:db:9d:de:c3:de:45:86:b5:94:b6:c4:6f:21:c8:62:b2:18:
5d:fa:7d:9f:91:ff:64:97:bd:e0:4a:4f:0a:30:40:c1:72:71:
7b:06:2d:01:66:c7:80:ab:e0:ae:e3:c6:54:5d:50:bf:67:6e:
f9:42:fa:79:05:b2:ba:b0:ee:b9:78:85:0d:a2:52:33:6e:b7:
75:49:28:e4:a4:95:78:b0:f6:0a:d1:0a:55:c4:99:55:f3:09:
7f:7b:6b:7b:1b:af:a3:99:03:51:05:b0:44:f4:bf:a4:58:2e:
de:dc:06:b6:4f:c7:a9:be:ab:19:a1:f0:ea:90:7d:4e:32:70:
a8:fe:66:e5:5f:f3:6e:76:d5:6b:b8:00:1f:80:a0:02:98:17:
83:a8:6c:c3:31:29:00:d7:63:97:fb:f3:48:64:72:7f:21:46:
0c:51:8d:3f:dc:64:88:fd:56:93:92:5e:7a:1b:74:f3:11:8a:
46:78:f6:7d:67:5d:55:da:4b:a8:29:46:ce:be:30:87:d1:67:
41:24:01:e2:cb:45:39:1e:33:84:5b:9f:3f:9c:fa:64:4b:78:
9e:d9:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:54 2025 by rpki-client