Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json)
Hash identifier: nudKMUAKbUyr2+Knc6DomEGcD5CscbF8dCd/07B89G4=
Subject key identifier: F6:51:0F:21:EA:FA:34:F4:C2:22:0C:9E:0E:91:84:95:9C:35:38:FF
Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Certificate serial: 046E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
Manifest number: 046E
Signing time: Fri 31 Jan 2025 00:09:00 +0000
Manifest this update: Fri 31 Jan 2025 00:09:00 +0000
Manifest next update: Fri 07 Feb 2025 00:09:00 +0000
Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: G2qw9t2c2RVchhFwJupuGYAHP6jAY0mxG5J03I6nVKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Validity
Not Before: Jan 31 00:09:00 2025 GMT
Not After : Feb 7 00:09:00 2025 GMT
Subject: CN=679c149c-3f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:5b:48:e7:48:d4:49:eb:d3:74:90:e7:75:
b0:f6:4c:9b:52:c0:43:9b:9b:73:09:9c:b7:a1:df:
46:1b:6f:2e:4f:19:c9:32:93:6e:ab:c2:fc:76:5c:
28:72:d7:96:ff:01:19:3a:b6:dd:d2:52:4e:fc:04:
47:df:ab:e7:0e:8f:db:c2:f5:76:50:75:38:92:f6:
ae:6a:0b:23:f3:bf:49:94:35:b0:d6:0f:c2:41:18:
6c:44:ca:e3:e4:56:c2:69:f6:64:13:bf:1d:0b:4c:
36:af:54:7c:a6:65:ad:4f:d6:51:e3:da:ed:3c:a8:
89:98:3f:90:48:dd:1f:1b:a3:66:21:a8:dc:b6:da:
71:df:04:53:44:75:11:ff:a1:30:fe:ae:93:a0:ad:
42:e8:a3:a1:75:40:84:67:d8:bb:f9:ea:ac:d0:87:
34:60:f3:0c:43:89:a1:7c:84:00:7b:5f:b4:81:62:
4a:54:bf:db:ce:18:1e:ec:93:1e:49:45:d4:be:41:
45:d5:b5:22:e1:6b:78:01:95:30:66:a7:19:1f:35:
c6:9f:e8:fe:a3:ac:78:33:e5:9d:e2:4a:fd:72:c9:
51:00:fe:da:7f:33:2e:05:71:44:d8:99:2a:e8:f7:
6e:9c:31:51:dd:4d:ec:e6:11:de:14:c1:bd:ae:87:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:0F:21:EA:FA:34:F4:C2:22:0C:9E:0E:91:84:95:9C:35:38:FF
X509v3 Authority Key Identifier:
keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:43:8a:2e:81:2b:1e:8c:1c:b9:ed:8b:d4:fd:47:e9:19:
53:37:5b:f8:9b:8e:aa:c2:b8:51:c0:f8:d2:5e:8a:43:5d:e3:
4a:2f:20:e7:1a:43:f7:fd:a6:ef:aa:5a:f3:50:2f:55:c8:7c:
9c:8d:62:e4:72:23:ce:c1:c5:6a:0b:99:d6:bc:7d:31:7b:cd:
2b:c8:52:53:f6:11:dd:cd:ee:d0:bf:a0:b6:e6:c8:a1:cb:63:
32:1c:07:1f:30:1b:d4:ad:b6:99:c1:c1:80:8d:2e:71:36:7e:
40:ab:b1:3a:fb:51:b1:8c:3c:18:7b:ce:d1:2c:be:37:09:4f:
c2:dd:f8:ab:c8:4e:92:1b:8d:5b:89:e8:d7:98:ec:17:9b:fb:
1b:17:2e:9f:99:d3:4b:a3:4a:89:85:65:f8:da:58:df:23:4a:
fe:7b:4b:1e:9d:0a:24:45:dd:b8:19:07:d5:bd:62:a3:31:e7:
b5:29:03:b1:2c:58:7f:c4:87:f2:54:07:bf:fc:81:8e:96:77:
77:7e:a4:47:3e:7e:58:b8:23:ab:af:92:0b:a4:20:de:f3:6a:
35:03:b8:44:09:f9:54:ec:0f:e5:75:82:47:ba:d0:db:0f:99:
e0:45:14:01:01:9e:03:bd:ce:f5:5a:03:1e:b8:1a:96:58:51:
e7:31:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:55 2025 by rpki-client