Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft
File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json)
Hash identifier: rnLyp0GzpmYCebZ8UCSXlymZSdlSuXTE9rCmQ5IMC2Y=
Subject key identifier: 4D:3B:A9:92:1D:E6:D9:2E:F2:77:80:8A:74:E3:04:CF:12:29:5F:AD
Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C
Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C
Certificate serial: 2734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft
Manifest number: 270C
Signing time: Fri 31 Jan 2025 15:40:56 +0000
Manifest this update: Fri 31 Jan 2025 15:40:56 +0000
Manifest next update: Fri 07 Feb 2025 15:40:56 +0000
Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: jBCCkdz+V4+Rnfi9BE2/Hlbfi0zyBV2mdih9JbPZ0ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10036 (0x2734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C
Validity
Not Before: Jan 31 15:40:56 2025 GMT
Not After : Feb 7 15:40:56 2025 GMT
Subject: CN=679cef08-ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:56:9d:a9:7d:85:85:c5:bb:cf:f5:27:80:
78:b6:61:8b:f7:d9:86:c6:6f:3f:99:85:9b:a9:c3:
01:0c:e5:f9:c1:5a:f0:33:ed:ed:3f:09:4e:82:5b:
d1:1d:a0:50:4a:7b:c5:a0:67:14:b1:58:5e:b5:b4:
e1:0e:74:f6:1e:57:d8:7f:a5:ea:7b:d3:50:bd:e6:
66:ac:00:36:69:83:c0:16:f2:61:08:9a:51:e1:f7:
bf:f1:14:c9:91:1b:3d:bf:c2:12:6b:b5:85:e1:b9:
25:4c:7f:fc:54:6c:bb:cd:f1:51:41:73:b6:51:f1:
8d:99:bb:d9:94:f3:97:81:1b:a1:52:9d:70:99:2b:
95:4c:3d:59:01:64:3c:3c:b9:9d:0c:81:d7:3c:d4:
fe:80:85:cd:f7:9e:37:f8:52:d2:e4:68:82:1e:d9:
e8:90:3c:e4:74:fb:88:86:b3:f3:70:35:51:d0:a0:
7d:bf:9d:04:81:6c:60:3c:13:fe:4f:c9:a7:58:09:
00:78:9c:54:e1:28:c0:a1:b3:24:dc:44:03:7f:db:
9a:60:ab:31:a9:91:79:0f:74:14:10:bb:e0:87:29:
ff:07:86:d2:97:3f:8e:26:a9:cd:ee:17:0d:f0:44:
b8:9b:73:34:d3:78:b6:01:a4:83:de:30:ff:22:93:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:A9:92:1D:E6:D9:2E:F2:77:80:8A:74:E3:04:CF:12:29:5F:AD
X509v3 Authority Key Identifier:
keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:32:b8:ca:a0:2e:7c:c1:03:47:4b:0f:01:fd:6f:c6:9a:0f:
1f:14:69:8b:17:c4:aa:35:7c:7c:81:d9:c0:ce:8c:19:f1:32:
e7:0a:5b:db:6c:e7:0c:3f:da:c3:b5:43:e4:a5:e7:86:ca:fb:
07:43:1e:fa:52:5f:d5:aa:85:fe:55:5e:a8:f0:3e:8d:e7:58:
06:34:f2:f3:1e:d9:8d:7e:a2:54:b8:ef:3b:1a:75:5b:74:e8:
46:4e:38:05:63:e6:5e:53:6b:be:5b:f7:e3:00:95:04:f3:41:
5b:be:5a:7b:70:0c:b0:65:3f:0a:b1:3d:a9:68:fa:24:45:a8:
b4:ed:a3:13:fe:b4:e9:54:21:97:c9:04:b8:9f:e8:58:19:f9:
75:13:e2:47:41:b6:26:cc:89:bc:43:62:f9:99:03:b8:b2:d1:
3b:9f:e5:1c:c9:75:40:2a:d9:d4:96:47:c8:07:73:8d:cd:e9:
b5:16:fa:9f:4e:d5:27:ec:89:15:ec:90:a6:3e:f9:93:93:d8:
3b:2f:4b:e6:47:0f:3d:24:23:cb:b3:8f:2a:c2:84:ad:90:60:
78:1b:55:0f:01:0e:4b:66:b9:78:86:22:7e:31:5d:9b:f4:5d:
89:fc:b4:97:64:69:86:2c:6f:47:24:60:6b:b5:fc:e1:dd:bb:
86:44:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:08 2025 by rpki-client