Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json)
Hash identifier: nU4dZ2mi1w/S1OWAqWTuPP/hpRRMzrsi+TiY68NPxvk=
Subject key identifier: 02:39:18:05:4F:F5:5E:CA:63:30:B4:09:5C:5E:4C:41:89:E1:6F:0D
Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
Manifest number: 02BA
Signing time: Fri 31 Jan 2025 02:03:01 +0000
Manifest this update: Fri 31 Jan 2025 02:03:01 +0000
Manifest next update: Fri 07 Feb 2025 02:03:01 +0000
Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: aTeeG7RVMqiGH6kppkjgJ7ddjSbuokR6ugF2eqGrF4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Validity
Not Before: Jan 31 02:03:01 2025 GMT
Not After : Feb 7 02:03:01 2025 GMT
Subject: CN=679c2f55-da18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:d7:0d:b1:14:c1:24:b3:b7:5d:a5:24:0c:
56:c4:1b:ed:99:f8:7a:fe:0d:07:b2:71:67:f8:42:
4c:77:aa:55:79:12:2f:d1:e4:d9:b6:fe:19:17:07:
c8:13:a2:c8:2c:58:6c:cb:22:f2:2c:38:cd:6c:ff:
92:f4:9f:16:80:32:53:76:5d:a4:80:00:de:f6:a2:
c8:81:67:a2:81:49:69:b3:ee:16:3c:e7:ca:af:54:
a2:d7:95:e0:97:6c:7f:1a:1a:b3:55:ff:bb:8e:fb:
a5:52:f2:8a:42:df:ef:10:46:0e:03:d1:f8:43:bb:
fc:ac:9c:03:a3:01:f4:2a:bc:f1:10:79:ae:8d:59:
25:47:0c:89:ec:31:d7:bb:e8:e5:d4:e3:d9:fc:14:
9d:f9:9e:14:47:91:25:47:e6:4a:cd:31:70:2c:07:
6c:d1:d3:b5:89:65:b6:8d:81:56:17:21:79:cd:49:
6f:cb:04:b3:c0:84:01:bd:f6:5a:73:ba:f3:86:e2:
bd:63:72:7e:91:9f:66:f9:00:5d:d4:07:ed:c5:0d:
1f:7e:9c:be:66:d1:f7:40:4b:a7:25:5e:40:6c:67:
e9:c9:39:a6:53:d8:11:8f:aa:4b:1e:03:0f:cf:64:
95:ce:03:5c:44:6b:6b:d5:02:f0:d3:70:a8:2e:ed:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:18:05:4F:F5:5E:CA:63:30:B4:09:5C:5E:4C:41:89:E1:6F:0D
X509v3 Authority Key Identifier:
keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:f2:2f:6b:39:d4:1e:07:3d:c6:f7:4d:b2:99:da:9d:f4:
60:78:53:67:d0:da:f9:5d:e1:bd:a7:8f:3e:3f:98:5e:c0:71:
eb:2e:d0:62:03:a6:ec:1b:ca:23:3a:91:60:07:70:7f:71:fe:
31:e7:35:30:44:20:89:0b:54:6c:91:e9:e3:51:3d:ba:7a:b4:
f8:bc:1e:92:fa:29:6c:62:68:2c:38:92:65:ad:2e:5e:a3:f7:
65:a9:5c:cc:a3:b8:21:3c:13:9d:ed:d4:62:f7:1a:1a:46:3d:
ec:59:64:9e:48:b5:ca:76:06:8a:f4:32:08:bf:e1:37:7c:a6:
4c:9f:6b:d5:b0:79:bd:ef:bb:53:46:44:ee:2b:46:0c:71:43:
61:38:65:92:44:a1:be:eb:22:14:2d:a8:f3:8b:d5:fe:20:95:
b7:14:0f:3f:50:ba:a0:68:7c:5e:77:ac:ef:d1:bb:06:dd:84:
7e:6c:99:a3:d8:da:01:90:fd:8e:08:3d:77:e1:ab:31:a8:a1:
50:6a:49:1b:55:79:d4:14:db:4d:af:2d:e5:b7:8c:e9:dd:20:
0d:1e:b6:17:81:ed:c4:90:25:aa:2c:d5:04:d2:f1:6f:69:c5:
15:51:eb:98:67:7d:84:46:26:64:16:e0:c7:66:76:02:84:4c:
d1:f3:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:10 2025 by rpki-client