
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json)
Hash identifier: Tv/BqyqvWcNUJubYKlXLIR3F8CVdXH9x+WnOmwBBbNE=
Subject key identifier: 90:D3:EE:F3:00:15:71:EB:08:9D:8D:57:18:C8:9B:D0:49:5A:9D:D5
Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
Manifest number: 42
Signing time: Fri 31 Jan 2025 06:28:50 +0000
Manifest this update: Fri 31 Jan 2025 06:28:49 +0000
Manifest next update: Fri 07 Feb 2025 06:28:49 +0000
Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: 7R63BcuExYIqdAMHpfwtF+293m7q+whzX+FQUQbd1Lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
Validity
Not Before: Jan 31 06:28:49 2025 GMT
Not After : Feb 7 06:28:49 2025 GMT
Subject: CN=679c6da1-bc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:9a:b8:f3:3d:20:60:52:ea:78:31:71:ac:
2b:0c:b7:d4:4a:89:18:69:fc:62:46:20:8f:9a:73:
c2:b4:06:84:82:63:e1:48:e8:a9:fe:cf:d4:2d:24:
1a:9f:fd:9a:d6:99:8f:31:39:28:a2:c9:a8:15:82:
6a:f5:00:bb:67:46:8a:0b:f7:1d:a2:af:a7:31:1d:
d3:f8:6b:c7:41:02:99:49:00:fd:63:9d:8b:34:f0:
c8:21:18:51:df:db:8b:d5:a7:bc:ef:c0:13:82:8d:
7b:8f:39:8f:2b:e8:fe:46:31:cd:4e:83:ab:64:e1:
28:93:17:a6:3d:e3:67:3f:17:67:b6:dd:1e:69:64:
ac:76:49:d7:d0:d0:08:91:16:bb:6a:2c:9d:ce:82:
7c:bb:23:4d:50:0c:b0:0b:41:5d:5f:cb:8a:33:59:
79:46:f8:07:8b:6d:f0:25:c2:17:55:64:60:49:25:
17:d7:d5:ae:67:2b:af:47:e5:dd:2f:8a:dc:15:87:
2f:21:84:ed:ef:12:a8:6d:f1:af:ac:4f:c7:95:0e:
e4:4e:97:2b:dc:66:0e:96:1b:0c:4e:8e:7b:5b:cd:
92:a6:97:1a:17:13:74:cc:4a:7f:ea:fd:65:7a:3f:
85:a8:08:e4:42:58:d7:79:a5:76:c5:44:65:0d:09:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:EE:F3:00:15:71:EB:08:9D:8D:57:18:C8:9B:D0:49:5A:9D:D5
X509v3 Authority Key Identifier:
keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:a7:c2:13:c6:3f:6f:79:45:2c:a5:7a:be:10:9d:14:8f:
0c:78:c6:46:bf:44:5f:b8:80:be:2b:52:8e:40:89:e7:d8:c0:
f0:d7:85:8a:31:85:a5:47:9e:a0:27:64:07:57:27:8b:ba:17:
6e:71:84:9c:db:4f:e1:5c:47:20:61:d2:52:57:80:c5:a6:59:
01:bf:9a:46:c2:06:6b:22:8a:2f:d6:9d:d8:7f:db:49:8c:e2:
7f:89:e1:aa:8d:9c:60:ef:48:c8:91:6b:85:d3:54:cb:ef:16:
a6:e5:05:f9:99:5a:f3:22:06:16:d6:e6:a1:57:b1:f8:b7:7a:
4c:1f:76:cd:c4:ae:75:8e:5d:2e:12:a1:aa:17:eb:69:40:41:
80:1b:fa:61:12:b2:db:46:44:66:f9:cb:f6:e2:d9:d4:60:7d:
f2:40:f2:a1:86:c6:98:69:e5:70:73:ed:d8:32:3c:00:26:fe:
d9:63:68:8c:a3:f2:3e:27:75:f8:8c:4d:cf:7f:ea:cc:18:1b:
c9:32:10:eb:c8:98:87:6b:e4:2e:f3:c9:70:f9:f1:52:91:cc:
a0:bf:07:05:0a:2f:d7:3e:a1:84:a2:93:6e:bc:1f:23:ee:78:
9c:26:ef:8e:42:a1:5c:ef:d7:4a:91:36:0d:34:9a:e6:23:1a:
7d:6f:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:32 2025 by rpki-client