Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json)
Hash identifier: K0n44KXeJaUJ7GOlkanmGMc8X1CZouQZ4OQpIXjhNh0=
Subject key identifier: 8F:19:B5:49:8F:96:5D:24:85:F9:14:D1:1A:63:3F:20:2B:50:DB:04
Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
Manifest number: 3446
Signing time: Fri 31 Jan 2025 14:41:52 +0000
Manifest this update: Fri 31 Jan 2025 14:41:51 +0000
Manifest next update: Fri 07 Feb 2025 14:41:51 +0000
Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: BgNmKS8u28W3Sqq8vfaw8E1XQccEbCJKv2BV3pbkeb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Validity
Not Before: Jan 31 14:41:51 2025 GMT
Not After : Feb 7 14:41:51 2025 GMT
Subject: CN=679ce130-c216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:5d:51:75:60:df:e1:95:e1:b9:3b:0d:e1:
17:70:ea:40:4b:e0:7a:6d:2c:c2:8e:be:36:31:e5:
d4:d0:64:32:19:06:c2:81:ff:b8:84:6c:78:b4:80:
81:6a:78:b9:ed:ae:9e:8f:55:d3:4e:ac:df:19:84:
dc:27:3a:75:8b:9d:82:25:e4:71:79:c1:6c:d6:e4:
c6:81:a4:21:fa:13:5b:52:64:f4:a5:21:89:6a:79:
55:a3:8e:f9:85:50:47:de:7a:ee:8f:1b:20:cb:cd:
0e:eb:01:c6:9d:99:01:83:16:94:3b:43:50:67:b2:
c1:94:dd:f2:db:14:63:41:c0:7e:ae:82:3b:8d:4f:
35:08:84:bc:1a:1c:13:47:00:57:06:29:58:93:a3:
b2:ea:a8:c3:c5:83:19:e3:56:bf:42:66:1b:f6:f7:
0c:9d:86:ef:1c:20:5a:a7:4b:9a:8e:dc:17:1e:65:
c5:60:01:a2:79:72:61:c9:13:26:5c:85:a7:57:31:
c8:3a:b6:3e:d4:c1:04:ae:05:79:5c:64:ef:78:54:
61:45:b0:a4:66:55:3e:c6:18:10:9b:b1:31:4a:1a:
79:e6:ea:ac:40:02:37:44:c0:c9:92:76:17:d5:c2:
79:e4:a8:9a:78:59:d1:08:41:45:be:e2:00:ed:15:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:B5:49:8F:96:5D:24:85:F9:14:D1:1A:63:3F:20:2B:50:DB:04
X509v3 Authority Key Identifier:
keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:c7:22:20:bd:3b:be:a4:da:6c:da:20:a3:6d:ef:e4:e8:
2f:ab:31:bc:6e:17:54:14:4c:f1:85:3c:c5:5e:12:da:a8:d5:
bf:4e:84:2c:17:09:6e:1d:2d:d9:55:12:80:4e:46:aa:cd:0e:
6d:05:cb:74:96:96:af:82:80:88:c1:d4:da:93:fe:60:be:91:
62:d8:b1:81:1f:8b:56:c5:8f:e0:82:a9:ed:11:70:cb:31:e3:
ab:0b:3b:29:4b:29:51:4e:ab:f3:76:bf:59:41:3e:dc:cb:1a:
01:52:9b:8c:bc:2d:68:74:7c:21:51:ed:7f:37:e8:17:38:cd:
26:19:7d:af:da:17:91:ed:2f:8d:bc:86:91:32:69:2a:e9:cd:
4d:35:4a:43:6e:fa:85:87:48:ee:ec:32:bd:80:e8:40:ec:a3:
28:80:e0:63:30:e8:8b:73:2c:69:87:61:5c:9e:05:57:3b:c9:
49:51:4f:15:5d:06:9c:fc:43:22:7c:63:34:1e:ad:65:2e:0b:
7e:0f:ef:10:e8:b2:6c:da:3c:48:15:a9:23:0c:f3:36:41:a9:
ba:d7:a2:05:bf:b8:50:82:5f:44:56:5a:85:92:aa:74:5e:db:
a2:fc:a1:7e:73:d5:85:af:1e:96:ee:72:63:f4:f4:10:73:6e:
4e:e1:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:15 2025 by rpki-client