Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File: dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier: lawiD/IZNt9vvAdXgPmN4AfePXB/Pw/775VIWF8AckQ=
Subject key identifier: 36:72:20:33:3A:01:AE:84:99:B2:F4:76:36:35:BD:6D:D3:23:11:28
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer: /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number: 05CA
Signing time: Thu 30 Jan 2025 23:03:45 +0000
Manifest this update: Thu 30 Jan 2025 23:03:45 +0000
Manifest next update: Thu 06 Feb 2025 23:03:45 +0000
Files and hashes: 1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: FyMvkWAVPui6ti5nsCzIUBj/Ron9q5LeaZ1E1+F1VZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Validity
Not Before: Jan 30 23:03:45 2025 GMT
Not After : Feb 6 23:03:45 2025 GMT
Subject: CN=679c0551-f3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:6b:e2:78:98:68:1c:d3:a5:a8:3a:3c:a0:
88:05:5d:28:af:fd:10:b7:06:ed:7a:25:1c:ff:39:
8d:b2:9c:4b:4f:44:95:71:b6:8e:e8:45:93:e0:d9:
88:9e:7f:49:19:8f:c6:e1:02:8b:ba:68:ba:0b:fd:
65:4a:b8:02:be:20:f3:39:14:13:7a:a2:d8:21:62:
87:a1:29:9b:ac:3f:36:37:c2:ec:9e:d5:3e:36:3a:
0e:a6:fb:15:6d:93:11:1b:cc:ea:16:22:5e:5c:bb:
cd:e7:21:3f:43:c0:ec:f3:96:b0:71:c3:15:f6:cb:
c3:b1:41:dd:09:c9:f7:cc:13:5f:4c:05:21:ab:bd:
4b:6b:d8:35:1f:ee:92:72:60:a0:b7:4f:1b:e2:f2:
17:61:65:7a:09:00:c0:ad:70:21:ff:16:72:73:a2:
4c:48:cb:ae:63:9d:ae:2e:dc:72:73:0d:96:72:73:
b8:c0:b1:21:28:7f:6f:09:f5:95:79:20:10:c6:3e:
ae:11:f5:e9:84:e7:87:70:20:73:13:91:1a:03:e6:
59:c5:33:b2:1a:70:40:24:2b:b2:8d:ea:f3:c0:bc:
a6:23:6a:3b:ef:b6:cb:64:a0:30:23:ef:58:ae:2f:
f0:f0:23:34:28:64:12:20:36:1a:c5:ae:12:8d:a9:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:20:33:3A:01:AE:84:99:B2:F4:76:36:35:BD:6D:D3:23:11:28
X509v3 Authority Key Identifier:
keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:66:b5:32:9e:81:48:64:03:ca:ea:dc:f7:f4:64:1f:18:a8:
06:1f:52:4c:5a:10:59:4d:20:b9:4e:aa:f1:e9:8a:f3:6d:40:
b1:16:13:f9:ce:03:d1:47:0f:ff:fb:80:a6:86:b9:64:8b:5a:
07:1c:1b:ca:f3:aa:1f:9a:7f:56:16:38:ed:cf:e7:fb:27:49:
4d:cd:67:89:96:c7:70:16:4f:8b:e0:65:c2:f9:cc:59:02:c7:
af:a1:56:8e:fa:13:cd:a2:bf:ec:eb:66:8e:c0:93:45:e2:37:
6b:2b:5d:29:45:2d:23:43:27:f5:4e:b0:e0:dc:53:ca:21:97:
02:e1:6c:c2:c9:40:1d:bc:aa:59:38:35:f5:97:b2:51:09:d3:
26:3c:9e:c9:2c:52:a5:95:6b:7d:b8:a8:25:1a:28:cf:70:8f:
4f:b8:f3:cc:fa:d2:69:64:0c:28:c2:c7:5b:fc:05:d8:9c:4d:
d8:a3:25:00:50:be:db:27:5b:02:24:15:8e:b5:cb:17:c7:8b:
87:28:c8:22:1c:26:3f:64:a7:0c:f9:17:c2:00:32:14:b6:c1:
1c:b7:a4:91:77:46:45:60:71:9e:58:7d:ca:c1:d7:cc:66:96:
dd:ad:9e:85:0e:f8:89:dc:16:f9:fc:d2:c4:09:7a:fd:e0:f4:
1d:69:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:57 2025 by rpki-client