Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json)
Hash identifier: Ntg7WE6pKxKpqeKDsmxOHsWBA2s2RJPIHoq95M4/WNE=
Subject key identifier: A3:E3:1F:FF:ED:84:D4:C4:AE:75:5C:B5:54:D6:19:48:73:BF:20:EF
Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 14:53:46 +0000
Manifest this update: Fri 31 Jan 2025 14:53:45 +0000
Manifest next update: Fri 07 Feb 2025 14:53:45 +0000
Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: qAp4O4YJ0uM8xVX8ZtE02IeeS+FZt4vnQ/0FqHbJb1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E
Validity
Not Before: Jan 31 14:53:45 2025 GMT
Not After : Feb 7 14:53:45 2025 GMT
Subject: CN=679ce3f9-7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:51:1d:85:d6:7b:d7:c9:05:b2:a4:c8:01:5c:
aa:9a:11:4c:06:31:8d:7d:4f:c4:9f:91:dd:bc:4d:
a3:5b:d1:28:42:4c:0b:57:1f:d5:0a:6b:f8:6f:0c:
62:53:cf:06:bc:fd:77:96:57:0b:60:1b:0b:51:57:
02:6e:23:5d:0e:96:1f:4a:5d:d8:ae:44:36:82:6d:
e0:df:fa:97:d7:49:6d:5c:a4:9f:6a:6a:0f:7e:3e:
af:1f:c2:f3:be:ee:e0:b7:7a:88:6c:cb:4d:f9:8a:
35:15:18:6a:2a:35:7c:85:30:62:61:f9:23:6e:52:
98:c8:f8:a6:65:dc:fa:46:8c:6c:5c:12:d9:5e:5c:
f2:88:be:eb:6e:fe:bd:56:1f:da:ca:61:ce:42:b5:
2c:a7:e9:2f:dc:a9:fb:bd:4e:81:73:d4:45:a0:f0:
70:6c:fa:be:e4:41:11:6c:36:1b:75:93:3f:fc:bf:
db:01:78:84:1c:dd:96:d5:8c:61:a5:ef:35:31:0b:
c2:02:62:db:40:e7:3d:a3:81:5b:dd:92:94:28:9b:
c3:f5:fa:26:57:59:53:dc:ae:17:bd:66:93:ba:7d:
53:b3:37:41:b9:bd:3c:6d:a0:2b:d7:5f:4b:56:ca:
78:cf:51:07:3a:d5:47:61:6e:59:0d:f5:f4:d9:14:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:1F:FF:ED:84:D4:C4:AE:75:5C:B5:54:D6:19:48:73:BF:20:EF
X509v3 Authority Key Identifier:
keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:54:e4:ca:e0:0e:7b:67:ca:46:ef:4e:83:aa:42:fa:7f:d9:
f8:60:8a:6f:8a:28:07:1e:3e:c3:32:40:1e:93:28:53:1d:9c:
98:fc:b7:61:29:59:ac:14:27:83:c9:74:fb:5c:37:6b:72:be:
fc:73:ef:55:55:be:8e:41:bb:47:79:91:66:dd:b7:31:18:62:
cc:59:01:83:75:ea:08:25:07:d1:24:42:62:07:40:a8:25:fc:
7b:ca:97:50:50:5d:ba:20:07:d6:48:f3:d5:d0:8d:cf:d0:40:
db:a1:3d:8c:32:a9:c0:90:e2:6e:6f:7f:1c:d0:5f:4c:f0:4a:
f7:53:f7:39:85:01:e3:be:98:91:4f:7b:3b:25:0a:78:7f:6e:
18:36:7b:6b:76:88:61:8d:63:74:2c:da:85:fc:d9:83:d9:d2:
05:ce:28:85:d3:59:02:1b:20:32:54:53:c2:b9:e4:3a:d6:95:
02:e8:89:c0:1f:21:c2:56:18:d0:9d:6a:03:58:39:f4:fe:8d:
ce:d8:1a:03:9b:1d:17:e3:28:bf:30:2d:21:5b:63:5a:3c:96:
d0:7b:90:b7:c5:4f:22:ab:00:fc:6d:2c:d6:61:91:42:f0:0e:
1d:8d:f7:b7:9e:35:08:f5:d7:65:81:5e:2c:b0:1f:fc:a9:0b:
8c:ba:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:34 2025 by rpki-client