Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
File: 1ppgVl8zchSc5uL8nnI9SQZ2doo.mft (raw, json)
Hash identifier: n61H8IpFB2UXen9Y4ZdDhMVfc9dojFSH4lj/fHB/93k=
Subject key identifier: D2:B2:6F:72:D5:B9:F0:FB:07:40:DC:C6:3B:AE:1C:54:0E:8E:69:F7
Authority key identifier: D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
Certificate issuer: /CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
Certificate serial: 3447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
Manifest number: 3447
Signing time: Fri 31 Jan 2025 15:02:13 +0000
Manifest this update: Fri 31 Jan 2025 15:02:12 +0000
Manifest next update: Fri 07 Feb 2025 15:02:12 +0000
Files and hashes: 1: 1ppgVl8zchSc5uL8nnI9SQZ2doo.crl (hash: 5fodRBB2nyNOEQOKbfq88aEqJAePbCtQaNJGxNIOMic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
Validity
Not Before: Jan 31 15:02:12 2025 GMT
Not After : Feb 7 15:02:12 2025 GMT
Subject: CN=679ce5f4-2fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:29:9f:f6:2b:8e:f4:1a:43:f9:a7:65:2a:
55:df:aa:22:2e:bd:8e:07:01:96:8d:39:78:27:c6:
44:a8:14:6c:3b:62:2f:53:93:02:f4:27:b7:1f:a4:
60:a9:c3:9c:fd:99:72:f6:24:9e:24:ef:ff:88:d4:
88:e3:65:fa:97:ef:9a:40:9d:60:50:6b:12:2e:ab:
fa:92:c2:77:f8:04:63:f4:28:af:02:70:ac:58:77:
5f:58:ee:48:e1:8e:5c:62:3f:5a:05:70:cd:94:46:
f2:f1:fc:d4:be:a7:2c:48:b1:70:f0:8a:6a:e0:2a:
c4:aa:6d:16:db:3c:9b:1c:25:70:eb:b5:0b:1e:a0:
ff:b7:14:1e:15:eb:35:3b:ff:0c:24:6a:2c:de:a8:
86:e8:46:30:07:1c:d9:a9:48:f9:28:b3:fa:27:bd:
cb:e5:df:01:48:b3:4b:0a:60:14:c1:6c:d0:54:a6:
31:4c:94:0a:73:f8:40:1a:fc:a9:f0:4e:9b:dc:00:
cb:5f:76:bd:7b:4b:e2:b3:e5:68:78:43:49:53:a0:
65:f2:df:74:9f:2d:1a:e3:b5:e3:3f:7a:30:b8:7b:
78:94:9a:be:bb:3f:b5:11:5b:88:df:89:f7:18:f9:
ac:65:65:1e:d0:86:28:88:3f:1b:5e:f8:cb:25:6c:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:6F:72:D5:B9:F0:FB:07:40:DC:C6:3B:AE:1C:54:0E:8E:69:F7
X509v3 Authority Key Identifier:
keyid:D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:a5:42:0c:84:21:3d:4b:eb:61:56:97:37:5e:f0:2b:10:
69:f1:62:3a:df:dd:68:f5:b3:f3:bc:71:30:c2:91:c3:51:38:
c7:a8:88:3a:f4:ba:20:7d:d9:7e:47:e8:c0:8e:61:bb:f3:b9:
f7:df:76:8b:01:de:9e:f2:9e:2a:71:8c:c6:69:0a:9a:3f:08:
64:01:81:b0:de:1f:c9:33:71:cc:27:07:6e:bd:c7:70:75:8e:
e3:4e:62:d2:2f:4c:d2:f9:64:a4:58:ea:5b:91:0e:a3:17:62:
63:34:6d:31:b1:94:08:52:3d:d0:89:b4:c2:ec:ac:4c:85:56:
d9:91:3f:f9:e9:ad:fc:ac:b4:44:e8:0f:f7:16:f7:b4:6c:9b:
b3:7d:61:60:83:e6:42:24:18:54:20:33:e9:07:0e:0c:62:76:
fe:78:e0:e2:95:9f:6f:77:85:5f:dc:66:2e:e1:a0:e3:80:b1:
90:0a:d9:ee:5e:09:bb:46:66:c9:5e:68:c6:df:98:1b:29:5a:
ef:48:22:6c:41:aa:ba:6b:90:15:0b:53:45:17:d8:e8:aa:25:
df:0e:af:e2:1e:24:00:96:d7:6a:ac:8b:d7:7a:25:6e:47:d0:
62:fc:75:27:51:5f:90:5e:ed:42:e5:71:c9:10:25:5e:7c:9b:
84:00:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:52 2025 by rpki-client