Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier: jb8krbVFB5Tu+Fp1AIY6K/hDGETW1BOZVyNnBE3dlqU=
Subject key identifier: F3:59:2E:2D:78:0C:F5:56:B4:82:44:CB:E0:74:AA:5F:0B:E4:40:2F
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 04:16:03 +0000
Manifest this update: Fri 31 Jan 2025 04:16:03 +0000
Manifest next update: Fri 07 Feb 2025 04:16:03 +0000
Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: Fkth20P/b1msM9HIb2pN3fejhR55hNToeVp620EnqpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Validity
Not Before: Jan 31 04:16:03 2025 GMT
Not After : Feb 7 04:16:03 2025 GMT
Subject: CN=679c4e83-4f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:fc:13:fc:6a:cf:df:08:4f:be:b1:9a:ab:
35:87:2b:79:8f:ce:e8:cd:07:c9:92:b8:64:f0:87:
7c:ca:5a:34:41:4f:6f:84:27:2f:e5:8c:a7:d9:5c:
cb:ec:b4:03:58:25:9a:73:be:44:34:9b:92:f3:f0:
da:04:0a:f1:f3:1a:2b:e8:ee:39:ad:a4:3a:a1:66:
44:d2:fa:96:a1:18:6c:a1:3d:45:61:9b:41:81:2a:
90:53:1e:40:55:d2:5a:55:f1:2a:b1:56:c5:0a:06:
c1:b7:13:49:ea:2a:e2:35:02:7c:d1:48:94:8e:d4:
4a:df:73:ac:80:fc:e0:61:6b:d4:8f:fc:b2:c3:74:
ce:b1:1b:20:17:55:93:a1:6d:62:98:7d:dd:6c:c2:
2b:e6:c6:31:ae:4d:8a:ae:98:44:4e:66:0e:17:bb:
00:27:96:3b:96:62:02:f8:ba:eb:4d:16:8a:b0:02:
f3:1e:e1:72:de:54:70:46:9d:fa:df:53:f4:a4:14:
10:6e:1f:0b:2c:5a:d4:65:6e:63:52:cd:10:54:ef:
b3:18:49:06:54:b3:ab:4f:77:d6:62:b6:25:e8:fd:
7d:9e:e8:58:63:89:73:70:e9:8e:1a:c5:af:1b:b8:
82:86:b9:2b:1b:8c:b3:c6:d8:c4:c7:0c:c2:33:da:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:2E:2D:78:0C:F5:56:B4:82:44:CB:E0:74:AA:5F:0B:E4:40:2F
X509v3 Authority Key Identifier:
keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c2:9b:63:bc:67:a9:ae:a4:bb:47:25:ee:f6:2d:13:b0:cf:
51:be:52:1f:e4:7e:54:71:8d:36:0e:7a:c3:87:a0:a9:bf:e6:
14:7e:aa:e0:62:38:ad:24:eb:56:54:fa:13:c2:88:bb:4f:c9:
33:31:be:11:07:2a:e4:8e:39:b0:03:f1:aa:06:a2:95:c8:90:
cc:9c:5c:1d:9f:65:f6:fa:6e:56:67:89:81:0c:0e:ab:c7:e9:
1a:00:85:17:61:bd:a8:bf:70:41:7d:d2:f7:6e:bd:5d:68:d7:
70:70:0b:06:d4:29:55:46:a2:48:1b:84:ba:93:45:c2:85:db:
63:25:2a:52:ed:c5:7b:12:d1:23:a9:06:a8:fa:25:cd:55:78:
b0:63:dc:2e:e8:dd:4d:47:4b:f3:da:0c:87:1e:3f:b7:e3:e5:
31:0d:4e:59:f7:e4:68:b2:ce:49:e9:d9:66:ad:93:c5:52:b0:
55:6c:d9:95:51:01:61:33:3c:0a:b3:a9:a4:71:c7:e6:7b:e0:
de:45:f3:5e:f9:61:c3:05:e8:2f:b6:65:b3:d2:29:83:5d:b5:
cf:99:9b:49:7a:80:72:be:55:fd:04:d0:02:90:bd:f1:82:94:
3f:67:eb:ca:ee:c4:13:ee:c2:4f:fc:cb:ee:e8:99:89:44:2a:
0a:21:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:56 2025 by rpki-client