Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json)
Hash identifier: WXAcHHyR4znoZkXuRLtJcaP0XEqMUJJ0YQqFCDDmqGo=
Subject key identifier: 4D:9D:ED:61:0F:A0:C7:BC:1F:61:E3:07:1B:AA:76:16:68:75:A2:65
Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 00:39:28 +0000
Manifest this update: Fri 31 Jan 2025 00:39:27 +0000
Manifest next update: Fri 07 Feb 2025 00:39:27 +0000
Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: AzIKgFx9T5HyQvRdusWblwuf9p/DzTo1qwFEXpj54hc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Validity
Not Before: Jan 31 00:39:27 2025 GMT
Not After : Feb 7 00:39:27 2025 GMT
Subject: CN=679c1bc0-2456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:ea:c0:c3:fd:c1:f3:af:1f:71:27:20:d0:
a1:ef:7d:1e:f1:73:c4:93:44:fe:25:ba:5a:9f:72:
09:9b:40:4c:1b:53:b5:bf:ea:f1:31:75:df:97:25:
50:ab:51:48:58:98:0a:2a:29:3f:79:27:6b:b0:99:
a5:b4:82:9f:68:bd:1d:e1:76:1d:08:a9:3c:ca:d2:
9a:1d:2c:66:6d:a1:55:7a:85:1e:43:6d:d2:c3:a6:
23:40:76:50:b2:28:5c:74:bd:8c:20:db:ca:9a:5f:
0d:88:17:6b:bd:58:32:1b:86:36:ec:38:d3:04:16:
dc:93:6f:3a:0e:79:d1:e6:0a:c0:40:99:fd:c4:1d:
7c:68:9e:b4:ef:64:96:e1:24:9f:7e:3d:de:fe:c3:
0d:06:5f:e6:d6:55:5b:d2:44:57:10:b4:18:bf:a7:
7f:51:c6:85:b4:21:5e:2b:65:49:75:61:1a:77:f6:
b0:eb:57:81:b1:66:2c:c4:34:62:d1:4b:db:bd:3b:
1e:36:78:96:97:d3:58:5d:61:07:2e:31:b5:51:2b:
31:d1:92:fc:05:d3:77:50:fd:72:ab:44:8b:1a:b9:
a3:00:30:34:bc:79:13:95:7c:49:eb:03:57:d3:b2:
22:b4:ca:4f:c8:20:83:d4:0c:1e:c6:61:92:3f:a4:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:ED:61:0F:A0:C7:BC:1F:61:E3:07:1B:AA:76:16:68:75:A2:65
X509v3 Authority Key Identifier:
keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:4c:4f:03:51:bc:7e:b6:5e:3c:31:b0:04:2d:c4:d5:4a:
a5:e8:0b:84:64:69:d4:a9:cf:c3:5c:86:d6:26:03:95:4e:a8:
8e:42:1a:7c:76:04:10:2c:ae:a2:93:a5:9d:ba:88:10:35:ca:
8c:e9:20:fa:05:76:75:ed:a8:3b:7b:7a:c6:c7:90:38:78:b0:
04:73:bb:55:f3:60:32:ba:6f:d1:7f:a7:ca:8b:39:f0:5d:19:
7c:b1:bb:8a:c6:4f:24:c8:ae:82:b1:e1:fc:3d:22:96:b0:cb:
50:4e:0e:f4:94:c9:bd:88:ae:21:3e:c4:61:ef:e9:37:21:4a:
67:0d:8e:04:ae:0b:43:44:28:ab:25:67:9a:bd:f6:33:bb:90:
1d:dd:d0:88:d2:2c:cc:8d:3b:ba:8c:74:36:06:0d:86:8f:02:
56:bc:95:a6:f9:5b:29:78:3c:90:19:08:d5:bb:b6:c5:fc:de:
53:a6:a8:7c:e1:b1:b7:02:d6:fe:41:c3:24:8b:37:3b:64:90:
6e:14:d3:16:91:28:91:a0:e3:d0:87:38:19:d9:57:49:46:38:
76:3d:8a:60:f4:e7:5e:8d:14:9a:de:54:9d:a0:07:b5:bb:63:
8d:99:84:b5:9a:a1:df:c2:7a:34:02:69:c1:94:ec:4d:3f:5c:
a7:bf:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:17 2025 by rpki-client