Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier: jvx/6WAbrp+rmM2zCpKVoCy3T9fexKYFaXB2ygiKuU0=
Subject key identifier: 8E:5E:A2:9F:5F:E2:4E:BE:09:4E:AA:96:D8:6F:B5:A1:32:70:3B:F4
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial: 20CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number: 20CA
Signing time: Fri 31 Jan 2025 15:57:26 +0000
Manifest this update: Fri 31 Jan 2025 15:57:25 +0000
Manifest next update: Fri 07 Feb 2025 15:57:25 +0000
Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: Qvf3LNT31MYfjuyd46uCGMBAw1Tgh7B/o3PI8xc8eCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8394 (0x20ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Validity
Not Before: Jan 31 15:57:25 2025 GMT
Not After : Feb 7 15:57:25 2025 GMT
Subject: CN=679cf2e6-a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:8e:44:37:90:9e:df:3b:0a:b0:8b:6f:a4:
8a:fc:8d:64:d5:b6:4a:4e:fc:45:b9:7f:c7:e0:f2:
ed:3f:59:70:00:6d:cd:87:61:79:77:8a:4c:fe:fb:
ca:a4:59:58:87:a2:8b:29:89:76:0a:a7:3a:24:43:
68:b3:ce:b6:23:bf:29:f8:e7:46:ae:a4:13:c1:b1:
e4:58:01:fb:9a:5f:8a:15:91:67:ce:d7:d9:a7:44:
d4:f7:ff:51:e6:af:09:6f:0d:c2:45:f9:07:2c:59:
6b:1f:fa:fe:98:f5:81:3b:3c:9b:0d:79:98:cf:51:
4c:0d:2b:16:74:bf:04:17:74:96:57:66:4d:ac:00:
eb:b2:f7:69:ec:82:32:8f:9d:ae:08:0d:f3:7b:23:
0d:86:ce:1c:ba:3f:08:dc:55:52:31:19:b2:0b:f7:
06:0f:f3:e7:eb:11:f7:43:1d:ee:31:bb:98:bd:3a:
75:c4:14:66:ea:e7:31:f0:1a:41:8b:a1:82:c0:fe:
43:e5:9f:93:5f:75:41:9a:77:47:00:2e:b8:6e:9b:
b6:58:07:b3:6d:b8:f4:59:c8:12:d8:6f:25:0f:28:
58:7a:d4:40:0f:a7:63:ad:89:97:98:f5:0c:42:5c:
e1:d4:af:a9:3e:80:37:1e:87:d5:39:4a:51:df:7b:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:A2:9F:5F:E2:4E:BE:09:4E:AA:96:D8:6F:B5:A1:32:70:3B:F4
X509v3 Authority Key Identifier:
keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:96:56:8b:6c:f2:3d:b9:7b:58:ca:e9:99:9b:31:40:46:
05:40:1b:61:44:d8:22:27:d6:df:71:75:f6:94:ea:c3:cf:15:
45:81:c5:f6:ab:5c:e0:1c:ea:ef:39:18:43:36:ea:5a:91:40:
fc:9b:09:be:75:1d:a5:8c:74:83:3b:8f:ae:56:7a:29:19:86:
88:86:93:13:d7:15:89:d6:5a:bc:82:95:ca:56:5f:17:95:e4:
8b:2f:41:34:54:8e:16:76:f8:51:a7:f2:16:55:d9:45:1a:eb:
fe:e4:cb:d2:4c:b7:9d:35:9f:32:fc:06:63:e5:b4:a0:b3:a8:
04:62:21:54:0c:5b:36:71:d7:26:f3:5a:e4:82:90:fe:08:83:
b9:70:03:af:c0:14:3f:40:27:e8:00:48:40:b9:0a:01:ef:e0:
9f:30:ca:0b:bb:c3:16:6a:a5:0c:bf:bd:2e:72:6d:84:62:e1:
ed:b5:de:bf:f2:18:bf:a0:c7:45:af:a3:3e:9f:05:8a:8a:e8:
bd:73:87:3b:d6:2d:d3:31:0b:36:b8:e9:24:99:96:9c:0d:b6:
84:40:3c:5c:6d:ae:0d:e5:74:9a:f4:4e:86:eb:c9:41:b9:4c:
b3:62:0e:d1:6a:00:44:9e:df:94:77:1b:fe:77:bd:26:f3:44:
3d:04:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:09 2025 by rpki-client