
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: qzuliIK4Bu5rGI7UtWv5liBTg8gY5kO6Ems9exPRbiY=
Subject key identifier: 7B:DF:20:37:FB:97:FE:3D:37:03:C9:3E:A6:0C:71:70:44:E7:67:5D
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 0473
Signing time: Fri 31 Jan 2025 00:07:34 +0000
Manifest this update: Fri 31 Jan 2025 00:07:33 +0000
Manifest next update: Fri 07 Feb 2025 00:07:33 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: hOV7lBIlm66avzLo83bytYmpWsR7pMZ9tOip8m3nNjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Validity
Not Before: Jan 31 00:07:33 2025 GMT
Not After : Feb 7 00:07:33 2025 GMT
Subject: CN=679c1446-81f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:fa:d9:c0:20:24:f8:7d:e0:6e:02:f0:02:
5b:8c:78:87:aa:29:7f:58:0d:3d:6f:39:71:8f:ef:
74:fc:e2:ee:4b:54:10:a4:6f:13:a7:0a:85:9c:02:
15:b5:de:1a:9d:17:27:f7:1c:f3:00:cf:c4:72:ac:
e3:42:09:70:cf:58:35:a0:ad:53:be:cf:9c:88:6c:
8e:d0:a5:ea:d7:c6:67:6a:7b:44:c0:38:b8:8d:a5:
6d:66:70:37:c0:1d:fd:20:2d:03:15:20:50:48:07:
a6:01:b4:eb:92:c6:59:3d:15:9c:b5:d2:d8:40:87:
e9:21:75:c9:66:5c:e2:4c:31:8e:ec:58:79:af:05:
55:c7:6b:b4:9b:c1:ff:1e:b4:12:85:07:9a:b0:7b:
1f:07:5a:57:32:40:0f:09:d1:35:00:80:71:c7:4e:
35:b7:f3:44:1f:61:9a:40:31:6a:aa:db:86:73:44:
39:0f:7e:de:fc:f8:db:6d:ae:0f:f8:50:68:ad:8a:
1d:19:8c:c2:7b:3e:b4:06:20:f0:da:e8:5c:90:25:
0c:f6:00:18:4a:99:e7:dd:cf:35:4f:0d:3e:00:97:
ce:f5:72:24:1c:f3:aa:cc:c5:4e:b3:58:27:f3:e6:
73:ef:da:48:f2:4e:84:ce:fa:79:3a:b0:65:95:b9:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:20:37:FB:97:FE:3D:37:03:C9:3E:A6:0C:71:70:44:E7:67:5D
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:4c:f7:c8:35:06:6f:3f:95:18:e7:c5:72:23:f3:35:35:
ca:3c:2e:bb:ab:7b:43:0f:99:52:b5:7a:2b:26:7d:38:2a:da:
a4:17:ac:48:eb:ae:f9:33:bd:ba:a5:a3:64:b9:de:96:b8:e3:
3e:6b:55:b4:38:bc:62:5d:f0:11:de:a1:4e:97:50:94:be:7f:
65:ee:38:d4:22:aa:76:b9:eb:b1:36:5b:7d:18:89:a0:be:5c:
88:ea:de:2b:28:b3:91:f8:2e:e7:8c:23:c4:e2:fb:92:47:ca:
a2:f8:76:d9:c6:37:c3:48:70:b9:db:bd:a3:3c:65:3a:34:cc:
e2:09:c8:78:0c:af:e1:09:5b:16:5a:a9:e8:b6:56:3b:e1:07:
cb:73:1c:a7:b8:50:bb:1b:82:00:6e:b7:7c:21:7d:8d:6c:22:
39:cc:89:38:40:12:ae:e9:11:0d:0f:7e:a4:33:07:40:0b:60:
af:dd:6b:90:ed:70:49:55:39:6d:4c:ce:7d:55:f3:84:ff:d0:
80:98:89:68:af:49:94:18:2e:6d:f2:30:56:c9:ef:3f:b4:e9:
c0:e1:73:1a:ea:7e:ab:3c:1d:d5:68:f8:64:69:a3:7a:ce:0d:
d7:6f:21:a9:be:63:78:c4:0d:4a:33:34:88:09:7d:83:90:96:
76:fb:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:47 2025 by rpki-client