Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier: PWzp3kdpYqR/3eqW6+Nb2ET51yN5exbl19m4qDAt0ek=
Subject key identifier: B8:6A:79:68:93:62:B6:6C:4A:DE:EF:56:45:32:80:9A:60:B1:A0:97
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number: 0598
Signing time: Fri 31 Jan 2025 00:05:18 +0000
Manifest this update: Fri 31 Jan 2025 00:05:17 +0000
Manifest next update: Fri 07 Feb 2025 00:05:17 +0000
Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: jFHzO4FBCDSI3dUwYsXrjOx3IH0rtyRkf/b5vFygAz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Validity
Not Before: Jan 31 00:05:17 2025 GMT
Not After : Feb 7 00:05:17 2025 GMT
Subject: CN=679c13bd-0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:eb:20:ca:72:c8:c2:fe:e7:21:dc:5e:2d:
37:c0:78:7a:9c:e2:55:b5:e1:4b:b3:93:56:8d:e2:
9c:75:48:8a:48:85:3c:1b:0f:20:d7:9c:b1:79:72:
1b:43:5e:e5:fc:78:f0:93:40:20:75:6e:80:52:70:
7e:a8:ac:e4:e1:37:fb:35:5a:34:7a:ce:54:55:9d:
ab:3b:0b:eb:5a:07:bf:d7:29:1d:77:e7:5d:8b:e6:
52:8a:f2:de:ef:24:d5:98:0b:47:e8:9e:77:72:08:
0a:b1:0b:7a:bd:86:b9:54:3e:e2:34:ad:c6:88:e8:
72:47:5d:24:fd:7f:f0:6d:8e:31:a1:a3:35:89:64:
55:c1:75:b7:c7:2f:3d:7e:e9:8b:ef:b3:e1:20:ae:
90:7b:f0:64:5b:b9:c5:2e:96:a4:8d:e2:a3:fb:00:
ca:0f:d0:e0:eb:fa:1e:bf:b5:d5:dc:36:7e:b1:6e:
62:fe:05:77:85:9e:72:52:e8:7a:8f:3a:69:1f:d8:
e6:10:b7:63:fc:ca:ab:60:a8:89:18:aa:5d:0f:1b:
e8:f8:2d:c3:81:e0:c1:c9:ca:66:a8:80:54:e9:b6:
8c:22:b6:e4:9b:6f:72:d7:2c:0b:80:b2:d7:bb:0e:
ef:7f:02:d1:d3:e0:1f:8d:af:f9:99:c6:a6:6c:f9:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:79:68:93:62:B6:6C:4A:DE:EF:56:45:32:80:9A:60:B1:A0:97
X509v3 Authority Key Identifier:
keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:7d:1b:7b:8d:e4:36:09:34:12:1c:77:ad:52:ee:ee:d2:
2b:ed:f0:96:7f:43:b9:50:cc:52:b7:9f:b1:44:e0:29:c0:e4:
2a:5a:b6:3a:a4:4d:30:7c:6a:d1:3f:ad:0e:be:f2:35:94:ec:
7d:ee:fd:74:a3:21:75:31:cb:47:a5:af:aa:c7:62:39:53:df:
6a:6a:39:43:93:ea:ce:56:f4:55:e7:27:bf:c2:74:7a:6f:14:
54:74:c0:90:f2:5e:94:70:5c:38:f0:9e:a0:62:b9:82:95:8a:
11:f5:1d:23:d1:63:89:c8:ff:62:f4:ec:db:8e:6c:66:0e:34:
cb:7a:ad:03:8a:ba:5c:3c:f2:86:85:b1:05:fd:75:8f:be:f2:
03:ac:41:6c:3d:7c:58:3b:b0:c5:3e:a2:79:4e:dc:6d:be:d9:
ce:27:2f:b4:8f:5c:23:af:3e:87:6f:95:b9:dd:35:73:8d:1f:
33:47:ca:51:59:08:c9:48:c5:1a:85:ae:b0:f7:2a:69:25:ce:
b6:ed:11:e8:f6:e2:bc:98:af:65:2a:3c:6f:de:ff:37:67:bd:
23:0e:a6:0b:bb:03:51:70:61:1c:dc:17:9c:45:c6:1c:8a:f1:
03:9c:e8:0f:68:d9:cf:c2:44:cd:92:f0:7b:46:d5:ba:d5:29:
8f:2a:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:42 2025 by rpki-client