Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier: kwhxgV0S57a61C7JUVggIbcf+DOOHb4n9C1sz9sNfoY=
Subject key identifier: 3D:E4:B2:D1:EA:BE:41:29:64:65:47:0C:D8:32:4B:11:5D:B1:67:E1
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number: E6
Signing time: Fri 31 Jan 2025 04:30:46 +0000
Manifest this update: Fri 31 Jan 2025 04:30:46 +0000
Manifest next update: Fri 07 Feb 2025 04:30:45 +0000
Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: yUJbXUIcY7fawwtsohFko28JJwZnFC+39Xge72cYXe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Validity
Not Before: Jan 31 04:30:46 2025 GMT
Not After : Feb 7 04:30:45 2025 GMT
Subject: CN=679c51f6-f99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:a6:28:c5:ca:b7:04:a5:32:e0:f5:de:c5:
6f:34:7b:6a:5b:22:d5:69:cf:06:03:4b:c6:7e:00:
f6:75:78:26:5d:f0:1e:04:9a:99:70:bd:8b:9a:19:
7b:be:43:14:e2:de:3a:00:fd:2a:7c:f8:1f:06:24:
86:b9:06:bd:31:d4:eb:65:8b:2b:bd:54:bd:6a:c9:
f6:7d:bd:73:97:ad:0b:54:56:be:28:46:62:24:32:
17:3e:b4:61:1a:51:5d:2f:41:8a:ed:f7:19:00:11:
3e:20:b2:c4:59:3e:52:6e:e7:fc:f1:04:c3:00:6f:
90:68:07:02:56:66:a1:2c:7b:58:6c:42:dd:92:a2:
04:e1:03:17:5a:b3:8e:4d:5e:80:5e:c5:fe:ea:d9:
34:e2:ac:ff:93:e6:2b:0c:80:e3:97:de:9a:2d:b9:
31:d1:d7:04:af:a1:f2:66:7e:16:c6:3a:13:af:58:
c9:bc:d4:bb:cf:1f:5a:c8:14:f6:c5:6b:a5:b6:73:
31:b5:0a:7e:2c:fe:a2:8f:68:94:8a:36:82:f2:15:
ef:73:42:17:7a:a9:18:db:65:cc:0a:f1:b4:c5:ac:
eb:8b:de:8e:ef:b2:8b:d3:db:1a:32:bd:8f:47:10:
1f:dc:f3:f1:db:c7:c8:36:e7:f0:18:6e:91:ec:29:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:B2:D1:EA:BE:41:29:64:65:47:0C:D8:32:4B:11:5D:B1:67:E1
X509v3 Authority Key Identifier:
keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8e:80:fa:51:2c:81:1f:e2:a6:9e:05:af:1e:50:c4:de:16:
05:3e:f5:f4:39:c4:8a:62:40:1c:1a:95:26:a7:d4:54:3e:9b:
9f:ab:12:b0:a2:0d:3d:eb:34:88:68:89:81:ce:ea:91:92:fd:
4d:e1:46:e4:37:9b:f5:01:d1:70:f7:03:e1:dd:ab:82:73:9f:
a1:e4:8e:0d:a8:29:b8:06:ec:b1:ff:d8:d4:88:52:de:96:20:
28:a6:b2:77:44:e5:b1:25:6c:5c:0b:ff:87:85:f9:70:58:c8:
44:85:a4:11:41:65:4d:d0:d1:4d:db:75:33:73:fe:89:7d:67:
d9:b9:60:68:ff:d9:15:e4:1f:4a:51:9a:8b:bc:eb:69:c6:41:
a7:ef:e2:08:82:41:ba:ba:82:5b:47:83:0b:62:8d:68:de:44:
6d:87:e7:0e:ef:b7:8d:a8:cd:85:cb:7f:60:fe:3b:93:74:a6:
7c:ba:c0:c4:fb:23:76:26:fd:bc:df:c2:9f:bf:d3:92:d3:e1:
8c:da:0f:d3:f7:72:e7:d6:a3:6c:ed:26:d9:5b:56:5b:0a:da:
b1:4b:ee:36:3c:2e:5c:c9:d3:2a:21:0c:80:3a:d8:f1:ac:a9:
91:d9:05:70:24:53:53:c5:28:83:db:a5:85:dd:67:03:25:22:
76:24:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:54 2025 by rpki-client