Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File: aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier: 3o0sU7w9tIrwVtsM2amuICd5EGWJS7VuP+jJj0JoWyw=
Subject key identifier: E5:8E:20:8D:48:CA:4E:F7:FC:4D:78:27:B8:90:1C:7E:BB:AF:F9:BC
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer: /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number: 45
Signing time: Fri 31 Jan 2025 06:28:24 +0000
Manifest this update: Fri 31 Jan 2025 06:28:22 +0000
Manifest next update: Fri 07 Feb 2025 06:28:22 +0000
Files and hashes: 1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: GjmsDJiXrEVH4OE25WUDQWwCuqRSQ6e8+8mJkMH+H64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Validity
Not Before: Jan 31 06:28:22 2025 GMT
Not After : Feb 7 06:28:22 2025 GMT
Subject: CN=679c6d87-3d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:31:0c:98:7c:3f:ff:72:5e:6f:f4:75:9d:
61:c2:9d:ed:01:6b:f7:2c:44:bb:30:f3:90:70:28:
0b:a6:18:55:4e:9b:15:09:e2:4e:95:92:3d:8b:65:
c9:7f:bc:c4:51:b1:41:15:ed:f7:ff:00:70:fc:03:
0c:b2:3e:65:b6:8f:fe:ef:ff:3e:ee:1d:5a:74:37:
1f:ae:b4:f5:5f:8c:26:8f:89:5b:62:cc:f4:91:b9:
c2:6f:5b:f2:9d:23:e4:b4:4c:41:9a:46:58:43:d5:
08:0e:79:50:62:02:73:d1:47:e6:95:1a:70:df:4f:
fa:00:8d:7a:23:72:9f:dc:d9:8d:7e:f0:8f:de:e0:
57:a2:c5:e1:85:38:21:3f:8d:3d:26:80:db:9e:a8:
82:6a:a3:9a:8d:69:1b:9b:56:9c:40:42:cf:da:04:
ca:1f:b7:e5:aa:2d:84:83:20:7a:4b:db:75:91:59:
b6:23:e2:e6:54:af:34:30:13:33:1d:4c:a7:27:dd:
36:fb:bf:6a:06:80:c1:5a:95:1a:84:93:42:58:45:
d6:c5:1e:7f:96:49:8f:f8:0c:f4:d4:04:2b:e2:db:
9d:7e:2c:f3:cb:2d:d9:d0:ca:00:08:0e:58:a8:9a:
4c:2b:24:c3:d0:f2:18:53:2b:0d:04:ba:ef:32:44:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:20:8D:48:CA:4E:F7:FC:4D:78:27:B8:90:1C:7E:BB:AF:F9:BC
X509v3 Authority Key Identifier:
keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:27:63:4a:9c:ae:cc:1b:48:65:75:c5:f8:df:9e:a8:59:
f5:39:4f:06:6e:74:7c:8f:57:78:09:92:37:6c:25:e5:0a:41:
86:96:bd:68:8b:a6:04:35:cf:22:29:fa:9b:b8:fe:2f:0a:a0:
f6:4f:ec:9f:98:e4:69:37:4e:76:20:97:d3:12:c0:e9:08:fe:
13:30:25:72:53:f4:52:4f:d4:de:d8:f6:1f:3d:88:87:0b:cb:
d9:50:a9:78:aa:ec:b9:ca:d2:02:7c:17:da:87:c6:14:f9:07:
7a:7a:58:a4:13:ec:fa:77:12:44:f8:d4:84:79:34:88:74:a6:
f8:a5:37:03:c4:c7:fb:5f:03:89:09:de:fd:f1:d0:4f:53:ca:
32:17:03:e8:50:9d:24:e7:81:88:eb:33:4d:47:36:4f:96:b2:
53:2f:84:af:c9:c0:05:1c:60:61:f4:a9:ee:30:a9:b6:d4:e7:
4a:8c:83:a1:b1:40:66:e5:65:bc:9c:ed:9e:0d:62:f9:36:7a:
18:e9:c5:5d:48:43:de:e1:fb:98:dd:7e:7a:7a:1e:aa:a6:4d:
d4:a6:c2:a3:0f:ba:a1:36:fd:a4:3e:b5:ea:59:d2:c9:43:5a:
e2:a1:eb:60:f8:6d:c3:80:76:e7:b4:22:ff:4a:f6:5c:5a:94:
f6:65:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:05 2025 by rpki-client