Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier: lsgdQFGEua8EUqrmqQp3r/8Z8tj5nPI3u0thMGMakJA=
Subject key identifier: D0:29:E6:69:96:EA:AB:B2:12:E5:4D:4F:A6:C5:D0:47:37:4F:1B:DD
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial: 0AE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number: 11DB
Signing time: Thu 30 Jan 2025 19:22:00 +0000
Manifest this update: Thu 30 Jan 2025 19:21:59 +0000
Manifest next update: Thu 06 Feb 2025 19:21:59 +0000
Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: Dtwbr5sO5xO4oM7GUKgA35L6je4bxZ0AoLHDXdUN/1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Validity
Not Before: Jan 30 19:21:59 2025 GMT
Not After : Feb 6 19:21:59 2025 GMT
Subject: CN=679bd157-0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:5e:de:a2:f7:ce:bd:03:2d:ae:cd:53:3c:
a1:23:d2:f6:30:7b:73:d0:6a:bc:5d:3c:fb:90:09:
a1:49:9f:2c:85:7d:b0:48:87:50:ca:35:bc:3e:cd:
60:f0:b8:04:84:ee:d2:7c:b9:fb:0a:f5:80:fb:16:
2e:24:c0:fa:c2:7c:fc:58:77:f1:3b:2c:66:83:00:
c8:73:02:98:f1:2c:77:3d:2d:e7:f1:48:5c:83:79:
0b:6d:53:02:23:8e:1e:fb:bb:85:f9:70:ec:b4:10:
3a:0f:41:b9:c7:94:0d:05:74:7d:4c:bf:c2:15:5b:
5f:90:a6:d0:b0:8c:06:18:47:b6:1e:2e:f2:85:fc:
f1:0f:70:15:e7:f8:b0:ad:77:76:92:88:a0:53:f9:
c4:4e:89:60:9c:27:b6:57:d3:b2:82:58:43:db:aa:
63:28:d9:0a:0a:30:c7:99:83:0e:68:6e:f0:5a:99:
75:c9:71:ae:e8:a1:b9:a2:8f:65:49:9f:0e:5f:f8:
90:c0:ca:0c:6c:32:bd:62:e8:7c:66:e7:9a:cc:b9:
e8:af:11:dc:64:6a:77:95:76:80:d2:b1:73:aa:51:
da:cf:af:82:5b:cf:4d:ff:60:65:07:64:36:33:3a:
a0:1d:00:94:f2:f7:4b:c2:64:a6:80:8b:d0:45:7a:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:E6:69:96:EA:AB:B2:12:E5:4D:4F:A6:C5:D0:47:37:4F:1B:DD
X509v3 Authority Key Identifier:
keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:39:6e:0c:d7:b3:98:7e:b4:10:3a:72:08:63:49:c2:fc:a7:
20:fe:b1:59:56:2f:95:11:cc:f9:5f:e8:ad:42:ae:fd:c0:29:
6a:0a:ae:94:45:8b:99:5e:d0:b8:0c:3e:47:64:80:16:62:0c:
a6:95:a2:53:8f:fd:29:99:f1:c3:91:33:4f:31:b5:6a:16:10:
4b:4a:df:8c:a2:7a:20:7e:ad:ff:7d:b2:43:39:39:b4:41:0d:
0f:86:dc:25:bd:01:24:c4:88:a5:42:94:05:20:50:2c:79:39:
a0:82:6d:b2:37:ae:78:a4:42:2d:17:0d:3e:fe:4a:88:e0:32:
65:87:ba:4d:24:0f:fd:c7:18:ca:7b:d6:a3:2e:d7:20:23:e9:
a9:69:c7:d4:35:1c:0f:f4:13:e3:50:0a:2b:07:34:71:52:63:
48:de:84:bb:36:ce:1a:d4:89:4f:05:a1:ee:88:3c:18:42:a3:
24:d8:65:1c:e8:37:b2:31:fc:f7:38:0f:aa:65:3c:42:2a:77:
eb:a8:3b:56:9e:de:71:cf:9a:ef:e2:5b:68:20:dc:c3:8a:20:
a9:64:d2:e6:40:14:3b:8e:f0:f9:08:fe:b4:40:4c:48:96:71:
3f:77:5e:4a:d0:35:ed:2f:d3:d8:da:13:c4:89:64:c0:88:75:
2c:23:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:39 2025 by rpki-client