Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier: tnfx27uLDvtN/RSetP8lDFlKurdDAsLaSj8YMqWkFi0=
Subject key identifier: 4B:72:D8:75:A8:3D:28:EE:9C:B4:04:0E:2A:6E:EF:1D:33:2A:53:6B
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial: 113E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number: 1F02
Signing time: Fri 31 Jan 2025 17:15:39 +0000
Manifest this update: Fri 31 Jan 2025 17:15:39 +0000
Manifest next update: Fri 07 Feb 2025 17:15:39 +0000
Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: KDAfIvcM8lmVY/MbJ++Oq5TDKPRFOU7zS7dHqjrWKa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4414 (0x113e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Validity
Not Before: Jan 31 17:15:39 2025 GMT
Not After : Feb 7 17:15:39 2025 GMT
Subject: CN=679d053b-5a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:9c:03:40:1a:39:75:f9:07:43:d5:61:11:
18:06:23:5c:f6:69:90:bf:57:92:9a:9e:31:8a:82:
ec:d2:67:96:7f:05:d3:5d:5b:cc:0e:a3:57:66:62:
3b:5d:28:3c:2c:1d:4c:36:ef:c4:51:53:69:67:32:
47:22:75:d3:17:06:cf:b3:eb:7c:bd:4c:77:1c:38:
f2:59:b6:6f:a2:0a:8d:05:6c:ad:4f:0e:f5:7c:d7:
09:c9:e5:61:3e:2d:60:63:27:bd:7d:bf:be:f0:4d:
32:b0:f2:26:5b:a6:1d:1d:f6:5b:b0:0d:f8:cd:1d:
a1:b7:61:13:8f:21:b9:bd:7e:32:5c:59:09:3e:37:
cd:bc:0a:53:ef:60:31:f0:2a:8f:a0:4a:15:d2:b5:
9b:db:6e:e2:1f:ca:a6:4d:c4:f8:75:7a:8c:fc:6c:
68:70:e4:73:54:74:27:4f:0e:6d:30:26:6d:54:b7:
f2:61:fb:8a:23:d5:92:14:60:d4:df:23:64:16:24:
2d:1a:77:a3:51:30:46:1b:72:ca:5f:34:a7:19:b8:
99:43:a1:8b:ce:c5:8a:1f:7e:3c:93:fa:8b:fc:08:
c3:6a:00:90:83:ce:d0:a3:61:6a:f8:b2:2c:c6:58:
a4:5d:23:1c:d9:17:48:ef:04:04:e9:49:d2:54:1b:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:D8:75:A8:3D:28:EE:9C:B4:04:0E:2A:6E:EF:1D:33:2A:53:6B
X509v3 Authority Key Identifier:
keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:81:ff:be:43:fd:07:03:cb:5b:65:e9:a5:a4:0e:7f:fd:
d7:93:90:56:06:9a:ed:7e:15:de:1b:13:d5:89:23:cd:57:d0:
f4:14:47:af:9b:13:da:b9:0f:ef:01:14:79:fd:0c:2b:65:c7:
18:72:52:a1:36:76:a7:80:5f:02:3a:ea:f3:94:97:ff:24:0b:
5e:cc:63:8c:29:b2:64:89:54:04:1c:98:0c:a6:66:1a:68:d4:
57:d6:5d:a2:dd:c4:e8:9a:02:7a:1b:28:b9:19:6b:c8:a1:3d:
7f:6d:6d:eb:b1:90:14:76:a7:f5:12:81:99:44:38:60:e4:9a:
55:bc:7f:b2:fd:de:1f:ac:1e:a3:29:df:9e:fc:68:11:c5:b7:
ac:8b:3a:e8:66:8b:0a:2d:c9:cd:f4:d4:5f:c4:5c:6d:c9:16:
a5:2d:04:b4:70:f8:f7:ac:3b:3c:a6:26:b8:c6:f3:40:12:1e:
48:19:c2:a1:b6:59:91:f1:10:bb:ce:1f:bc:1e:e2:a7:76:f8:
9f:84:06:b3:59:b0:c9:6f:47:1c:0a:5f:0b:1e:6e:47:37:08:
c6:ef:4c:60:95:e3:4d:fc:d8:99:1f:0c:79:9d:40:8a:bf:25:
39:7e:8c:9d:81:b3:ce:eb:97:4f:dd:43:6c:a3:f9:28:76:3b:
9e:76:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:57 2025 by rpki-client