Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier: L9KHeSuq2lxFCKHeKuAD6vvQ7cKIi/u9PgxYch4ZQi8=
Subject key identifier: DC:89:09:3B:08:2D:4D:E3:EB:32:16:82:31:29:8F:65:F8:45:4F:F1
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial: 0A74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number: 129D
Signing time: Thu 30 Jan 2025 19:42:09 +0000
Manifest this update: Thu 30 Jan 2025 19:42:09 +0000
Manifest next update: Thu 06 Feb 2025 19:42:09 +0000
Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: p5xiGMTYGT7h1ZLoY0hF+mfUuKlf4m0UpneaUG4ls7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Validity
Not Before: Jan 30 19:42:09 2025 GMT
Not After : Feb 6 19:42:09 2025 GMT
Subject: CN=679bd611-83d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:c0:98:6f:da:52:c7:58:c8:e7:93:ec:4c:
aa:46:41:e4:c8:ed:22:73:b7:eb:11:15:79:31:0a:
8a:f0:30:99:24:19:ef:f7:da:6b:7f:73:eb:4b:51:
1e:01:0a:f3:73:d9:8e:89:04:97:5b:39:37:05:5f:
b5:e0:13:6d:b3:eb:cd:45:ec:98:15:0b:e9:17:58:
31:98:61:16:85:4f:ae:dd:37:2e:8c:7a:28:0d:06:
1e:ed:cb:8b:5c:49:12:b4:8a:4d:50:da:52:65:37:
7e:de:a2:c0:e4:cb:3d:6b:66:94:f8:d6:c5:1c:69:
e2:3c:24:47:a5:68:9c:00:bf:e9:31:7d:06:4e:71:
d7:73:fb:02:6b:69:77:f3:35:2b:33:c0:82:ca:d8:
78:88:7c:38:13:c7:28:87:35:a9:eb:9a:c6:62:85:
5e:38:2f:8a:50:69:7e:b7:66:1d:8b:e8:9d:b0:e7:
bd:9e:a0:4a:c6:ee:1b:65:8d:3f:64:2a:af:6a:16:
48:c4:f7:0e:50:c2:55:97:9f:9b:63:a2:92:7e:4b:
ac:24:fc:0d:c0:43:5c:d2:1d:19:e9:6a:28:80:80:
32:17:93:82:2f:a4:55:98:69:24:52:db:f9:7b:73:
6c:30:b6:92:a9:5e:ea:d5:76:26:fb:44:28:ba:ca:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:09:3B:08:2D:4D:E3:EB:32:16:82:31:29:8F:65:F8:45:4F:F1
X509v3 Authority Key Identifier:
keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e1:6f:c5:22:ed:b4:4a:f5:a9:6f:e9:15:11:95:c9:28:69:
21:a6:aa:62:60:66:6c:88:fd:fd:60:30:17:f3:bf:b3:57:ca:
9c:ef:f9:8f:93:d9:47:d3:14:be:46:68:48:39:f7:4a:4c:f5:
fa:b8:95:39:06:a2:90:63:b6:ee:92:a5:3a:55:fa:93:e7:56:
e2:38:5f:4b:5c:12:50:8a:8e:8e:4b:c0:58:b6:fa:ab:53:f6:
ff:69:1b:ab:d8:c6:31:86:ed:b3:66:16:09:e5:c0:c3:e7:28:
7c:2f:1b:9d:55:eb:35:0c:1d:48:fd:06:3a:e9:1a:3e:86:92:
fb:9f:a5:b8:70:72:d6:78:03:ba:db:ad:ff:73:a7:6a:ed:89:
41:9d:9c:86:e7:f1:d3:c2:d9:98:b4:47:01:ad:44:dc:9d:37:
55:a3:61:5c:10:ce:b9:cd:73:ea:2f:29:86:c0:bd:b2:d5:48:
84:ea:5a:85:56:a0:23:98:2d:f6:23:ab:78:c3:fa:47:e7:5e:
3f:2c:5f:5c:4e:9e:36:d8:a9:b2:96:d2:65:4b:15:99:4a:e5:
1c:27:f7:a2:e4:df:e1:c9:b5:e5:29:da:11:4c:28:b9:13:eb:
36:f1:4f:5c:ec:9d:c2:9c:5d:c0:6a:26:f4:6a:93:f8:fc:20:
ca:5b:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:33 2025 by rpki-client