Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
File: xYjecPKsY-wWHdqc3CADirBHKkU.mft (raw, json)
Hash identifier: Kd45IHLyTAHkW9SXfk+V5YITiXo1zv3+Rl/DykjlZcs=
Subject key identifier: D4:F4:21:7C:F6:B6:6E:B5:80:41:76:46:E2:89:3C:32:2F:24:85:D4
Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Certificate issuer: /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
Manifest number: 0205
Signing time: Fri 31 Jan 2025 02:10:19 +0000
Manifest this update: Fri 31 Jan 2025 02:10:18 +0000
Manifest next update: Fri 07 Feb 2025 02:10:18 +0000
Files and hashes: 1: xYjecPKsY-wWHdqc3CADirBHKkU.crl (hash: QKAWs1SxePVriIZ+C94HnfwyYnEx/dssZnwSVgbElJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Validity
Not Before: Jan 31 02:10:18 2025 GMT
Not After : Feb 7 02:10:18 2025 GMT
Subject: CN=679c310a-d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:2a:7e:e8:4f:ca:bf:60:aa:f7:93:d7:9a:
5a:1d:ce:de:16:81:4a:7d:67:ef:73:97:fd:88:95:
5e:96:d8:a5:16:4d:76:5d:81:e5:a9:83:40:f1:7e:
83:64:81:f8:d2:81:3c:d6:2f:d5:e6:ce:88:49:71:
7c:22:1a:f5:a7:c1:90:c3:e0:fe:67:6d:84:4f:ea:
db:1b:18:ba:46:45:63:0f:4a:85:f9:a7:24:bb:e4:
2f:f5:6a:59:fe:b4:3c:82:4b:35:d3:e7:33:ae:72:
ce:c8:a1:2f:21:e5:5d:30:80:a8:0e:54:ba:b1:0c:
56:0a:18:20:5d:f5:12:09:27:f7:d1:32:42:8b:48:
39:2e:a2:d8:27:cd:cd:e7:38:51:9a:57:2d:99:24:
10:b6:ec:d5:01:bc:63:fc:e9:71:7e:54:bd:35:6b:
8b:7e:bb:e3:33:90:d4:d0:6e:70:93:fc:18:42:93:
07:af:62:45:dc:c1:55:25:8e:3c:27:0b:96:1b:f1:
2d:fe:48:85:93:2e:a7:92:c6:26:29:d8:d2:11:ee:
09:b8:68:42:f4:53:a0:4a:73:82:e9:f6:90:2e:da:
bc:c2:5c:09:ea:a5:c0:12:20:f0:85:31:f2:c4:54:
99:42:85:ce:5e:c8:7a:e8:da:62:51:e1:ca:b7:c5:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:21:7C:F6:B6:6E:B5:80:41:76:46:E2:89:3C:32:2F:24:85:D4
X509v3 Authority Key Identifier:
keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b3:8e:3f:75:bd:67:07:ec:e9:50:59:86:e8:1d:99:87:45:
4a:b8:2c:e5:5c:f8:dd:5e:d7:15:ed:5b:75:3a:d2:b3:f9:c3:
e2:5b:11:d9:56:dc:c4:18:0e:01:55:df:67:59:19:5b:90:a4:
6b:d4:1c:3b:73:ec:3a:e3:3a:1d:b4:2d:d7:2e:db:18:57:a8:
70:c5:73:85:9d:a2:0a:2b:1b:c1:f5:76:91:f2:6e:a8:de:08:
f3:00:90:98:d9:47:54:2f:7d:b4:a1:4f:7e:41:92:9e:9e:4f:
15:8f:23:bf:1f:46:04:af:ca:ca:07:e5:64:7c:3c:d6:d1:4b:
a7:70:d4:5f:24:41:2c:48:47:51:d0:7e:d8:32:a7:b2:f6:7e:
48:5c:7d:87:29:5f:64:42:37:bf:6e:4e:0f:2c:cd:46:ae:cf:
44:dd:15:3f:ac:45:b6:1b:2d:52:4d:27:c1:ec:51:87:26:98:
18:31:14:fa:ab:fb:06:63:d0:5c:e1:68:05:5d:cc:05:fc:69:
34:d8:56:56:7f:cb:37:ea:af:e0:e2:d5:0f:d4:83:93:13:b2:
e9:9f:2d:c1:64:7b:8f:bf:12:a0:13:e5:4c:62:47:7e:72:5b:
2b:44:0d:b7:27:47:c7:a9:cd:9b:b4:20:00:a2:95:74:01:f6:
8b:0a:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:35 2025 by rpki-client