Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: E1qJr/oPN9CznKx85u4wnzfcY/HU7WJWuiwXFOEljlc=
Subject key identifier: A6:D6:0D:C4:47:41:5F:6E:BD:F4:71:19:EB:50:8A:ED:C8:A8:7B:2A
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 03F5
Signing time: Fri 31 Jan 2025 00:58:04 +0000
Manifest this update: Fri 31 Jan 2025 00:58:04 +0000
Manifest next update: Fri 07 Feb 2025 00:58:04 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: EhRZTrtEj0RkMEhFi36oi1kQRoSPkp5iFF85Zddm0HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Jan 31 00:58:04 2025 GMT
Not After : Feb 7 00:58:04 2025 GMT
Subject: CN=679c201c-3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:6a:81:84:24:e4:96:3c:46:76:64:40:d7:
5e:63:29:f8:96:70:93:32:24:85:54:6f:9b:9a:ca:
ce:7a:79:5e:4a:1b:ac:26:75:2e:2b:16:de:b7:f5:
e9:2c:5c:de:88:7c:d5:77:b8:62:74:ad:e9:e2:23:
e7:51:e8:b4:83:e7:ed:02:4f:7e:7d:83:91:f5:f6:
ce:88:b4:44:0c:00:6f:83:14:af:69:e2:96:3c:79:
c5:57:ba:a3:c5:f8:ab:7b:3e:4e:c1:28:b3:71:76:
15:77:7a:02:1a:6a:a1:c4:fe:9b:4b:f4:65:dd:2f:
75:5c:fe:a3:e1:7a:6e:35:f1:6f:d8:73:2e:52:6a:
fb:00:59:dd:32:c3:97:e0:9b:4d:b1:72:3a:61:ec:
7a:f2:ef:e1:e7:89:d4:75:9c:79:be:e8:6c:2b:ad:
14:83:e7:23:67:74:d8:8c:f3:c2:bd:53:bf:1d:57:
87:0f:7a:42:94:82:30:64:65:48:af:b8:82:c9:a5:
71:94:2f:95:f3:4e:76:fa:77:3e:71:37:ed:a2:46:
46:6f:72:6f:0d:42:98:f6:02:db:46:c9:aa:3f:f4:
e0:f5:26:4a:f7:ad:37:55:20:8c:6d:97:0c:3b:58:
fa:c1:3d:0b:f4:36:27:fa:92:99:29:16:07:47:47:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:0D:C4:47:41:5F:6E:BD:F4:71:19:EB:50:8A:ED:C8:A8:7B:2A
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:24:66:ab:bb:bb:43:0b:3e:b7:ea:de:1a:2f:96:59:96:44:
de:a7:be:79:9f:58:24:61:b1:62:14:87:05:35:7d:54:bf:ce:
64:f0:77:b2:ae:4c:0f:df:c9:78:65:6d:90:23:e7:05:36:84:
00:26:0a:7a:33:bc:6b:76:a6:d6:92:b1:c8:38:02:e7:53:3b:
11:61:e4:47:15:81:99:de:0a:7d:0a:9b:12:cc:e5:a4:f0:a3:
b0:f2:f8:58:d3:69:56:5b:10:a8:f4:84:3b:b1:df:d1:5c:ca:
92:f0:be:db:66:fe:e4:4a:75:37:96:56:2f:82:7f:1d:18:50:
89:a5:e9:33:8f:24:ad:21:8d:0a:73:54:a1:da:44:c4:9c:34:
74:41:ae:93:8b:df:f4:1f:e1:d0:6c:ee:c4:03:fa:31:c9:2f:
4e:f4:12:df:3d:24:e0:4e:24:02:ff:18:e5:2e:ab:ee:77:be:
02:e2:fe:08:b8:97:ca:30:f3:b4:d7:99:e3:a0:38:8f:40:ac:
b7:6b:db:08:fd:ec:d5:44:6d:33:77:b6:af:d0:ea:a7:02:89:
d1:6c:37:eb:4d:eb:5a:71:71:cd:c7:67:6b:9a:83:85:f9:bc:
bb:f5:67:43:0a:8a:5d:51:37:09:75:73:0d:46:ce:cd:be:df:
10:86:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:02 2025 by rpki-client