Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: pQXJFBE21ekzfRw6ci7CfKviVc/aAOsVCrfDUiRSuIM=
Subject key identifier: 70:7A:4A:2A:70:7E:5D:9A:CE:B8:DE:36:58:A3:F9:DE:48:8D:7D:2E
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: A8
Signing time: Fri 31 Jan 2025 05:15:18 +0000
Manifest this update: Fri 31 Jan 2025 05:15:17 +0000
Manifest next update: Fri 07 Feb 2025 05:15:17 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: ZclRrSPsTkVh4003FRYWOKijkhdDjbILZckOsOzbWKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Jan 31 05:15:17 2025 GMT
Not After : Feb 7 05:15:17 2025 GMT
Subject: CN=679c5c66-022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6f:8f:36:0a:8a:79:75:df:9c:cb:39:61:fe:
ef:42:af:89:05:ad:52:f5:6f:bb:c8:fc:ff:84:30:
99:ac:ca:d1:59:89:3b:d6:6b:e3:b9:72:4e:13:40:
44:82:53:b4:98:6e:ca:d9:4e:69:ad:d7:09:f8:d7:
ab:fb:fb:30:77:96:dd:47:97:72:f6:0d:74:c5:6a:
6f:af:c3:a2:cf:42:d4:bd:4f:1f:79:c0:ab:85:f5:
46:e8:65:64:5e:47:f3:40:98:a3:78:00:14:cc:16:
8f:8f:70:f4:e9:2b:10:fb:0a:4f:a8:7e:61:ba:8e:
d2:f4:e1:3c:3e:4a:b3:c0:c6:2c:c8:64:f2:82:c7:
fe:a3:d7:d0:81:e2:b3:c7:30:7f:f7:c2:54:23:7f:
be:e9:8e:8b:33:54:03:c1:47:f9:39:6e:26:12:58:
b2:62:ab:61:bb:05:db:8c:4c:05:16:ea:cc:00:fc:
17:9f:2d:a6:e1:04:62:37:c4:31:74:85:0e:a7:29:
a5:ab:7e:64:ad:a7:dc:63:ac:32:32:e3:fc:09:7d:
69:b5:95:d5:84:99:d9:9e:f7:b0:ae:01:c1:23:9f:
70:84:60:83:5c:df:5a:94:45:b2:54:7f:af:28:e3:
5f:25:ba:40:3e:99:4e:b2:92:71:73:b9:74:4e:5d:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:4A:2A:70:7E:5D:9A:CE:B8:DE:36:58:A3:F9:DE:48:8D:7D:2E
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2f:e5:bf:d6:24:34:0c:92:c2:48:c0:42:af:c8:16:58:da:
f1:fe:1d:a1:be:a2:37:7f:69:13:5d:cb:78:e8:4f:9d:c1:a5:
b4:95:a0:53:08:fb:da:ff:f1:d3:a1:41:9e:01:72:9a:70:17:
55:9c:62:e6:b4:70:27:64:bc:51:a5:50:07:b5:88:9b:5a:90:
2e:bf:5c:6c:f8:2f:6c:90:c2:1b:83:91:c6:cc:d8:d0:e8:17:
12:a2:2f:ab:c8:4e:36:18:55:f4:3e:85:93:45:9f:81:fc:fb:
15:6a:2e:7d:53:3d:cb:6f:0e:6d:cc:99:95:fa:38:dd:1d:37:
14:6c:15:dc:66:0b:f0:87:7b:45:46:8f:5e:ea:4a:a2:02:1c:
62:b6:a9:8e:af:19:99:5e:9e:4a:1f:c5:b7:b1:45:9f:2e:8d:
73:f8:3c:60:8b:a5:e0:2a:4a:3f:2a:51:ef:f5:65:94:0a:c4:
d2:47:59:09:95:dc:c9:0d:b4:d3:c3:f9:d3:c9:55:82:c0:63:
d3:89:e6:00:bc:eb:db:c4:7a:6a:ba:b1:73:a8:45:3e:f5:9e:
d9:64:56:dc:cc:ea:a4:25:84:a4:25:03:d9:e5:25:9a:e1:ec:
57:8a:e4:95:b1:cb:e7:b0:51:cb:50:99:c2:34:c4:75:2e:2c:
d4:d8:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:49 2025 by rpki-client