Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
File: pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json)
Hash identifier: XsAk1lSmAv/4Dg/1HKLkHPtiScIw7QTUzcgeaGi7H9A=
Subject key identifier: D4:D3:32:4A:06:35:D6:36:E0:28:A5:CB:99:5B:0F:4C:DB:76:B3:BE
Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
Certificate issuer: /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
Manifest number: 06CB
Signing time: Thu 30 Jan 2025 22:02:43 +0000
Manifest this update: Thu 30 Jan 2025 22:02:42 +0000
Manifest next update: Thu 06 Feb 2025 22:02:42 +0000
Files and hashes: 1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: BF38z8h230H63Sy3amOyDArFfps4MclI0I2pVON5W1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Validity
Not Before: Jan 30 22:02:42 2025 GMT
Not After : Feb 6 22:02:42 2025 GMT
Subject: CN=679bf703-85d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:8d:9d:04:f2:d1:13:39:4d:d3:fb:44:da:
90:14:73:b1:43:3a:0b:33:a9:70:a9:47:a5:e8:9b:
32:67:1a:5d:cb:b1:ac:57:da:71:e9:06:fd:da:1d:
9d:82:5c:90:02:71:cc:ee:72:77:39:3e:66:73:e1:
cd:06:56:3d:5d:0f:80:78:ff:50:f3:ee:bc:7f:06:
da:75:81:d5:8a:59:be:65:4c:09:44:1c:45:3a:ae:
ee:4e:3c:f7:d8:ec:df:cd:84:b0:a2:ca:48:0e:5a:
c9:b8:88:a8:ac:48:bd:e1:1c:c3:bb:76:6d:b7:68:
9b:83:8c:21:44:02:a8:54:00:96:86:0a:86:ba:27:
d4:83:82:9b:e2:af:d8:e2:c9:2e:f3:ca:a4:44:60:
ed:94:0e:fc:ec:a5:e7:4c:0b:71:12:89:15:15:f3:
e3:ff:a6:3b:9c:89:2b:3d:b7:f4:a5:48:7f:90:62:
0b:7a:17:73:62:d9:be:d6:7f:4f:e7:cb:5b:e0:57:
14:f7:64:e8:cb:0e:f0:4d:00:e3:7a:af:09:97:9f:
48:1c:70:50:57:d8:ee:1b:3c:9c:20:83:85:0e:a8:
ae:eb:c9:b6:71:65:61:51:43:20:9c:a7:3e:91:d6:
f4:85:51:09:08:87:b2:d9:c4:e2:b5:c8:4b:8f:15:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:32:4A:06:35:D6:36:E0:28:A5:CB:99:5B:0F:4C:DB:76:B3:BE
X509v3 Authority Key Identifier:
keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:50:a3:d0:8c:82:26:fe:28:4e:dc:a9:08:d9:53:09:ca:01:
36:f2:0a:ed:23:3f:f2:da:08:3e:1a:8f:63:d3:92:1f:dc:9e:
61:72:f8:c6:96:f5:c6:48:c3:e5:bf:21:88:8c:ca:85:6a:4f:
a3:a2:f3:6c:dc:3a:81:d3:33:9d:e4:fd:b9:50:d7:88:7a:ee:
99:65:0e:9a:d7:d5:ac:fa:9b:44:98:2c:b7:46:e9:9e:45:34:
19:80:82:bc:70:ad:1b:2a:8a:ce:76:0c:cf:b4:c4:69:7c:83:
3b:b8:8f:6e:79:7e:31:fc:d0:67:13:e3:84:7f:44:8f:db:ce:
f1:cb:ef:1b:d9:8a:20:e4:36:fe:e7:46:ea:fc:34:33:82:ab:
45:8f:db:af:79:df:8d:c3:94:53:7c:56:bd:93:9a:72:c2:a6:
7c:6c:c9:84:50:3a:ee:dd:93:ac:58:3f:50:e3:3c:51:24:53:
69:e9:5a:2d:04:08:bf:64:09:2c:ed:a7:27:f1:f4:4c:71:5d:
23:32:0d:91:86:bc:49:60:1e:4b:17:c5:11:db:56:b1:2f:4c:
f0:8d:93:0c:34:40:d6:74:89:28:46:ea:10:7e:2d:c1:44:e9:
4c:3b:d5:b6:cf:f3:e5:6e:01:c8:b8:2b:a7:ab:d2:b8:31:ac:
7c:65:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client