Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json)
Hash identifier: QIStf9t6mcd5uZwtUSX0Nc5tTKCUUBh7imi1tMpCx34=
Subject key identifier: F8:16:66:B5:A9:96:40:CB:D3:E4:92:3B:2E:DB:25:75:6C:A2:0D:E6
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial: 3639
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
Manifest number: 3639
Signing time: Fri 31 Jan 2025 14:35:17 +0000
Manifest this update: Fri 31 Jan 2025 14:35:17 +0000
Manifest next update: Fri 07 Feb 2025 14:35:17 +0000
Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: ++EY/W4hW9r1LVjm734jSXymjToLk40rtCAbFdRi2oU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13881 (0x3639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Validity
Not Before: Jan 31 14:35:17 2025 GMT
Not After : Feb 7 14:35:17 2025 GMT
Subject: CN=679cdfa5-dad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8c:65:c8:44:cf:16:88:69:ce:11:e0:d8:ec:
ab:50:e8:ab:81:99:e4:31:24:21:0c:56:d4:3e:a4:
a7:a2:2a:a7:5f:f0:cf:ea:3a:65:24:0d:36:8b:e5:
80:4c:6d:4d:c3:08:a8:09:2a:56:3d:b6:c0:af:75:
c8:7c:54:66:5b:a1:14:a8:86:9f:65:c3:74:b6:99:
a8:ff:c6:b4:79:08:96:cc:28:99:6b:27:2f:fe:5f:
9d:bf:74:57:6d:da:21:1f:11:1c:1b:06:70:a1:e1:
e7:42:2a:20:95:6d:51:7c:6c:e8:78:01:d3:78:cc:
76:92:63:3f:7b:98:2a:8a:42:72:de:db:9e:60:77:
01:e8:24:ff:bf:97:e7:da:c8:d4:0a:0c:47:01:2b:
a8:61:93:8e:57:b0:66:a9:9d:61:77:26:9a:1d:ff:
0b:b7:49:d9:4f:cc:f9:4c:be:28:62:d6:a1:70:db:
3b:35:b7:d0:32:16:47:a9:f0:7c:67:11:fd:42:49:
5c:63:a9:8d:7d:15:21:9b:b0:00:22:7a:93:d8:2a:
32:8f:a7:43:10:6b:67:c1:a3:9f:75:58:14:03:50:
6a:8e:db:a3:8a:df:93:01:4b:2e:c0:74:51:80:23:
aa:40:bd:d0:54:97:30:a3:1f:7d:94:04:50:5b:97:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:66:B5:A9:96:40:CB:D3:E4:92:3B:2E:DB:25:75:6C:A2:0D:E6
X509v3 Authority Key Identifier:
keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4b:cf:6b:48:7b:f9:2a:f3:d9:dc:3b:02:bc:de:85:4d:13:
b7:b4:bc:c2:3a:75:95:8a:26:74:1b:95:5f:c2:e3:c0:9c:7d:
55:fc:96:77:db:23:fb:6b:01:cf:b9:df:a2:fc:95:c2:bf:f4:
c9:94:43:24:e9:e2:85:fa:28:0d:a9:4e:88:fe:f3:bc:75:68:
63:cd:18:8a:35:41:dc:b1:fd:d1:7e:be:8e:bf:2f:39:0e:72:
be:d3:e1:41:c0:4d:1d:b7:b7:78:4f:3e:d3:83:ca:93:29:e3:
65:82:bc:aa:92:9e:00:3b:97:bd:a1:62:d3:73:ec:73:5c:48:
9f:d9:0a:b3:53:27:16:e5:49:c3:e6:73:9f:64:a5:18:55:38:
a8:6b:bf:3b:f8:20:1c:19:11:f4:42:be:06:57:e9:af:7b:6f:
03:22:92:12:1d:f1:aa:3f:5a:60:2c:d0:b3:26:af:d4:bc:c2:
7b:58:78:ef:81:fc:d4:e9:cd:71:91:87:4e:6b:f5:dc:6d:d0:
50:f7:ef:78:a3:84:08:ad:e8:9f:30:d5:cb:cf:44:90:fe:76:
e1:61:48:a5:e2:2f:47:89:17:2a:aa:0d:29:fd:6f:04:80:96:
4c:14:2f:1e:e3:87:7d:3a:a9:a0:6c:c4:d1:fd:ee:25:80:c3:
36:6a:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:50 2025 by rpki-client