Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json)
Hash identifier: NfNQteE570i1mnRgj9K1jv08BwFQ0b3RpkAeu37JBgc=
Subject key identifier: 97:59:A4:6C:DF:7B:97:21:FD:8D:CE:1E:1D:96:5E:9E:EB:B4:84:06
Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05
Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 05:01:42 +0000
Manifest this update: Fri 31 Jan 2025 05:01:42 +0000
Manifest next update: Fri 07 Feb 2025 05:01:41 +0000
Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: OAV+ZPA9k6ZGTBUz2OUuVS6A+6kwoeLCSGZ13ZxEeOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05
Validity
Not Before: Jan 31 05:01:42 2025 GMT
Not After : Feb 7 05:01:41 2025 GMT
Subject: CN=679c5936-738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:a3:70:e5:fb:4f:d7:e8:7c:3c:1e:b5:ce:
79:ad:b9:17:4f:8f:15:16:88:f8:52:f9:f7:b0:a3:
a6:d3:bf:78:53:b9:8a:11:0f:e6:99:2c:a9:ca:14:
3a:cc:16:26:64:04:49:47:60:01:f3:e0:83:30:af:
bc:03:50:5b:8f:d2:a0:13:8e:6e:db:a5:46:9d:59:
57:0c:a6:64:5d:70:07:f5:18:33:fe:22:d2:b5:51:
a7:d9:cd:14:95:98:0a:42:a9:83:92:fd:62:09:36:
c5:1c:99:e8:de:63:35:b4:f2:ed:cc:6f:93:c4:d7:
2d:d5:a9:28:c6:e0:0e:ef:67:23:cd:50:62:06:be:
94:6c:98:7c:cb:da:ac:00:c4:d2:16:98:ff:68:cd:
40:58:af:f0:97:46:42:bd:2a:77:19:4b:09:ec:49:
ee:bd:95:08:ef:57:0b:2a:c0:49:c9:5b:99:28:c8:
8e:6d:14:c2:fc:20:82:92:7a:0a:ab:51:09:6a:fd:
09:34:79:52:2a:4d:77:52:81:e8:04:38:6c:a4:d8:
07:31:c8:d4:87:42:1f:0c:89:92:da:d3:d0:fc:9c:
71:9c:f9:65:e7:09:1b:93:79:52:35:b4:d5:1c:b1:
90:0f:35:a6:f5:f7:f0:26:ed:6b:91:3b:5f:27:83:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:A4:6C:DF:7B:97:21:FD:8D:CE:1E:1D:96:5E:9E:EB:B4:84:06
X509v3 Authority Key Identifier:
keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ef:92:dd:57:ea:cc:d5:b6:31:3d:82:5c:53:b5:12:1f:ae:
f7:e1:96:31:ac:3a:ab:d5:53:af:20:e2:32:50:9a:b4:6c:6d:
d0:85:5b:8d:d7:bc:be:85:8f:f4:36:a0:18:95:ed:47:c8:a9:
25:e2:47:dd:2e:f2:17:cc:5a:69:f5:84:80:85:10:05:bf:21:
49:2a:cf:4d:77:45:75:55:79:6a:67:52:b0:4f:ae:2f:98:7d:
49:7a:e8:70:b5:6a:22:4e:60:14:60:d4:9f:87:a3:e4:29:bb:
b8:7e:b8:f1:2f:3a:39:25:f4:6e:b0:e0:1b:da:9c:d8:33:27:
de:4e:97:04:76:59:58:0b:eb:04:85:5d:dd:70:b1:a7:65:55:
01:47:4f:aa:91:91:e9:c3:d2:44:1f:a8:9b:07:00:07:22:6f:
5b:b9:94:2f:5b:6f:dc:69:67:9b:7c:d8:bf:bf:ac:5a:35:ff:
42:a2:4a:75:fe:89:cc:89:69:1a:82:72:c3:54:4a:df:7c:3b:
ef:92:2b:29:20:b0:56:b9:96:cd:4f:f1:35:71:52:f8:bf:05:
eb:7e:e4:c3:6e:a6:ff:fb:c6:1c:4a:16:75:8d:83:fb:cc:7b:
a0:2d:ab:22:15:39:22:5e:56:41:96:73:0a:0d:5d:4a:40:65:
25:4f:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:03 2025 by rpki-client