Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier: kHKqpHzb6Ldsh7LjApw+Wed7jzXw7ghBPNs5wtpGwPw=
Subject key identifier: D2:B1:10:3D:8B:2C:85:CB:6A:44:5E:7A:77:57:D5:A5:19:0E:93:30
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number: A7
Signing time: Fri 31 Jan 2025 05:16:05 +0000
Manifest this update: Fri 31 Jan 2025 05:16:04 +0000
Manifest next update: Fri 07 Feb 2025 05:16:04 +0000
Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: nEwbIT0EpIie0hC+rTxkn08+xiY7avLgRW3ZNT0/dzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Validity
Not Before: Jan 31 05:16:04 2025 GMT
Not After : Feb 7 05:16:04 2025 GMT
Subject: CN=679c5c95-6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:48:cf:43:ea:bd:cb:57:24:b4:00:3d:ff:
db:ec:88:f6:23:f7:7d:99:77:60:fd:89:bd:f8:5a:
01:df:98:0c:d3:d0:f9:5d:75:7d:7e:fe:16:60:86:
f6:44:10:4c:e0:b1:e3:8f:05:a6:dc:2b:45:97:0b:
8e:91:5e:45:91:39:b4:62:f9:13:a5:fc:bd:32:36:
b4:e7:3e:ab:63:25:9d:ed:3b:a1:61:45:a4:a9:01:
d2:cf:75:de:ff:be:56:f1:c6:58:8d:49:58:9d:f7:
ff:de:a9:0e:ba:15:36:ed:d7:63:32:06:eb:74:fb:
5d:88:2f:3e:96:ac:82:29:c1:a8:7e:24:5e:d7:a3:
92:f7:b8:cf:bd:ed:92:c3:d4:d2:3d:f9:91:44:ea:
1b:d8:99:e2:47:06:67:4e:f6:4a:b7:4b:cf:c3:b9:
65:a6:78:14:c3:55:03:60:8d:86:40:79:df:d1:19:
8c:44:3b:a8:d9:a9:b5:c3:e1:49:95:5f:ca:55:e7:
d3:ba:0f:87:1b:a2:9d:0f:45:22:6f:6f:d0:c3:d2:
88:a3:69:f0:10:55:8d:92:d6:2c:ab:13:05:c5:8f:
c5:ae:3a:61:71:5d:64:b9:cd:b6:f2:be:89:c8:26:
e6:99:3e:00:de:88:67:82:c6:3e:af:af:1f:65:6f:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:10:3D:8B:2C:85:CB:6A:44:5E:7A:77:57:D5:A5:19:0E:93:30
X509v3 Authority Key Identifier:
keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:53:69:22:88:f9:cd:a0:1e:fc:f8:63:3e:e3:b6:7c:d5:
4b:e7:e1:36:44:90:24:f4:0e:2b:47:3f:6a:ab:19:32:ae:fc:
66:b5:73:6b:f5:b9:56:dd:91:dd:cd:98:c8:1d:1f:37:63:d3:
9b:01:40:8e:1f:56:f5:54:97:07:48:ea:3e:ae:40:04:2e:cc:
b4:6f:5e:e0:73:40:bc:52:39:20:80:a3:0e:37:d2:88:2b:af:
c1:75:d4:d9:05:15:7a:74:9b:f8:ff:77:b4:37:eb:7c:80:1a:
8b:eb:46:ba:9b:1d:5b:03:ed:44:ac:8b:e7:7d:ca:62:96:83:
76:15:18:de:ba:ff:78:75:b3:fa:09:e2:f1:6b:fd:ed:2c:81:
11:84:f8:7e:5f:fc:f5:5c:e6:87:34:50:86:0a:b7:b1:63:e0:
c5:19:d0:35:e6:bc:07:a5:62:6c:56:01:28:6c:22:74:3c:3a:
18:01:16:1d:76:9e:b9:f0:cd:c0:b5:83:9a:8b:e4:1f:1d:fc:
ef:6c:83:bf:5f:a7:17:34:e2:d8:83:9c:98:bb:60:15:73:a8:
bb:05:f1:64:97:a0:39:51:20:e8:ed:a8:51:04:80:65:87:52:
d5:c3:9c:25:06:7d:5c:df:0b:2b:e8:75:97:f1:a0:9e:1d:70:
de:0e:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:42 2025 by rpki-client