Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier: 0G9aZ6KVhbJYfRV35e/ajUtEqUq6wj27VQApfIohBxI=
Subject key identifier: ED:57:AD:43:20:6D:59:64:DE:C1:06:C0:45:BD:D3:52:A2:6E:A3:93
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number: 076E
Signing time: Thu 30 Jan 2025 21:20:46 +0000
Manifest this update: Thu 30 Jan 2025 21:20:45 +0000
Manifest next update: Thu 06 Feb 2025 21:20:45 +0000
Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: wQiVQZkN15KyodWtjtvXFgfFudPjsByUpoz9dCceZy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Validity
Not Before: Jan 30 21:20:45 2025 GMT
Not After : Feb 6 21:20:45 2025 GMT
Subject: CN=679bed2d-f59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:2c:4f:11:52:8e:93:06:5c:1a:55:ef:17:
ab:5e:bf:12:93:5f:f7:5d:6d:0d:b2:a6:74:e6:d1:
18:1a:61:5d:49:95:93:a5:47:42:1f:77:10:60:da:
0d:f7:b4:fd:ba:9f:ab:b3:4b:01:65:54:b5:7a:72:
0b:e7:93:c5:2d:d6:8e:b0:99:ed:8c:b0:58:a3:eb:
1c:9a:57:98:50:ca:5b:83:92:20:e1:9e:d9:d7:13:
b3:ed:72:67:eb:c8:84:9f:cb:e4:2d:97:49:d3:67:
3b:fd:56:ee:e4:7b:00:8b:13:a0:de:74:ca:eb:8a:
da:e1:1e:11:d4:31:96:52:b6:ea:09:3b:98:31:9e:
af:de:f7:c0:48:07:b7:d8:bb:c2:a5:cd:2b:22:b5:
a3:99:6f:c3:1f:f9:10:33:26:da:ee:3e:8e:5d:63:
13:64:60:37:95:61:11:00:85:19:7e:1d:d4:42:6b:
77:ad:b9:8e:1b:c4:4e:fe:ee:78:5d:37:52:66:4a:
4f:b1:40:12:5c:23:4f:58:c8:8f:5d:8b:93:cc:f2:
90:8a:73:26:4b:aa:cd:a2:a4:59:69:5c:ac:d2:62:
d2:17:ca:34:42:0c:44:d7:84:1c:83:95:a5:8d:5d:
54:6b:18:2f:19:a2:e1:6f:ef:a0:b1:8a:fc:10:45:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:AD:43:20:6D:59:64:DE:C1:06:C0:45:BD:D3:52:A2:6E:A3:93
X509v3 Authority Key Identifier:
keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d4:29:fa:63:66:b5:14:8e:38:2c:ae:da:98:f1:55:6f:66:
e8:6f:9f:ac:9f:8d:0d:f2:b5:b4:43:dc:2c:f9:78:8c:7b:3d:
c8:97:58:ec:f0:7a:4e:9c:19:9f:44:30:0d:4c:4d:54:f0:a9:
62:44:b5:e8:28:36:8c:e6:5e:e8:bb:94:26:4b:1f:24:da:37:
12:c9:f3:33:9f:31:e5:ad:f8:0f:30:b5:dd:82:d0:7b:13:7c:
28:7a:00:0d:c5:98:9c:8d:47:41:a0:c9:49:3f:18:0d:55:a2:
b6:28:bf:d4:aa:e8:04:5c:a3:a0:5a:6e:bd:58:3e:05:45:8e:
bd:e1:e0:bb:b1:55:e1:9e:2a:05:db:49:75:89:e8:8c:7a:b5:
d6:69:c0:89:41:c7:b0:81:4b:f5:10:0a:ff:b4:eb:8a:65:75:
bb:63:4a:aa:0e:00:90:c2:1f:c7:2d:b1:87:f4:cc:ec:ce:01:
ae:5d:22:28:b7:2d:c1:01:e9:41:b0:7a:46:7b:af:86:fa:15:
a6:cc:9d:b0:79:eb:8c:95:3f:37:96:59:74:c6:cc:19:0e:1f:
fe:29:bf:fd:ef:ac:ec:37:1a:53:b9:8f:bb:31:47:99:d1:66:
94:e8:7b:ea:c1:40:4c:b2:64:fd:14:99:0a:24:b5:06:54:82:
15:80:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:16:58 2025 by rpki-client