Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier: l+3KUdSLtScQAFwsf44JWM1RUSkJ2MGoND+nb+RJxhg=
Subject key identifier: 94:FE:0A:72:09:39:B3:32:F6:D3:BB:B0:C8:0A:FD:B1:FE:92:47:EA
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number: 0870
Signing time: Thu 30 Jan 2025 20:41:11 +0000
Manifest this update: Thu 30 Jan 2025 20:41:11 +0000
Manifest next update: Thu 06 Feb 2025 20:41:11 +0000
Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: jgu9p6iaKrThyVvUANEMJ49PfOwxyJ7Yz/x3bpTvBKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Validity
Not Before: Jan 30 20:41:11 2025 GMT
Not After : Feb 6 20:41:11 2025 GMT
Subject: CN=679be3e7-1724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:7f:2b:27:86:6d:90:3a:61:9b:e7:c2:c4:
d4:67:dd:06:18:81:0e:ab:3b:e6:65:4e:78:ea:3e:
ee:7f:54:9a:e4:48:51:c5:e3:cc:6d:4b:e0:45:a2:
f8:3e:d4:70:5f:bf:4a:93:fa:fe:84:14:a2:02:ca:
20:96:a7:7a:1e:64:32:29:68:73:a4:15:db:dc:0b:
f9:15:4c:a6:ce:f1:28:9f:ef:3e:f2:9c:69:1b:a1:
b2:1f:a8:07:b0:46:22:5a:97:f4:9f:8a:d9:ca:0f:
73:b8:ab:4f:fd:f0:11:9e:88:70:90:dc:bb:a7:fc:
3a:b0:a4:8a:1e:8e:a1:3c:cd:34:d3:8e:98:1e:8a:
42:02:ba:ef:68:fa:9b:42:3d:fe:95:03:66:fb:24:
30:49:76:dd:16:e0:04:e0:d6:eb:76:92:52:d0:12:
e6:ce:d4:64:ae:df:0c:8b:00:84:69:c8:80:fe:7c:
fb:bc:a8:d5:5d:1c:8a:11:e1:bd:ef:b6:b1:a2:6e:
de:d4:07:60:d7:52:99:ca:3e:5c:6f:54:8f:0c:70:
30:47:8f:8a:42:ff:9d:b7:f8:44:ef:30:83:e7:2b:
a2:de:4d:c7:ba:0f:6b:77:8e:d8:ed:88:61:ee:27:
87:ee:96:bf:46:aa:d8:cb:15:11:39:d1:17:5f:74:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:0A:72:09:39:B3:32:F6:D3:BB:B0:C8:0A:FD:B1:FE:92:47:EA
X509v3 Authority Key Identifier:
keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:f1:c3:c3:fd:77:57:13:fb:76:b8:b7:59:d6:a5:1d:93:
10:28:ea:42:5b:37:35:87:df:7f:c5:24:e9:14:91:98:09:1c:
6c:97:50:ac:0f:d5:71:7e:f4:c6:2c:66:0e:26:e9:54:33:05:
63:ac:68:f3:b4:3e:d3:3d:cd:9a:b9:60:ba:d3:1b:06:8b:c7:
42:5b:56:aa:0b:d5:ae:c6:44:0f:1b:9c:c6:47:a2:79:43:c9:
07:e5:59:a2:53:9b:95:ea:26:e9:47:74:2f:a4:c3:ec:c4:47:
11:70:01:da:16:e2:4b:1b:9f:6f:15:fa:7f:90:89:d5:0b:17:
07:4e:83:94:08:1e:54:df:1c:a8:be:84:44:75:07:76:cc:3e:
c9:c5:5e:a2:02:a6:02:76:69:6c:76:f8:85:ab:4d:e4:66:82:
91:76:18:01:f6:98:41:71:a0:52:0e:d7:99:5e:8f:52:59:79:
63:b4:59:7c:3b:39:38:65:c9:1c:bb:e0:af:eb:1c:62:24:2a:
5e:94:8b:ae:d0:13:de:6c:20:8c:51:c3:7d:03:3e:fc:44:8e:
ac:be:51:30:b1:c7:9a:10:a0:25:02:d9:24:ae:0a:8e:6b:6e:
5d:e0:ba:99:8b:c0:5e:27:d6:b7:67:3d:22:fd:dd:1e:67:9f:
79:3b:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:34 2025 by rpki-client