Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json)
Hash identifier: 6jW8wf/MOLp7jHoxRylDXkI8RsuLOIc4OAC9pUJg3NA=
Subject key identifier: E0:06:2A:DD:65:97:34:3F:B8:DC:AC:E5:49:B6:79:08:F3:98:1A:9F
Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
Manifest number: 23
Signing time: Fri 31 Jan 2025 06:53:36 +0000
Manifest this update: Fri 31 Jan 2025 06:53:35 +0000
Manifest next update: Fri 07 Feb 2025 06:53:35 +0000
Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: rwgHZqQXFFlAE8ECN6kDl9oI7VXkrfC1ZSm2CNTSLHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Validity
Not Before: Jan 31 06:53:35 2025 GMT
Not After : Feb 7 06:53:35 2025 GMT
Subject: CN=679c7370-7fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:d8:7a:60:84:6a:bd:9e:d5:63:65:04:9f:
9d:40:c8:a0:fb:3e:cb:d2:40:80:22:ce:ef:27:7e:
a2:bf:ff:10:4b:28:33:a5:22:be:e3:da:2a:ca:11:
5c:9c:56:f5:5c:5a:aa:56:4b:11:ed:b6:e9:ee:51:
f3:11:1b:6f:e9:4b:fc:52:1f:d3:89:b8:7a:b3:67:
85:a1:d9:8c:96:5a:3a:8b:8d:0a:a5:62:88:08:04:
ac:85:9a:29:9f:df:94:8f:8f:d9:e1:38:b4:85:8c:
66:e0:01:c4:35:1c:81:79:ee:a7:d8:6d:20:4f:95:
11:77:13:7c:02:0e:2e:df:80:78:55:16:22:b8:83:
75:b2:55:85:4a:d9:e5:41:c4:07:86:12:b4:77:06:
97:20:88:fb:68:e9:dc:4d:f8:a8:34:3e:3c:6b:5d:
12:b2:65:4f:b7:df:12:c1:e2:e6:0d:5a:fc:3b:38:
fa:ea:55:9c:a6:85:ce:74:41:2a:9a:c4:5a:a4:bb:
a6:af:7a:1f:4c:31:6c:2a:54:c5:2c:77:6a:6c:42:
5a:09:db:63:20:87:0a:62:1c:d7:a8:be:37:39:1a:
fa:e3:b2:64:84:45:52:e0:7b:b6:6d:c9:91:75:98:
a2:e3:4c:56:a6:ab:b5:f3:93:8c:9a:99:f7:b5:32:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:2A:DD:65:97:34:3F:B8:DC:AC:E5:49:B6:79:08:F3:98:1A:9F
X509v3 Authority Key Identifier:
keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:6d:ea:17:14:de:37:a3:3e:17:f9:8f:62:06:7c:93:3a:
6c:c3:9b:9a:a9:de:fa:88:f3:63:4d:66:b1:09:ad:79:66:e9:
0f:b8:c7:5e:07:50:dd:5c:57:39:1f:55:9d:b9:6e:ca:04:76:
f8:9a:d5:8e:d2:80:d0:32:71:72:a9:56:a8:25:d8:5b:d2:68:
98:7c:b5:e2:75:3c:67:bc:b0:55:ae:61:af:4b:ab:2a:58:c1:
48:d0:4a:5d:7f:e5:d8:c9:66:d7:66:a7:b3:bc:f6:c7:85:bd:
2f:df:17:d4:32:be:ff:a3:77:dc:c9:2b:c4:60:7f:c8:36:28:
5e:d3:37:50:9f:f7:72:d3:87:54:89:10:b3:fb:be:d9:4d:41:
2a:9e:6c:b5:98:73:6d:99:d5:b7:48:83:26:77:b4:c1:7a:46:
d0:71:c2:32:32:76:f9:6e:f5:a0:ba:3b:6e:b3:a3:0d:32:47:
05:fe:e2:fd:b2:f4:f8:05:5e:4f:58:00:b4:15:3e:35:01:5c:
c3:46:8d:74:7b:f5:b2:79:45:80:52:69:06:d9:24:8e:8e:35:
52:24:93:e0:f2:8b:6c:50:4b:d5:4f:14:e9:6d:3d:71:40:87:
e3:14:82:b2:02:d6:e1:86:49:fa:0e:49:a7:23:7b:11:71:3a:
4e:2b:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:58 2025 by rpki-client