Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
File: 57DhU8QU0ThUitp16M0FzWk2cgY.mft (raw, json)
Hash identifier: rbTYX4tmJQ57HLLp/Y1jHHnAoG+8ETh45X6FYrCJ/lQ=
Subject key identifier: 2F:E0:AE:ED:74:EE:0D:3C:3C:DE:CA:93:9E:FF:EC:CA:BC:FF:6E:71
Authority key identifier: E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
Certificate issuer: /CN=A91B42CA/serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Certificate serial: 344A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
Manifest number: 51CD
Signing time: Fri 31 Jan 2025 15:08:15 +0000
Manifest this update: Fri 31 Jan 2025 15:08:14 +0000
Manifest next update: Fri 07 Feb 2025 15:08:14 +0000
Files and hashes: 1: 57DhU8QU0ThUitp16M0FzWk2cgY.crl (hash: Dc9/pGfB5KRs9FFni8OogCdcPKYxWwTr42XxWdY6Xpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA/serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Validity
Not Before: Jan 31 15:08:14 2025 GMT
Not After : Feb 7 15:08:14 2025 GMT
Subject: CN=679ce75f-e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:31:54:70:86:fa:6d:bb:22:61:32:4b:35:
85:35:12:97:bb:6d:cf:b8:5f:ed:4a:2e:84:3b:09:
75:76:ce:dc:e8:8a:8c:17:02:66:d6:7b:61:8f:6a:
f6:ae:9a:51:9f:0b:5a:b9:e1:aa:84:f0:3a:dc:68:
d2:46:58:d9:bb:a3:8e:33:62:e8:e2:73:90:c7:0d:
65:df:86:db:b5:2c:20:dc:66:38:96:88:b6:ab:f4:
bb:7c:f2:6d:73:fa:c3:6e:81:a0:db:8a:92:d5:6f:
f3:6c:1a:53:c4:19:e4:14:62:ae:9e:a9:97:9b:08:
f9:41:fa:0b:c1:47:c3:cb:9b:72:84:e9:b7:4e:c1:
48:1c:3a:7e:b0:10:b8:bc:cd:e5:99:4c:d3:b1:ae:
cd:e6:0d:b8:fd:43:d1:e4:62:8d:b1:08:d1:d7:50:
37:73:22:94:b1:32:b7:5f:d9:4d:e6:b6:73:30:59:
79:3f:dd:d9:5b:a2:3e:dd:f2:3a:ba:b9:72:0f:75:
63:c7:e3:61:70:3e:53:4c:37:24:af:0e:4b:7b:53:
d4:07:62:46:91:1c:51:78:69:a1:e9:c7:8d:57:3a:
7f:7b:a8:df:d4:f0:66:f4:0e:09:3e:2b:03:72:f5:
60:a2:e2:e1:47:f6:3a:d8:73:5e:65:49:25:25:37:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:AE:ED:74:EE:0D:3C:3C:DE:CA:93:9E:FF:EC:CA:BC:FF:6E:71
X509v3 Authority Key Identifier:
keyid:E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:4d:1b:fd:f5:d0:83:45:6d:38:07:4f:13:a8:9a:07:ea:20:
97:12:48:76:3d:f1:b4:40:07:17:45:11:3d:78:7d:63:c3:e0:
ca:4b:f3:79:a0:8b:ef:7f:48:ba:4b:47:91:4a:4b:27:97:85:
6a:98:2e:f6:87:e2:64:cd:72:46:93:88:dd:c9:72:dc:31:c3:
5e:88:71:d1:c9:59:64:89:14:b9:01:5a:04:69:2c:28:f3:36:
c7:d3:9c:c3:8c:c3:b7:fe:db:eb:42:c5:68:2c:b5:b1:85:b3:
2d:64:97:47:51:92:d7:02:85:96:09:79:6a:8e:60:f7:70:92:
7c:2c:d5:00:08:6b:99:51:87:bb:18:59:5c:98:e5:d7:09:e1:
05:25:d2:c8:e0:97:c4:a9:19:7d:78:94:4c:46:cc:82:54:49:
cb:23:00:fd:08:a8:cb:87:fc:a1:cf:17:4d:e7:41:d7:04:ba:
2c:bb:f8:11:4a:41:9a:f2:e4:fd:03:10:8e:00:55:af:5d:91:
93:f5:a1:17:f3:30:8f:cc:fe:0b:26:ab:b4:2f:d5:15:0c:84:
4a:07:85:8d:85:81:3f:56:85:78:53:06:ff:38:79:8e:6b:14:
b4:78:ff:82:c7:2f:42:8d:94:e2:d0:80:75:58:59:ba:0c:8a:
89:76:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:29 2025 by rpki-client