Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier: y7iS+uycGNQCooSBq7TU6oGEtI9EeQIOmgohCVyv/Ns=
Subject key identifier: 14:06:60:44:A4:B9:FC:21:C2:CE:90:41:74:7F:C1:38:CB:58:75:19
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number: 51CF
Signing time: Fri 31 Jan 2025 15:08:20 +0000
Manifest this update: Fri 31 Jan 2025 15:08:19 +0000
Manifest next update: Fri 07 Feb 2025 15:08:19 +0000
Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 9a7PQ5LLz9J3joejzKjDJ70Bz5B9plRswnzgeWuyMi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Validity
Not Before: Jan 31 15:08:19 2025 GMT
Not After : Feb 7 15:08:19 2025 GMT
Subject: CN=679ce764-d410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:25:14:b9:8a:4e:9d:79:91:a2:40:77:99:
2a:9c:6f:09:ff:97:01:f5:95:3a:57:a6:af:04:19:
a9:e0:23:a2:53:c6:29:f3:71:fc:3b:ab:9c:b3:f0:
7c:b2:ef:f3:91:e2:71:ae:0c:f3:c6:98:8e:7e:66:
3e:44:9b:80:bd:ce:3d:d2:18:2c:8c:df:e5:cf:3e:
b4:c4:c7:84:dc:3a:2b:b9:72:94:db:85:94:0f:94:
11:23:f9:56:b4:6b:a2:b8:27:d7:77:7e:3a:e7:30:
92:dd:bb:4f:16:21:5d:75:00:76:d1:e2:f4:2f:86:
fe:cc:dd:78:df:f9:51:a4:a1:c0:2c:ef:4f:00:fa:
80:cb:9b:08:37:2d:35:a7:a4:31:52:5a:81:84:39:
07:81:41:2d:fc:47:f3:b1:03:fa:4a:ea:9a:d4:b5:
b1:69:2a:a0:8a:a5:d7:66:d8:c0:a4:43:fe:f5:5f:
9c:15:65:22:93:ec:fb:d5:ac:a4:89:64:fc:27:c5:
20:69:c7:f0:56:11:54:cc:6f:f7:af:d5:8e:f7:c6:
f0:37:94:60:bc:25:99:14:bd:5b:2c:25:cf:0e:75:
08:01:31:25:11:9f:95:a5:fb:93:83:f7:86:fd:85:
14:fd:56:7d:4a:66:21:eb:69:0e:e6:a1:ae:e4:00:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:60:44:A4:B9:FC:21:C2:CE:90:41:74:7F:C1:38:CB:58:75:19
X509v3 Authority Key Identifier:
keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:bf:fc:65:96:c1:0e:e2:aa:cc:37:3f:59:f0:93:d4:29:
95:66:75:af:8e:aa:7a:a0:0e:0f:71:26:16:0f:63:7f:4f:6d:
ef:e8:3f:9a:2a:4e:7c:77:93:48:da:fd:1d:27:80:da:a1:5e:
f7:72:bd:aa:17:37:13:32:76:a0:99:70:89:e6:b3:63:4a:49:
2a:15:7e:69:45:47:56:cf:53:c2:8d:b7:ac:ce:21:46:6b:72:
7f:c9:e4:bc:e4:42:50:26:86:e5:23:04:ee:70:fd:23:cc:19:
5f:2b:95:21:1d:0a:de:88:e3:27:b0:7e:99:14:06:31:ee:1b:
84:bf:5e:1c:72:d8:3b:a4:1d:31:df:f0:21:03:9f:aa:db:e3:
65:1b:f0:be:31:aa:09:43:6c:b9:f7:64:a9:b3:03:91:59:5e:
68:87:f9:9a:de:80:a1:df:83:a7:76:77:ad:31:93:77:b7:5f:
63:12:9d:a4:10:12:1e:a5:22:d7:b6:32:e3:ae:dd:d6:60:8a:
94:a5:b0:be:a0:05:42:76:18:3a:2b:0b:5d:9c:e1:0b:1a:44:
eb:2f:f5:5f:b0:4a:39:8b:90:c7:13:71:13:2a:83:57:e3:ee:
7d:21:3f:91:b0:d6:6c:5c:a9:6b:ce:57:56:d7:ba:be:e9:0b:
a1:53:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:13:37 2025 by rpki-client