Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft
File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json)
Hash identifier: 7HAtKvIZoUA6md5738gNLs3v1EMTwjNIHUKdPpBj0OE=
Subject key identifier: 50:3C:B0:D7:94:12:35:F2:42:96:49:D5:6E:90:17:85:AA:EA:57:16
Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31
Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31
Certificate serial: 11AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft
Manifest number: 11AC
Signing time: Fri 31 Jan 2025 17:11:19 +0000
Manifest this update: Fri 31 Jan 2025 17:11:18 +0000
Manifest next update: Fri 07 Feb 2025 17:11:18 +0000
Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: DfH60zr5QLOlXNtHRZA66Zed8ZOdq0rgRRDOd5gn0AE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4525 (0x11ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31
Validity
Not Before: Jan 31 17:11:18 2025 GMT
Not After : Feb 7 17:11:18 2025 GMT
Subject: CN=679d0437-6c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:dc:37:0d:a3:01:7a:b1:37:94:29:32:e0:
8c:b3:57:a6:f7:8a:f9:15:3d:ee:c7:41:7b:7c:60:
2d:90:1c:5b:d5:7f:e5:84:0d:ea:e5:ad:44:d9:05:
87:19:7c:99:a3:80:36:5d:69:0c:f0:5d:b5:d1:ca:
01:d2:2e:39:8a:ec:76:0c:1c:13:94:10:97:bd:ee:
ae:f7:72:ff:dd:f2:33:3c:7a:97:2b:46:ea:62:23:
b2:b7:c1:9f:c1:74:96:14:d0:6c:e0:46:16:f2:31:
e3:36:2f:3d:0d:74:f0:a9:50:c5:8c:c5:50:c2:c3:
a4:cb:38:d6:13:47:84:e9:86:52:82:35:4a:42:af:
98:1c:7c:cb:96:80:c5:b2:89:9c:98:31:6a:51:07:
8e:c0:f5:07:63:7a:6f:d9:52:9a:60:e1:6f:82:ae:
66:f3:c4:52:6f:68:4a:7f:90:0f:ec:7b:1c:0c:8b:
dd:e2:17:db:97:9b:46:5f:9e:24:87:46:48:c1:d5:
88:b0:8c:d0:c7:c0:f9:36:0f:f2:84:b9:43:b2:ad:
5d:b9:f1:be:cd:f7:ec:6f:e2:9e:e1:75:07:c1:38:
ed:26:de:bb:a6:2a:5f:14:f6:07:6d:a4:10:24:12:
4b:b1:7a:1d:6a:b9:e5:de:b5:e1:bd:72:76:bb:c9:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:B0:D7:94:12:35:F2:42:96:49:D5:6E:90:17:85:AA:EA:57:16
X509v3 Authority Key Identifier:
keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ee:63:14:a2:5f:c2:22:7a:30:47:d3:5f:b4:8d:a9:b8:07:
d2:cd:9d:33:0e:f2:9f:3b:d3:97:7a:99:80:e3:16:61:ab:97:
01:0e:3a:f3:bd:b3:c6:34:37:ef:39:ea:9b:2d:85:83:9b:de:
93:af:48:6b:55:61:be:cc:1b:a9:c8:d8:c8:c5:77:ea:68:9d:
76:2f:fd:bd:8f:9e:ca:20:ce:f3:05:88:79:d9:f2:b7:79:2c:
50:9f:5d:b2:02:6d:c6:a8:9e:0a:12:e6:96:a0:02:cf:7e:4a:
56:40:04:aa:db:b0:e9:13:8b:37:a6:38:ea:fb:20:8f:85:ba:
f4:d4:3b:f5:fa:4e:94:17:c9:02:63:7f:a5:7b:eb:60:3b:cd:
96:b3:b2:26:27:95:c7:b3:90:b6:70:21:04:2a:d0:9a:69:7e:
32:47:56:d1:78:26:4f:92:89:ae:33:d3:81:bf:3a:62:fb:9e:
54:be:7b:3a:56:3d:0f:94:1a:91:02:35:da:c2:6b:b3:48:b3:
b5:6f:3f:5c:52:a6:4f:6a:12:bb:6d:ad:a7:da:1d:3d:78:ce:
65:e4:ac:35:e3:c1:be:15:43:4b:d7:9b:ac:cb:f2:62:8b:bf:
7e:2c:36:59:94:31:91:7b:d9:b8:99:62:0e:05:12:85:85:e3:
23:d4:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:53 2025 by rpki-client