Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
File: REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json)
Hash identifier: sAL9XBjjyJS9cvbiY5b+yUcyTxbmoPnwG46RyIumTxA=
Subject key identifier: 42:1D:5C:30:D9:52:BE:51:3B:3A:BF:5E:7E:D4:E2:80:0B:25:C4:22
Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
Certificate issuer: /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Certificate serial: 3445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
Manifest number: 3445
Signing time: Fri 31 Jan 2025 15:20:50 +0000
Manifest this update: Fri 31 Jan 2025 15:20:49 +0000
Manifest next update: Fri 07 Feb 2025 15:20:49 +0000
Files and hashes: 1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: uvnhKhHjfEqSQc6mj8Nsf6bkVPwVsUrgKJDZGFNOzb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13381 (0x3445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Validity
Not Before: Jan 31 15:20:49 2025 GMT
Not After : Feb 7 15:20:49 2025 GMT
Subject: CN=679cea51-f754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:58:99:98:57:6b:96:25:76:8d:52:9c:fa:
85:96:39:d0:0b:0b:07:26:5e:a7:ad:ca:14:75:59:
ac:d4:c7:d8:21:8d:7d:e2:b8:e3:9b:0d:18:03:06:
22:65:2b:cf:06:3e:17:09:01:cd:8b:4f:ee:30:e0:
46:a0:07:53:a8:b0:75:a4:e1:f4:39:6e:81:1f:97:
68:12:d7:6b:7b:04:b1:b9:5f:1d:cb:5d:49:43:af:
78:20:34:2b:8e:79:f6:c3:c1:76:d4:cd:c2:c1:dd:
2a:76:f1:ff:5d:b2:aa:43:51:70:33:78:3b:70:25:
31:af:a0:a8:38:53:8d:64:9b:bd:b7:34:46:35:6a:
4e:28:47:7e:47:ac:29:fe:ba:81:90:57:63:17:d2:
eb:c3:fd:d1:76:7e:b3:67:0d:b3:a3:3a:c5:d2:7f:
30:5e:3d:3b:22:6b:b3:52:b8:11:a8:7e:60:9e:00:
96:d7:e9:d9:3e:af:ff:04:69:3d:f8:00:c5:08:99:
74:fa:7c:3f:7f:19:c2:d2:c3:f3:19:25:55:43:48:
46:96:a2:b1:b8:cb:53:bf:4b:24:0c:c0:0a:fd:74:
7b:26:23:98:8d:24:44:0f:7c:a9:20:ce:d8:ba:91:
82:ea:b7:51:ff:93:79:33:91:92:db:9f:6f:97:09:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1D:5C:30:D9:52:BE:51:3B:3A:BF:5E:7E:D4:E2:80:0B:25:C4:22
X509v3 Authority Key Identifier:
keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3c:8a:64:6a:60:56:43:a0:ba:20:56:6e:da:bd:b5:8e:71:
99:02:ee:00:b3:2d:07:79:64:f5:01:84:97:c6:80:29:ad:b7:
97:91:8f:78:5b:a1:2d:e2:aa:d1:17:c9:b2:74:36:ea:e0:a9:
39:46:69:50:05:68:94:6b:08:79:8f:c3:d6:3c:04:2b:c5:89:
0f:e8:bb:ee:38:b0:fd:27:48:ba:42:89:0c:62:77:07:31:bf:
a3:9f:c6:e5:88:68:e8:ac:fa:c3:d8:ec:31:bb:b8:f1:98:46:
60:a4:54:55:9d:61:58:87:41:19:da:22:80:8d:78:b3:49:5b:
d7:e5:08:49:64:62:64:12:d1:39:11:36:5e:4c:37:cc:ad:83:
7c:61:6b:5f:8d:24:b6:e2:cb:68:98:aa:06:c7:d0:c4:b0:13:
d7:65:3b:ca:a7:02:35:f7:9b:de:c6:a9:4f:1c:51:df:b8:05:
01:f3:f7:5d:f0:73:99:0e:89:e8:a2:f3:0b:28:d9:87:0b:db:
83:13:e6:89:57:34:21:08:a8:6f:e9:f3:cc:30:0e:83:b0:ed:
e5:2e:da:9f:c2:f6:02:9f:1e:9c:bf:6a:01:be:a8:c0:82:ca:
d0:e5:be:d8:61:81:80:c5:c3:69:fb:ab:6f:ff:35:60:81:7b:
9f:79:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:29 2025 by rpki-client