Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
File: a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json)
Hash identifier: YdoUmj6ThTKIAHVkPPqytd4MqPIZyUOMRhOX++/5wcc=
Subject key identifier: 27:29:29:A9:48:FC:95:F6:B7:1B:36:DB:FB:BB:73:D1:7A:76:A1:70
Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
Certificate issuer: /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
Manifest number: 05BD
Signing time: Thu 30 Jan 2025 23:05:32 +0000
Manifest this update: Thu 30 Jan 2025 23:05:31 +0000
Manifest next update: Thu 06 Feb 2025 23:05:31 +0000
Files and hashes: 1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: NrGeakF+vXN5G56Z+VbI7A+sPylsmvo8w7V2HL5OZVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Validity
Not Before: Jan 30 23:05:31 2025 GMT
Not After : Feb 6 23:05:31 2025 GMT
Subject: CN=679c05bb-a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:4f:c2:90:75:04:3a:c5:63:17:35:4a:21:
cc:08:92:ed:44:89:ab:77:75:c5:f2:59:37:7c:44:
cd:ae:97:35:68:45:2c:e8:bb:11:b5:b4:49:c5:27:
1b:05:c9:4c:a0:4d:74:d6:bc:77:2e:58:a5:dd:ee:
90:cd:ad:bc:d6:ac:df:f8:40:2c:22:03:b0:65:26:
1a:6f:53:e7:c3:bd:cc:88:df:35:f1:22:a2:ab:6e:
e1:ea:db:cb:d5:5f:6e:93:52:3b:7d:e7:a9:af:c8:
58:05:25:89:99:fd:e0:87:c2:82:b5:cc:4e:df:3e:
69:0c:c3:d7:3d:8b:c5:45:39:b6:87:87:8f:d4:fa:
27:15:3f:04:ea:4f:6e:cb:25:67:7a:05:f4:20:28:
0a:0d:19:a4:46:18:6b:ce:fc:30:18:ef:f5:bb:f8:
68:78:b1:ce:b2:92:2d:67:65:81:cb:3d:4f:bd:2d:
9e:e5:6e:73:f4:e1:fd:c2:9a:c4:70:09:cd:8e:29:
5d:6f:98:c7:78:2f:86:6c:0f:4a:4e:0e:30:8b:21:
19:0c:9f:50:b7:0e:9f:ea:42:fd:48:59:bc:d5:bf:
ef:7c:26:62:cd:9d:69:bd:23:e8:4e:6b:1d:5c:9f:
42:73:5c:6a:5d:16:fd:98:67:30:54:f0:53:dd:23:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:29:A9:48:FC:95:F6:B7:1B:36:DB:FB:BB:73:D1:7A:76:A1:70
X509v3 Authority Key Identifier:
keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f4:fe:e1:6f:0f:44:2e:9b:7a:92:0a:46:fa:96:b5:a3:8c:99:
09:64:3a:8d:87:ea:d5:45:1d:e3:43:f6:0b:4c:c2:fa:a8:3d:
63:0d:d3:00:ce:88:7c:a1:05:20:77:a5:8e:ac:ae:1f:70:df:
b4:22:a8:6c:62:d2:34:7d:9f:50:64:06:19:0d:47:bb:8a:d2:
73:20:7d:ff:38:98:1e:dd:61:b4:1c:64:5c:82:38:2b:fa:57:
bc:8e:bb:e6:31:6a:4d:5a:28:e0:36:83:91:35:eb:36:8b:9d:
c4:9f:19:9d:9e:17:f4:b6:18:15:e3:00:5d:c0:bf:53:4b:6f:
7b:c8:c7:4c:f7:c4:3f:6e:06:8b:56:be:45:49:16:bd:14:c2:
14:6b:95:82:19:ef:d6:38:08:8b:79:37:6e:27:08:d4:99:f9:
2a:a1:99:b9:ac:65:65:41:b0:24:7d:f2:b3:e7:22:f2:45:d8:
f3:90:d9:72:f3:b0:98:38:a5:b6:ad:60:b1:e8:01:08:7e:bf:
f4:28:f9:be:68:50:88:24:f9:5c:3c:8f:fd:c9:81:54:23:86:
75:5a:10:3f:e8:94:73:c8:33:80:47:ca:7f:48:f4:e2:73:f7:
8a:61:ab:18:65:88:a9:db:7d:68:8b:df:5b:35:cd:51:bf:f1:
05:11:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:08:02 2025 by rpki-client