Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json)
Hash identifier: ilC8SuVzA3QraUoDHdJTxmWlqAf1O+w0O1MJQfYqWGw=
Subject key identifier: FE:2B:2F:95:7C:E6:D9:E4:38:3A:FF:96:BB:CD:43:90:5E:1F:02:5D
Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
Certificate serial: 095D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
Manifest number: 11F2
Signing time: Thu 30 Jan 2025 20:16:24 +0000
Manifest this update: Thu 30 Jan 2025 20:16:23 +0000
Manifest next update: Thu 06 Feb 2025 20:16:23 +0000
Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: QwHNYLGabfifC4wNVuRajD8aKCtPhsf3myy5H2KXab0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
Validity
Not Before: Jan 30 20:16:23 2025 GMT
Not After : Feb 6 20:16:23 2025 GMT
Subject: CN=679bde17-2955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:9a:77:8a:cf:41:e7:e8:69:9a:7c:88:13:
c5:43:7c:82:69:68:62:8f:4a:73:fc:0a:25:d1:74:
8f:ca:1c:88:3e:44:8c:af:9e:ff:df:6c:97:ea:29:
d5:0b:9b:fe:55:2a:20:ee:44:91:ea:56:7e:23:94:
a8:9b:6f:2f:0a:33:33:ed:ee:f8:84:4b:a3:24:18:
8c:00:f3:68:f1:a0:d2:46:8b:74:f4:d2:f1:ff:f5:
f0:a3:57:8b:2c:34:69:cf:d1:9e:3c:f9:4e:d9:4c:
ca:d5:48:81:38:88:97:00:73:91:08:6c:95:8f:2b:
1a:d0:05:a0:d4:98:3d:34:de:21:1e:e8:a7:a6:b9:
06:f2:1a:87:8c:41:71:51:2a:52:c8:8c:87:75:db:
8e:e5:7c:cd:c4:af:85:08:1d:95:92:08:56:a8:6e:
90:b2:83:ca:28:c5:3c:df:b6:68:e7:e4:50:e0:b3:
5e:e6:b2:5f:b5:a2:59:77:29:c6:69:c2:76:b4:4b:
00:ec:c7:51:9f:0e:b9:0f:a4:79:05:1a:14:55:09:
db:b9:34:6c:db:88:be:1e:c7:67:2f:c9:ac:b8:32:
f9:1d:27:4a:c9:7a:a7:77:aa:58:7d:34:ca:dc:64:
46:0a:85:d7:69:31:50:41:1e:32:0a:97:fc:ce:39:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:2F:95:7C:E6:D9:E4:38:3A:FF:96:BB:CD:43:90:5E:1F:02:5D
X509v3 Authority Key Identifier:
keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6f:69:7a:e1:58:f0:65:7d:1d:53:80:ee:ff:8e:22:73:77:
d9:d7:59:a8:87:f1:d9:c5:3f:4e:93:c7:63:49:15:96:29:81:
33:48:d0:44:fc:9b:0c:0c:20:44:ae:cd:41:9d:09:df:09:fc:
9b:8f:ad:cc:a6:a5:30:9e:99:a3:f1:e4:c8:c8:ba:13:28:b6:
6b:fc:33:9a:91:2b:39:d0:a4:70:8e:8e:de:eb:cf:11:a2:97:
15:f6:1a:10:54:29:22:16:53:00:d7:09:27:66:11:8b:bd:1d:
af:3a:7d:1e:68:ff:92:4a:7f:da:09:57:84:a3:de:a6:3b:bf:
51:32:57:d5:81:f4:5e:bc:86:25:fd:b8:3c:80:d6:76:9d:3a:
0d:be:44:da:fc:18:b9:43:5b:8b:46:76:18:b7:72:3a:1d:e1:
23:d8:6a:7e:2b:53:15:ed:e6:b6:6d:a0:b0:2a:49:06:9f:01:
0d:f1:0e:fc:8c:75:51:1b:5a:e1:14:5c:20:e6:6d:4e:4c:8c:
6b:db:04:27:9d:ea:68:c4:39:69:70:75:1c:a9:76:f7:07:00:
5e:a0:10:9a:cc:b8:cf:c3:17:68:68:54:51:5b:fa:eb:1d:4b:
05:17:a0:11:01:a1:c4:cc:65:fa:6e:c5:85:0d:7d:7c:86:30:
a2:ce:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:07 2025 by rpki-client