Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File: J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier: gpMNdEyP3nTo4wwvQ6wxMf7FMh6ZQuwpteGMKRhNsw4=
Subject key identifier: 70:66:47:4B:B9:48:52:6E:CA:29:62:0F:3E:00:54:78:73:B2:3D:C6
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer: /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:47:52 +0000
Manifest this update: Fri 31 Jan 2025 06:47:51 +0000
Manifest next update: Fri 07 Feb 2025 06:47:51 +0000
Files and hashes: 1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: NCmr06r3UelFR1XXuibLkK1DjPKFsPgMyf1z9n2ORzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Validity
Not Before: Jan 31 06:47:51 2025 GMT
Not After : Feb 7 06:47:51 2025 GMT
Subject: CN=679c7217-60da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:50:63:aa:86:c3:06:16:3f:85:c6:0a:a4:
b1:52:4a:7f:71:92:ce:61:52:60:d2:25:56:9d:c2:
0e:10:58:07:3b:80:96:56:0e:8a:22:1a:16:d8:32:
90:ee:bd:a4:99:74:24:0a:b9:75:4e:0e:c8:4c:95:
8e:63:09:0b:4c:a8:b1:8c:58:3c:8e:d0:75:43:a5:
c9:58:ab:3d:09:5c:72:b9:01:d0:b7:f7:83:6f:f3:
6f:11:78:e8:d8:e5:b8:bc:9d:2f:eb:fe:a1:17:29:
0d:b7:d7:3c:a7:86:4e:ce:7b:1b:64:a9:bd:f0:c9:
fb:70:ea:e1:16:75:55:20:ae:31:39:3c:36:38:5f:
73:ee:dd:af:c4:d3:ee:54:0d:c5:e7:54:9f:5d:d9:
81:96:e2:f7:cc:f8:7f:fe:b3:40:b5:02:3f:7e:ef:
bf:7b:c9:c1:cb:80:92:ca:ca:b2:f1:b6:87:df:f2:
3a:2b:f2:d6:01:e1:6c:c4:80:44:4a:36:77:f0:e9:
d6:ee:db:e2:3a:a7:93:49:63:db:61:96:86:40:82:
29:a4:5c:8c:86:fd:8d:a7:2c:ce:8e:84:08:94:fa:
d5:78:4e:53:6e:76:7c:53:6f:2f:ce:f6:70:a6:cc:
79:39:f9:21:a6:1b:aa:69:58:36:3a:f5:bc:a0:8b:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:47:4B:B9:48:52:6E:CA:29:62:0F:3E:00:54:78:73:B2:3D:C6
X509v3 Authority Key Identifier:
keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e6:9c:c0:21:54:4d:9a:79:17:64:d2:7b:21:02:17:5e:cf:
7a:20:b8:14:7b:d1:d8:73:7e:ae:3e:7b:cd:88:86:8c:a4:83:
01:09:e1:4b:20:43:90:9d:90:98:a8:6f:38:f6:ef:08:ec:15:
47:40:ea:28:76:b0:a8:85:70:f0:1d:03:3e:67:e2:37:d7:0f:
06:7a:61:a3:18:8f:1a:43:79:b1:35:08:97:b2:6e:d0:25:c1:
79:06:2b:d0:41:d7:f7:8c:80:e5:32:86:70:20:d3:62:37:92:
bb:a3:de:e6:84:86:87:af:45:eb:41:0a:27:b9:b9:ef:d8:1d:
ef:ee:c2:07:57:30:69:40:fd:52:8d:3f:fc:04:38:a7:21:9c:
1f:1e:1a:a7:5f:9b:32:61:bd:69:cc:9b:3b:75:55:d4:5e:63:
5a:8c:0c:2d:c5:bb:a7:08:be:b7:43:85:9b:4f:2a:2d:3c:8e:
0e:2d:a7:ea:4d:6a:70:f3:8f:c8:1f:1f:d7:c7:80:77:94:b1:
2b:9e:04:f5:b1:76:7d:f9:cf:48:82:69:da:3e:87:b3:af:0d:
be:ce:09:6a:c1:af:72:4e:1b:df:35:6d:07:64:79:df:27:61:
98:7b:12:3c:62:07:86:5a:c9:48:d5:72:b8:92:96:1f:59:bf:
37:f9:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:46 2025 by rpki-client