Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier: +OJD8gPANusGuR9k9tYMGjlQ/jBNfg2LZkbnCGsexBk=
Subject key identifier: AB:30:98:1A:EC:52:2C:63:A8:C9:AD:5E:94:B9:A2:BD:1D:FB:15:D4
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number: 01D3
Signing time: Fri 31 Jan 2025 02:17:55 +0000
Manifest this update: Fri 31 Jan 2025 02:17:55 +0000
Manifest next update: Fri 07 Feb 2025 02:17:55 +0000
Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: zdrIsunZMgrniBxXZY8fMh3Vh2IGleoy1jAIEN9r0As=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Validity
Not Before: Jan 31 02:17:55 2025 GMT
Not After : Feb 7 02:17:55 2025 GMT
Subject: CN=679c32d3-a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:1a:6a:7a:70:46:e7:96:06:1a:c4:23:38:
57:d3:9e:31:e9:74:f2:1d:c0:38:2d:fb:84:ff:17:
4d:a9:79:20:48:4f:5c:90:01:9e:ef:0b:8b:2e:9d:
cd:bf:8f:78:12:e0:2b:5b:90:19:64:ec:76:18:9e:
15:3b:3d:b7:a5:74:c6:ad:ca:9f:1c:2c:37:2e:5b:
e4:11:4f:cf:e8:68:ab:d8:e8:76:96:8a:f4:e3:48:
31:ee:d0:bc:57:38:96:c2:f9:fb:ca:9b:4b:be:27:
5e:82:8e:e4:a7:c3:02:33:04:8e:2a:27:86:e9:29:
1a:05:8c:11:1a:1b:03:87:77:06:f3:c2:e0:30:8f:
61:ed:84:96:23:7b:51:c1:ca:65:c7:5a:55:7f:1f:
ac:7c:38:04:9a:80:01:f1:c1:3f:3d:c8:b6:1e:15:
04:c7:cf:47:2e:b8:69:b8:ad:83:7a:ab:e3:ef:0a:
bd:7a:ca:81:d9:df:b1:9c:e2:30:6b:f1:1e:29:7c:
a6:b7:16:ae:ef:3e:57:c6:80:d4:64:dd:f3:8d:49:
79:7b:ef:3c:c7:f6:ff:f8:db:02:01:a3:19:78:7e:
1c:67:fd:36:0c:2d:36:25:b6:6a:0f:72:5c:b3:f1:
a5:73:3e:fd:7a:5f:91:b6:a1:ab:e7:4a:84:35:a7:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:98:1A:EC:52:2C:63:A8:C9:AD:5E:94:B9:A2:BD:1D:FB:15:D4
X509v3 Authority Key Identifier:
keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:7f:d0:a0:a8:0a:24:22:9d:b1:39:b7:c5:9f:e1:14:78:
41:88:3b:b8:9d:89:29:08:87:9e:cf:b8:2e:be:14:bd:c8:52:
fb:09:c9:df:79:69:b5:95:cf:06:50:ad:ba:51:71:88:dd:e1:
b9:9c:87:b7:71:8f:ce:fb:03:11:0a:f6:28:05:4a:b3:0f:58:
fd:5f:ef:ef:aa:6f:53:85:88:b4:9b:55:96:01:30:de:ae:88:
91:f3:62:a9:d9:e6:40:39:e3:8d:d6:9d:da:80:b7:57:9e:ed:
6a:58:bd:a5:7c:53:0b:f9:34:e9:25:83:da:4e:81:bc:f4:f2:
6b:f5:f0:ea:70:1e:a7:fe:c6:68:a7:c2:33:44:99:95:ed:25:
0e:84:33:8d:96:48:ec:89:dc:43:40:5e:03:e3:c2:c5:02:e4:
82:cd:36:51:80:51:79:33:39:37:16:c5:cd:f2:70:38:d7:e1:
72:37:de:9b:17:2a:5a:34:69:6e:ae:25:c9:14:66:a5:10:f9:
60:74:e2:44:0c:77:a5:2b:01:3d:79:38:67:a1:e9:ba:24:52:
95:93:31:18:0b:02:b0:37:f7:04:bc:bd:f0:3c:75:34:c3:d7:
7a:66:c4:ae:2a:ac:2b:41:d1:cf:29:2b:67:92:fa:b8:2a:f7:
67:b0:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:39:04 2025 by rpki-client