Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json)
Hash identifier: SQF3hnMtuRr/YHTvzv83fzfvvpzlIrdlyAi+vWDF0oM=
Subject key identifier: 35:99:0D:1C:65:52:DB:4A:3B:26:AD:E2:52:D2:47:EF:37:0E:4D:3E
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
Manifest number: 23
Signing time: Fri 31 Jan 2025 06:54:17 +0000
Manifest this update: Fri 31 Jan 2025 06:54:16 +0000
Manifest next update: Fri 07 Feb 2025 06:54:16 +0000
Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: FIoiDqz2tWSaQtarguA6B4TTaBqbRxf8Sq70MIwKYNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Validity
Not Before: Jan 31 06:54:16 2025 GMT
Not After : Feb 7 06:54:16 2025 GMT
Subject: CN=679c7399-6c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:4f:99:a3:27:42:73:70:f7:cf:c2:1c:26:
49:5b:e7:73:41:72:6c:74:5d:27:b0:ac:bd:8f:60:
80:8a:09:4c:12:f3:3a:dd:29:78:5f:7b:ac:be:59:
75:d1:56:a7:e6:80:94:a6:42:14:19:1d:f4:8a:bf:
62:9a:4e:8b:6d:75:48:bd:be:f5:87:2e:d6:43:45:
fc:2a:8b:64:4d:e6:2d:91:3c:e6:33:9a:3e:45:40:
57:dc:34:d8:b0:53:03:96:e5:e7:c5:04:2d:39:84:
77:8e:b7:19:27:d8:62:0b:95:9b:0e:72:30:bd:59:
1f:29:f2:78:24:ca:2d:67:cd:43:9c:e2:a7:52:38:
0d:56:24:47:64:52:0e:18:c3:ed:11:d8:cc:e2:e8:
20:28:ab:10:ba:38:82:9f:26:b3:0c:42:5a:d2:d0:
dc:a0:30:73:26:53:74:f5:f7:f0:25:9d:68:81:32:
be:ac:e8:0a:a4:1c:d9:b2:a9:2a:84:d2:64:36:e8:
e9:04:19:1e:ca:93:3a:fb:38:d9:ae:36:0b:c8:37:
81:47:5d:4f:d4:91:bf:ed:e2:8d:51:9c:47:eb:0e:
8b:c1:b4:7e:f2:5a:fe:be:48:da:b0:10:17:17:af:
0a:fb:a4:e9:36:56:76:b5:23:00:ff:ba:44:3c:3f:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:0D:1C:65:52:DB:4A:3B:26:AD:E2:52:D2:47:EF:37:0E:4D:3E
X509v3 Authority Key Identifier:
keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d4:10:92:08:49:81:65:d8:9c:0c:31:fc:f6:f5:62:a4:fc:
58:b4:a9:a7:e9:15:39:19:63:01:93:2c:85:0b:9c:76:b8:24:
cf:0a:35:00:74:a2:cb:9c:64:6e:c0:4d:da:d3:35:98:7c:87:
6f:6c:cf:e6:e9:a6:c2:a4:04:35:63:97:f0:7c:5e:be:44:f3:
76:4e:9d:f2:75:be:2d:71:cb:0a:6e:d9:86:2b:e4:f2:28:bd:
a5:6c:e0:27:8c:89:78:53:e0:45:eb:91:c9:fc:54:d5:bd:85:
79:ff:bb:b3:ea:2f:61:db:8f:c1:2a:47:07:5e:6b:81:dd:10:
45:b0:57:39:d6:1a:0f:3a:cb:b6:63:94:3d:e6:55:33:08:06:
13:33:8e:67:d3:2f:e6:fd:85:12:3c:cc:36:82:9c:45:3f:49:
da:2d:c1:7e:50:c2:51:c9:0e:c1:b6:b7:3a:3f:12:02:77:19:
88:41:9a:86:8d:ff:d5:56:65:8e:18:82:2e:1c:42:71:5d:c3:
26:d6:00:35:31:73:7e:1f:9b:30:eb:34:05:09:84:86:00:3f:
d1:87:10:5f:d0:32:fa:ac:cb:06:6d:a5:10:25:ae:ff:18:2b:
b6:6a:56:ca:36:69:9f:41:c9:63:6f:3c:19:3b:05:90:51:7e:
80:17:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:21 2025 by rpki-client