Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File: eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier: OgdG/DC+f01TEL9oeYypbXQDhk2zzCp2T2RALsb7JIM=
Subject key identifier: 69:9C:F2:01:D8:DC:63:85:A3:3C:8C:04:6F:D4:F0:FD:DE:12:E1:BD
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer: /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 06:40:19 +0000
Manifest this update: Fri 31 Jan 2025 06:40:19 +0000
Manifest next update: Fri 07 Feb 2025 06:40:19 +0000
Files and hashes: 1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: yYOZQh+P7P3L5u994fVT0FMcTcjIw9SQGsbSJP+H6mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Validity
Not Before: Jan 31 06:40:19 2025 GMT
Not After : Feb 7 06:40:19 2025 GMT
Subject: CN=679c7053-cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:ac:1c:b6:1d:7a:27:89:cc:c5:f0:f4:cc:
27:c3:6d:32:d3:1d:0a:1b:dc:14:72:22:0e:a2:05:
12:43:cb:7b:4f:3f:86:6f:b2:c2:dd:c4:86:cb:00:
25:50:0f:80:f8:2d:2c:85:ca:76:19:3a:74:63:bf:
bb:90:ac:d7:92:ea:63:78:61:52:08:84:ea:1a:35:
01:ae:b5:41:ca:7c:a7:c9:10:c5:df:54:36:3e:e9:
27:eb:d7:bc:4c:83:aa:1b:25:56:b7:9b:38:eb:5e:
b5:db:bf:02:44:6f:69:23:fb:b7:d9:cd:22:7b:70:
b3:e8:1a:83:8f:b1:bb:ba:03:e6:8b:f4:8f:d6:3e:
a2:1e:cc:c7:cf:ba:4b:38:ab:dd:ac:4e:fb:3b:04:
45:71:37:19:d3:30:10:35:34:67:db:cd:de:91:fd:
df:f5:f8:90:3b:16:86:d8:93:33:35:f0:ab:c5:e6:
52:25:1e:79:ea:af:3c:70:17:a6:77:df:50:e2:20:
f9:40:8e:77:07:ad:92:38:aa:d9:bc:bf:24:66:f1:
f2:8b:5d:29:b9:67:0d:9b:1a:bd:02:75:07:67:32:
60:57:38:43:49:51:64:e7:b4:b9:1b:65:cf:e0:cd:
15:90:aa:f9:b9:91:65:3a:9c:0f:a3:4e:0c:00:eb:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:F2:01:D8:DC:63:85:A3:3C:8C:04:6F:D4:F0:FD:DE:12:E1:BD
X509v3 Authority Key Identifier:
keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:2a:4a:da:35:de:30:7c:7a:44:58:64:b0:02:cf:cc:0e:
3c:5c:35:37:58:b4:c7:fe:10:f6:1a:43:1c:e3:f8:6c:a2:24:
72:b0:26:36:2d:22:4e:79:0d:c2:e4:04:c7:a7:27:b9:47:c6:
43:a1:08:80:a2:35:e2:8c:ea:aa:0a:e9:90:2a:83:1d:c7:48:
4d:32:4c:9c:11:ab:a5:76:5d:ae:9a:62:29:c7:6c:bd:02:df:
fd:6c:13:53:eb:14:d4:2f:69:e7:49:a3:06:ed:c0:71:a7:90:
15:c3:a1:3f:d2:fd:8e:f7:a2:91:bf:c9:ce:07:3a:10:76:28:
c7:5e:87:5f:b7:e7:36:2f:a3:72:4b:a7:93:45:71:2c:d0:8b:
b7:a0:28:20:10:9e:d9:90:c8:96:ad:bf:cd:68:e0:4c:73:40:
1a:e2:58:4f:49:e2:ed:68:2d:23:a2:2f:44:c1:97:37:48:88:
af:df:39:53:7d:f5:97:5c:97:a3:fc:aa:a7:41:69:24:45:46:
88:4c:b5:64:6e:22:d3:9e:0b:61:b3:2c:ac:b9:df:54:62:b3:
0b:6d:3f:df:ef:01:25:7c:3c:73:24:17:5c:74:99:9c:11:01:
0b:f5:6a:0a:e8:7e:29:03:e5:a9:ac:d4:80:0d:c1:9b:51:9e:
e2:82:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:25:57 2025 by rpki-client