Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier: 5s9fBtCZEZHMLXCcPwDFibcZW46zPbaKi+P1FDSUvdQ=
Subject key identifier: D8:B0:6E:7F:DB:18:4D:6E:45:88:9B:19:5A:7D:B2:7E:17:AB:B5:F9
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number: 3444
Signing time: Fri 31 Jan 2025 15:21:53 +0000
Manifest this update: Fri 31 Jan 2025 15:21:53 +0000
Manifest next update: Fri 07 Feb 2025 15:21:53 +0000
Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: 9LMdBvui6Uu+ObcHkEQ788jo9SIDD/jOZ3Mf4gpumZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Validity
Not Before: Jan 31 15:21:53 2025 GMT
Not After : Feb 7 15:21:53 2025 GMT
Subject: CN=679cea91-4d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:04:1a:14:17:72:6f:c6:97:c5:25:33:ad:
14:87:d6:fd:c4:db:bf:03:86:3f:5e:2f:fc:52:d5:
3d:29:fd:fc:09:da:c3:59:d3:79:f1:ab:55:9c:c1:
ba:ff:5b:5b:14:26:a5:db:f2:35:00:7e:ce:41:8c:
c2:75:53:c9:17:4b:64:93:f9:4c:9b:7c:1b:27:1e:
92:5d:e9:79:8a:4f:af:64:97:4a:05:d7:d9:c7:34:
46:cd:74:fb:7c:f0:76:23:f2:26:8c:e2:34:29:26:
73:d5:12:e0:9c:46:5a:25:41:7f:a7:c5:b4:fa:8e:
d6:25:a6:e0:45:bc:7f:2e:23:1d:04:d7:29:96:ad:
05:85:7f:9a:5f:b8:b9:b9:27:f0:61:cb:45:c4:21:
85:ab:82:a8:ba:d4:31:b0:6e:56:ca:c1:99:69:73:
a8:f5:51:0a:6f:4c:70:3d:35:82:58:84:f6:a7:d9:
1a:5e:ea:9a:91:2c:a0:80:d7:75:26:09:83:0e:c8:
46:a5:ac:18:9a:61:90:64:3a:95:f1:dd:0a:34:5c:
0b:4d:3f:2b:44:af:9c:28:a6:32:8a:cb:19:58:69:
a8:ca:f8:b0:3d:a0:c8:05:1d:fe:62:20:7d:88:d1:
61:cb:42:93:63:67:0f:79:3e:86:2e:f3:4a:1a:5e:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:6E:7F:DB:18:4D:6E:45:88:9B:19:5A:7D:B2:7E:17:AB:B5:F9
X509v3 Authority Key Identifier:
keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:db:44:e8:1c:38:fd:2c:c5:c8:2c:97:b5:d7:8d:d1:4c:be:
00:ba:67:f1:3b:16:c4:78:cc:8d:73:09:61:d0:c7:d0:26:dc:
ef:a6:c8:ef:bc:5e:d1:f3:56:75:80:07:9a:c8:8b:f0:7e:c6:
24:1b:58:87:c2:92:ce:99:89:f2:de:ee:02:0d:54:a6:9b:f5:
62:62:74:a1:66:48:20:91:3d:95:4c:1e:fe:a6:65:5c:4f:bf:
12:f3:39:7c:3b:94:eb:88:f3:ae:f8:d5:92:f0:17:a3:3a:81:
32:87:4c:35:93:bf:7d:55:d7:70:29:ff:3d:9c:6a:13:33:74:
7b:5c:dd:ba:cc:fe:bc:cc:08:60:4d:63:0b:9d:a6:37:60:19:
f6:6b:f5:ef:68:e7:4a:70:51:a2:bc:40:04:ff:a7:01:59:c6:
a6:c5:65:89:f3:f1:ec:2a:20:83:ce:ad:0e:fa:a3:d7:81:32:
ed:c8:d7:9e:e9:68:6a:1c:1f:52:7a:97:fc:8d:54:0a:43:3b:
ba:e0:f9:7a:0b:17:fa:8d:0a:c2:26:77:6e:c8:f4:1f:e9:d9:
9a:e6:9f:2e:70:24:2c:50:d0:a8:ef:bb:5e:65:da:18:a4:be:
1f:d8:64:c8:83:a8:e2:b9:8e:23:ff:9e:95:dd:af:cf:51:e5:
df:0a:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:04 2025 by rpki-client