Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json)
Hash identifier: eb6Eiw+CNQVAY8Nk8/p1fz/vF+xeQTZvtNmmrDK2DcQ=
Subject key identifier: 04:C5:EF:3B:AD:D4:75:68:7F:4E:FB:4C:A8:C8:2C:DD:53:3D:A7:08
Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Certificate serial: 3451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
Manifest number: 3450
Signing time: Fri 31 Jan 2025 14:19:31 +0000
Manifest this update: Fri 31 Jan 2025 14:19:30 +0000
Manifest next update: Fri 07 Feb 2025 14:19:30 +0000
Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: TXJqPyqCCMffWCrRoJFy4BHoPGBmcllCvVHaj+wu8P8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13393 (0x3451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Validity
Not Before: Jan 31 14:19:30 2025 GMT
Not After : Feb 7 14:19:30 2025 GMT
Subject: CN=679cdbf3-3e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:5d:98:d3:a8:b3:3f:a7:bc:cf:64:d9:38:
a3:9e:8e:d8:21:02:ae:13:68:ce:91:9c:84:f7:2f:
36:9d:3f:4c:ec:1e:91:85:e2:c1:ee:ed:bb:5a:cd:
bf:37:4c:7a:6b:e7:e0:47:67:8c:75:2f:19:7a:6c:
2d:65:7d:3e:e4:91:7a:ac:d0:8e:e0:b2:d2:26:d0:
26:d7:5b:bd:e6:87:0f:ee:09:53:fd:a9:db:5d:1a:
06:b5:8b:25:3e:1b:28:b7:1a:55:b4:03:c6:71:e1:
e3:97:51:e2:74:eb:0e:62:00:95:88:66:93:15:3b:
a6:13:81:61:43:95:b8:33:a8:88:6a:5b:7e:a7:8c:
ff:97:a9:79:ca:09:2b:fe:93:11:08:a7:5b:2f:5d:
dd:7f:52:38:2d:79:79:b2:8c:22:d9:31:76:8b:55:
84:b0:37:ac:13:14:f0:04:b8:9b:68:d3:68:15:9c:
a5:ea:35:c9:90:00:b4:8d:50:e8:66:0f:8a:ad:6b:
df:f1:66:06:00:31:0c:af:38:91:36:b5:7f:f5:3f:
af:c5:a4:01:e7:3f:8b:8d:78:83:b8:9e:9a:bd:97:
ed:5a:29:31:22:df:9c:4f:47:65:23:7a:0d:b1:f1:
1e:ba:bb:0e:71:80:77:bb:bf:7a:06:f8:08:61:9f:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:EF:3B:AD:D4:75:68:7F:4E:FB:4C:A8:C8:2C:DD:53:3D:A7:08
X509v3 Authority Key Identifier:
keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:8e:5d:ab:53:08:6f:9e:5d:96:48:9f:a5:44:64:be:21:
93:6e:9e:03:59:74:61:88:9a:74:ea:9f:d4:f2:ba:08:13:24:
8c:38:e5:ad:35:ae:c1:68:73:d1:19:71:b2:3b:c4:04:36:c7:
7d:93:68:20:8d:eb:b1:5b:9b:3d:ab:aa:a4:fb:c6:67:7d:7c:
b5:de:a0:bd:21:a3:a5:56:68:fc:e8:81:cc:8b:68:78:3d:34:
fc:c9:31:a9:da:0b:6f:d0:4d:cd:0b:7b:17:b2:1b:1a:9f:f5:
f7:41:fa:92:b5:57:48:2a:da:70:c7:8a:2c:31:a0:3f:73:de:
5c:5a:7b:c7:6a:ad:9d:f4:05:cf:5e:dc:84:d8:1c:17:13:2f:
fc:db:63:ae:d9:0f:cf:90:60:70:eb:6d:77:3b:66:b4:b6:98:
dc:3d:73:f8:d0:35:ea:3a:eb:81:b3:5f:3a:8c:23:1f:e1:91:
cd:66:c8:63:a5:e1:43:fc:dc:5a:0a:66:84:62:22:10:76:fc:
ea:cf:c0:4e:cf:db:0e:9b:e1:8d:b9:fe:36:b1:aa:31:0e:f3:
a0:87:b4:ee:ac:8c:a9:91:30:37:55:62:eb:d3:56:ea:91:5e:
68:6e:18:4e:f8:a9:17:fb:2c:35:b2:d3:5e:a0:3e:e2:61:eb:
75:29:51:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:44 2025 by rpki-client