Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier: 3XuHArBBYwL1+cSku4z6Y4tjVi37u2M8gFfVmaKL/k0=
Subject key identifier: F9:BF:6A:97:DB:20:53:1C:EA:26:7C:6E:E5:D6:A7:6C:9E:A3:AD:D7
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number: 01CD
Signing time: Fri 31 Jan 2025 03:32:32 +0000
Manifest this update: Fri 31 Jan 2025 03:32:31 +0000
Manifest next update: Fri 07 Feb 2025 03:32:31 +0000
Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: 4RTEwEA78q1wjFI6tAsbjo2qax8z3pSdvQelFZzGXe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Validity
Not Before: Jan 31 03:32:31 2025 GMT
Not After : Feb 7 03:32:31 2025 GMT
Subject: CN=679c444f-3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:6d:4e:dc:1f:23:5d:be:68:e3:34:48:a8:
64:a3:63:db:f6:cb:9e:63:cb:29:fd:16:3a:cd:56:
38:01:28:f3:e7:59:12:ae:3a:cf:6b:22:c4:78:68:
5d:7e:d6:81:ef:57:03:07:b4:ec:e8:ed:54:bf:a7:
14:28:1a:5b:58:6e:7f:b4:d4:24:7c:a0:9b:8c:54:
48:97:67:b2:2b:28:63:ae:75:b4:1b:19:f5:f2:cb:
59:8c:4d:7d:0f:3d:79:97:cf:e9:a2:d8:a0:5b:45:
7d:79:9d:4c:c0:93:fd:d8:3f:20:8e:21:1d:6a:06:
02:23:55:63:8a:d6:0e:ed:3e:2a:13:8e:f3:af:47:
73:a6:09:86:91:fe:ab:21:cf:53:df:07:3f:f7:58:
01:34:48:b3:f3:ff:8a:ef:da:73:48:07:9d:c0:c9:
88:cf:fd:6c:7c:e6:7d:ce:35:37:99:c6:11:0c:37:
59:9e:e6:72:ac:ed:15:08:bd:d1:3a:0d:40:14:6a:
bc:f5:ee:75:e1:44:b7:1c:7e:16:31:1c:08:76:c2:
65:b0:00:1f:44:e4:87:1f:0f:2d:fb:f7:16:5b:9c:
d2:97:32:4c:6e:ab:cb:a5:af:e9:46:bc:77:3f:fe:
fa:a0:bd:d9:f7:10:fe:d7:de:7d:6d:3d:69:e1:6e:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:6A:97:DB:20:53:1C:EA:26:7C:6E:E5:D6:A7:6C:9E:A3:AD:D7
X509v3 Authority Key Identifier:
keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:1a:87:4e:bf:46:64:a5:a0:98:06:b9:5e:ab:95:11:31:
d1:91:5b:80:32:c7:75:31:09:51:a8:de:f5:ad:7e:39:23:09:
9e:a6:55:d8:6e:6b:13:44:76:0a:d7:e2:7e:02:f1:4a:16:6f:
d0:93:e5:90:97:37:f4:e3:1f:a9:08:9c:f9:4c:be:39:93:5d:
95:47:82:0d:bc:c5:2a:b4:36:3d:33:70:11:66:f6:14:ec:eb:
a2:69:51:ce:a3:90:3c:9a:f2:44:7c:b0:ac:8b:bf:eb:c5:0a:
4e:52:5a:84:83:bd:77:d6:ae:38:41:c8:fe:19:08:0f:29:74:
c4:9b:48:32:4d:65:76:2b:02:bd:38:bf:fa:ab:fa:52:ea:04:
04:14:1f:f8:32:d1:d1:c4:0a:08:2c:13:75:44:17:ff:3b:7d:
01:3d:da:10:aa:e1:10:a3:c6:ee:f9:1e:3b:9f:20:68:a9:4d:
44:ca:5a:13:7c:8e:90:9e:a2:b0:2c:78:e8:81:a2:99:39:6d:
d0:48:00:da:1e:4b:ce:3e:31:99:76:21:c1:93:92:9f:4a:de:
a2:53:1c:46:bc:92:0e:e3:08:59:f4:6c:ae:6c:92:99:e4:c1:
b5:ed:b2:cf:c4:f2:f1:2d:04:ea:8f:26:03:e1:00:e9:9b:20:
69:79:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:39 2025 by rpki-client