Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier: VPJFiiM3bi6OK3vWJoiRowOk4lK85Y8PaHc49hvhHj0=
Subject key identifier: B9:AE:6C:9F:74:14:FB:2A:51:AA:02:75:FA:78:05:E3:68:97:B9:E7
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number: 08E5
Signing time: Thu 30 Jan 2025 20:50:05 +0000
Manifest this update: Thu 30 Jan 2025 20:50:05 +0000
Manifest next update: Thu 06 Feb 2025 20:50:05 +0000
Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: fRnMOMpNBOUfDunrTJhwKB69JFeUpcexZoTzfI8qSMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Validity
Not Before: Jan 30 20:50:05 2025 GMT
Not After : Feb 6 20:50:05 2025 GMT
Subject: CN=679be5fd-dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:39:b0:17:e3:57:eb:e3:98:d1:9b:ca:43:
cd:f4:22:9d:c2:6f:39:8e:52:af:95:38:59:ea:d2:
a8:e6:80:42:94:e8:61:a3:89:fa:4b:ca:c5:3f:6b:
dc:56:d0:d8:f1:9a:9d:21:20:53:38:e4:1a:95:4c:
e3:d9:0a:75:7d:aa:fd:a3:7f:23:83:1a:a7:e2:c6:
c8:8f:91:67:96:76:c1:94:2d:b0:86:9b:dd:29:40:
bb:c5:fe:b3:f6:b0:dc:f5:71:4f:06:33:3c:0b:93:
90:6a:0e:fa:fe:56:dd:6d:32:3b:fc:98:8a:53:f5:
81:c4:3b:62:a0:11:5e:8b:e9:09:71:b4:dc:70:92:
cd:e4:55:a6:4a:e3:b5:bd:a0:02:70:e1:30:09:f0:
8d:75:25:d3:40:59:02:6e:e3:d9:1e:24:65:6b:49:
cd:51:2e:75:87:5c:d6:2b:79:7b:e5:b1:af:64:e5:
64:59:79:7b:b9:19:96:74:52:07:b4:52:6e:25:c0:
18:c1:25:e9:43:f5:b7:47:41:d1:89:de:c9:9a:e5:
7b:f5:eb:e8:fb:40:bf:c3:03:7f:95:72:9b:ec:de:
ab:9f:28:8c:e0:8e:4a:33:46:c9:68:c9:e4:81:f8:
65:8d:76:ea:a9:ec:75:10:9d:b3:58:27:c0:70:28:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:6C:9F:74:14:FB:2A:51:AA:02:75:FA:78:05:E3:68:97:B9:E7
X509v3 Authority Key Identifier:
keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:87:16:1b:cd:1e:02:62:3b:dc:47:44:b9:05:99:89:d1:0f:
5a:76:62:81:00:6f:6e:1c:c7:7b:72:39:fc:0c:02:44:0e:50:
e0:33:b2:c6:dc:f0:56:19:50:bf:3d:3d:85:fd:99:60:9a:5e:
00:da:77:b6:81:d6:d0:30:c6:1a:41:4a:81:30:e8:50:25:31:
88:32:0f:c2:5f:8b:89:3a:aa:32:10:1b:95:83:b2:76:7d:bd:
67:63:67:83:10:69:1d:30:16:6c:8e:a6:15:01:e4:37:a6:55:
c0:eb:9a:26:ef:7b:9c:25:24:3f:e1:33:69:d7:bb:81:c0:d7:
9a:f4:4b:3a:fa:e3:1d:9d:d2:78:fa:60:7d:25:8d:37:c2:c1:
58:fe:aa:f3:d9:11:70:50:4c:f7:97:69:67:c0:9c:40:92:54:
dd:26:26:93:d4:61:b1:4a:13:5d:17:42:52:c7:af:82:72:6b:
8f:3e:13:de:d3:20:46:e1:16:2f:29:40:79:34:ef:a6:74:90:
9d:59:22:ed:bc:11:9b:21:56:46:9f:f5:c9:36:39:75:32:ca:
5a:46:0e:1e:fc:ce:62:6a:38:87:09:1a:03:39:12:40:a5:8a:
e9:da:e5:49:f9:8f:70:08:d0:4a:81:e0:f3:0e:4c:27:e1:e9:
2f:84:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:52 2025 by rpki-client