Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft
File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json)
Hash identifier: K0mRXAOw+DPila6s5jjZVdBvXlDTIf1eKRShPpA7Iuw=
Subject key identifier: 34:89:E7:51:8D:D3:6B:C4:5E:01:16:FD:27:64:85:2E:76:B1:F3:B5
Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9
Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft
Manifest number: 0109
Signing time: Fri 31 Jan 2025 04:05:04 +0000
Manifest this update: Fri 31 Jan 2025 04:05:03 +0000
Manifest next update: Fri 07 Feb 2025 04:05:03 +0000
Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: 7bO+osON4gXERfDP8/55FuoaUyyBfAImxrotKe+KXyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9
Validity
Not Before: Jan 31 04:05:03 2025 GMT
Not After : Feb 7 04:05:03 2025 GMT
Subject: CN=679c4bef-e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:53:c6:1f:fb:81:20:0b:b9:46:80:77:c2:
08:04:81:b5:08:09:e4:2d:c9:4e:54:2a:7c:0c:3e:
dd:70:6a:36:6c:f4:91:c9:a1:ea:1b:ac:d1:60:9c:
be:d7:6c:68:3e:4a:41:39:6a:15:fa:58:e8:96:78:
b8:9e:99:ad:07:8a:84:cf:ae:42:64:7f:ea:f7:a8:
08:41:2a:15:47:83:db:23:ca:01:89:66:00:c7:b1:
f5:3e:c9:ce:6b:ea:ba:d0:00:2b:72:29:76:dc:94:
ad:ff:f5:3b:c6:bb:f1:b6:e2:a2:38:cc:35:c3:2f:
2a:b6:8f:c6:dd:27:e0:23:a7:d5:79:3a:28:88:f1:
78:d4:37:f6:a3:cd:92:4a:b9:11:33:d9:6b:6f:e5:
c9:55:31:e6:8a:ee:5c:07:89:37:0f:d8:55:cb:2b:
f9:7b:85:1a:8b:43:00:85:94:5e:81:a5:4f:9e:b2:
57:ea:29:c6:c3:9a:e0:22:6b:6b:8d:79:2a:37:d5:
c6:61:74:4d:1d:04:b1:58:77:63:a5:b7:7a:98:0e:
ee:83:12:f3:8f:d6:a8:84:56:7e:ec:09:c0:72:50:
10:9a:fe:66:c2:09:11:36:8d:b3:26:59:3a:c1:24:
0b:aa:58:8b:a7:a2:39:56:ce:a5:7c:2b:d4:28:73:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:E7:51:8D:D3:6B:C4:5E:01:16:FD:27:64:85:2E:76:B1:F3:B5
X509v3 Authority Key Identifier:
keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:78:00:10:09:fb:73:d5:6d:66:70:bc:39:a1:0b:0a:77:
ec:42:ff:36:64:1e:bc:36:e9:2f:5c:42:81:20:18:2d:0c:f3:
8e:d8:4d:85:52:f6:3e:cb:22:2a:90:c5:0b:0f:8f:43:26:65:
13:92:78:fe:5e:34:26:5f:ed:f5:6e:88:b4:e0:3e:e8:f9:95:
61:d6:1e:a7:c6:7e:a2:85:70:bd:bf:58:3c:ae:ce:0a:2c:7c:
c3:82:a9:49:90:53:57:f8:bd:80:12:bb:01:c5:3b:89:4b:ac:
bb:e0:c2:cf:13:f6:38:0e:07:ef:d1:8f:82:8e:1c:4b:ea:68:
98:40:c8:8f:79:24:02:91:4a:96:c2:31:22:de:ba:3e:4b:77:
e7:9d:9c:1a:6c:9d:93:a4:1d:df:e7:8c:9a:ec:67:d6:41:51:
1e:87:b8:a6:72:ae:ef:d9:8f:20:18:63:60:1a:91:5a:9b:3d:
1a:1e:e2:40:63:d5:68:20:44:83:1a:bc:44:02:6c:79:36:bc:
a6:22:e6:53:87:d3:85:2c:61:b2:92:bd:7b:05:f4:92:2f:5b:
90:0c:90:83:06:af:c1:15:22:30:0e:e5:fe:36:42:88:80:ef:
9d:9b:7a:07:35:0d:cf:7f:bb:19:66:02:47:49:86:00:eb:a9:
f9:29:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:20 2025 by rpki-client