Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json)
Hash identifier: q7E9La2roDzNuRBz3g97OZDNAKdeSrC7BDodvJ2FiTw=
Subject key identifier: 71:EC:11:BD:FD:20:BA:89:68:DA:B8:FB:CB:3C:C0:E9:D6:16:4B:72
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
Manifest number: 015C
Signing time: Fri 31 Jan 2025 03:16:51 +0000
Manifest this update: Fri 31 Jan 2025 03:16:50 +0000
Manifest next update: Fri 07 Feb 2025 03:16:50 +0000
Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 81IvGaHS28iU7FYLVmkHYSw9I881oP2+3823IlT0H6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Validity
Not Before: Jan 31 03:16:50 2025 GMT
Not After : Feb 7 03:16:50 2025 GMT
Subject: CN=679c40a3-d4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:e1:3c:c8:70:2c:06:b1:9a:d7:1c:bf:d0:
c5:f3:b6:2b:1c:bc:3e:e4:37:bc:ef:f1:13:07:8d:
4d:42:b7:3a:0f:4f:83:d9:a8:74:4c:a8:44:a3:72:
54:ae:03:6d:9c:aa:ba:d3:f5:d5:5a:bd:68:15:c3:
13:48:21:68:22:d6:0c:2d:82:24:63:ae:ef:27:33:
b3:bf:5a:32:0c:65:ff:4b:20:0c:a2:24:21:53:71:
98:8f:f6:15:98:6d:61:a0:a0:b3:7b:94:35:35:95:
e7:73:95:f9:b7:d1:e1:df:3f:dc:14:3d:02:e0:3d:
97:e6:40:ce:0c:2e:8d:9a:3a:03:0a:54:89:76:02:
bf:2d:92:46:79:75:05:0f:88:04:99:86:b7:09:0c:
96:88:2c:67:6c:5c:66:00:8d:00:af:aa:fc:f5:c5:
4f:5d:ee:45:84:c4:a0:5c:88:b9:94:a8:e9:25:ec:
06:f7:88:84:25:af:65:6f:1d:1d:1d:af:4d:28:5c:
b6:89:b7:82:8e:20:f2:0c:7d:df:28:62:c5:db:06:
a3:71:17:68:95:b0:87:61:ba:13:71:1f:71:9d:32:
0a:d4:1e:7d:71:05:05:75:74:f5:3e:a2:32:34:c1:
0c:5e:dc:29:10:c9:5e:d2:cd:f6:27:d6:b0:62:1d:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:11:BD:FD:20:BA:89:68:DA:B8:FB:CB:3C:C0:E9:D6:16:4B:72
X509v3 Authority Key Identifier:
keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:12:cb:47:18:b7:dc:15:f6:6b:5f:1b:3e:6b:08:5b:6f:
a3:f6:9a:03:4e:36:ba:52:bb:66:4c:45:a6:59:96:97:e5:7f:
ac:b9:03:60:3c:57:32:56:a9:d9:2c:ef:20:19:66:38:28:4f:
32:22:91:45:ac:36:89:7a:a1:51:db:47:66:0b:ea:53:6a:ca:
c8:81:09:06:0c:2b:4d:60:05:19:05:d2:88:3c:3a:1e:28:46:
ec:ed:fa:92:79:98:3c:af:85:d1:78:ef:ea:9e:29:1f:27:b3:
d1:4e:9a:98:9d:8d:d3:82:39:76:14:aa:2d:cb:75:fc:cd:8d:
a6:09:44:ae:56:93:50:5b:83:cb:9e:fd:3c:79:12:72:06:b2:
f4:94:5d:9e:9f:92:18:ae:af:4d:ab:1a:f2:8e:94:29:9b:ad:
29:99:c3:e6:af:cf:d5:bd:fd:49:a3:e2:b4:61:39:f3:6b:3c:
cf:cb:ec:dd:99:3f:78:fb:c6:27:e0:da:7a:66:e4:4f:e4:6c:
cf:c1:19:f3:9f:c9:7e:02:e9:4e:89:a7:27:0b:90:aa:99:74:
67:10:f4:b3:c4:9d:78:3c:5d:a0:1e:5a:e0:fb:5e:0e:87:65:
53:94:3d:fd:b1:a9:88:d1:9c:53:a3:d8:51:ba:bc:2c:16:00:
1e:d1:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:57 2025 by rpki-client