Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier: n+oZSn3IiZAlxNo0N/aqFO6ZgW9Kz7Rro6ugnh0DuTA=
Subject key identifier: AF:51:A8:44:78:D6:74:EF:58:51:90:AC:2E:EB:40:66:10:AA:2C:38
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial: 208A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number: 2AC6
Signing time: Fri 31 Jan 2025 15:58:13 +0000
Manifest this update: Fri 31 Jan 2025 15:58:12 +0000
Manifest next update: Fri 07 Feb 2025 15:58:12 +0000
Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: LRifrTfANK24AiXNl3oA4xnMt+vDIp4G+tAao8tEVKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8330 (0x208a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Validity
Not Before: Jan 31 15:58:12 2025 GMT
Not After : Feb 7 15:58:12 2025 GMT
Subject: CN=679cf315-175d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:6b:44:03:eb:67:cf:b3:4a:04:38:ce:ae:
3d:ce:fd:e2:5c:43:13:e2:ba:bb:23:08:37:9b:f8:
11:3a:ec:4b:56:34:fb:39:33:e9:81:cc:e3:74:7e:
b0:d3:71:89:b4:3e:62:6a:53:6a:69:8f:03:9e:96:
14:70:c6:d3:e6:76:ed:d1:95:24:cd:bf:fc:23:05:
ee:9d:77:65:72:56:d9:84:da:34:b2:64:2c:98:30:
b1:07:7a:67:ee:c5:00:5e:d8:73:88:5d:0d:16:d8:
fb:25:d2:08:c9:57:43:81:56:88:22:69:ff:63:15:
de:36:21:e4:3c:c4:1f:3a:3f:87:18:1d:a1:ef:77:
76:bc:a1:ef:b4:4a:49:65:bf:23:64:77:a8:ec:27:
81:08:72:2a:d3:aa:0a:8b:04:d2:53:18:6f:8e:85:
bd:61:77:22:21:ea:75:ee:f2:4b:9b:11:7d:22:4a:
9b:cc:49:5e:36:33:13:ea:0b:29:49:ff:61:35:57:
d1:ef:a4:ef:18:80:09:77:b1:9f:aa:db:6c:60:49:
d8:92:28:31:4c:e2:b4:e1:8c:60:fc:38:85:63:86:
b3:34:55:b1:78:34:bd:15:37:c8:99:8d:73:50:e6:
ee:d8:c3:1b:7d:15:61:47:c7:3c:52:65:c5:46:5e:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:51:A8:44:78:D6:74:EF:58:51:90:AC:2E:EB:40:66:10:AA:2C:38
X509v3 Authority Key Identifier:
keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2c:2e:e6:08:e5:f7:05:82:86:c0:80:93:41:8b:83:5d:d1:
86:b6:39:42:5a:ad:73:30:20:30:d5:2a:0f:78:e2:dc:b1:29:
2a:1f:3d:3c:3f:d3:dc:e6:66:4d:ad:96:b5:8f:b5:28:f6:d8:
9b:50:d4:bc:e8:72:46:19:aa:49:c3:79:12:84:71:bd:ea:a8:
f3:1f:07:11:de:a4:e4:81:d1:f6:fe:a2:c5:e0:dc:ef:98:15:
27:56:96:b6:73:81:02:a6:1d:aa:ce:41:18:76:d5:7a:ca:3b:
d5:90:3a:15:02:8a:f3:52:48:ed:e4:12:ed:15:9b:f9:04:23:
2c:0b:2d:45:8a:6b:9c:70:89:c3:65:17:8c:84:ad:fc:21:d1:
a3:bc:c8:90:38:b5:91:24:cb:2d:20:e6:27:41:ff:85:d1:20:
10:5b:f5:54:5e:52:0b:10:0b:e7:e8:84:5f:a4:29:7d:fa:05:
fc:a7:59:63:86:7e:1b:3e:94:52:d7:43:3f:a1:53:9c:f1:b6:
2d:2d:e2:65:bf:3a:2c:78:c5:98:ba:4c:14:fd:32:d1:66:ba:
c6:5e:60:8a:19:6c:28:fe:db:4e:df:37:cc:e4:44:bc:fc:0d:
a0:9e:c9:04:c3:1e:de:7a:c6:0c:d4:ad:af:59:dd:c1:45:a1:
04:9a:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:26 2025 by rpki-client