Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json)
Hash identifier: CanBAzi+OaUnu6wYOvmEJKRXhnV38yaWUu6Te/o8Jzo=
Subject key identifier: CF:1D:6F:56:B3:FB:B2:65:35:B3:7B:69:2E:D4:79:26:5E:16:BE:52
Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
Manifest number: 1309
Signing time: Thu 30 Jan 2025 19:29:36 +0000
Manifest this update: Thu 30 Jan 2025 19:29:36 +0000
Manifest next update: Thu 06 Feb 2025 19:29:36 +0000
Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: uH3PKHYEyLteuZ1+kc2EiAkhkpRJzl7Pg3M9WUQG8Fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE
Validity
Not Before: Jan 30 19:29:36 2025 GMT
Not After : Feb 6 19:29:36 2025 GMT
Subject: CN=679bd320-4c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:d0:63:f6:28:85:a5:4b:10:a9:8d:16:79:
c4:2e:ba:ad:c7:d4:d1:bd:6f:41:82:9e:71:64:33:
56:41:90:83:14:8e:2c:5c:1b:bf:7f:c4:2e:e8:38:
f9:4e:03:1a:c2:cf:92:c4:7e:8c:62:e6:56:36:cf:
11:1d:04:73:9e:85:83:fa:b3:9a:46:bd:f8:2e:ab:
ae:85:0e:89:3f:17:8c:32:d5:55:2e:81:ee:83:f5:
85:de:e3:0f:85:32:36:80:1a:49:48:7e:e3:ef:b3:
07:dc:bd:0b:fb:f5:9f:2c:f6:fd:f6:21:40:71:95:
1b:31:ca:33:c8:97:85:43:7e:59:f9:82:6e:c7:74:
2a:d9:59:28:68:64:be:eb:b5:56:7e:3a:26:e7:e2:
1b:23:88:31:9d:23:8a:8a:04:bf:94:4d:5e:bf:77:
99:2d:75:b7:db:7d:4c:07:c3:2d:2a:f7:ae:5e:7e:
0c:25:b6:41:4a:ca:3b:d6:c7:04:00:f9:91:83:e7:
04:ef:47:42:38:d7:bc:9f:c3:7b:43:bf:82:a2:05:
16:a3:33:d9:44:dc:0a:6a:aa:19:77:12:80:0f:dc:
88:84:57:04:00:ee:aa:cb:01:b1:79:b3:5a:18:4b:
ad:9b:81:cb:37:4f:71:e2:e0:3f:65:e3:bb:b7:72:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:6F:56:B3:FB:B2:65:35:B3:7B:69:2E:D4:79:26:5E:16:BE:52
X509v3 Authority Key Identifier:
keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:54:70:c8:4d:09:34:14:b6:be:fb:8d:bd:65:dc:31:e4:9e:
92:ac:c6:cc:ba:84:6f:17:75:9b:ee:d0:83:94:00:a0:9c:4b:
c1:10:34:cc:5b:bc:50:d8:0c:fd:46:bf:92:37:72:6d:ae:5f:
f2:a5:53:6c:22:78:5a:3f:0f:9c:fa:78:0f:9a:27:a0:97:a5:
de:f1:fc:3d:2d:32:08:44:27:4a:bd:46:5c:43:9e:1c:fc:a9:
2d:b2:f3:77:e0:8c:c6:5f:e4:da:88:a6:ad:c8:d7:9e:a6:e8:
c7:a0:c0:a2:8f:87:34:5d:26:f3:52:81:3a:b8:60:5a:bb:9a:
5b:1e:9c:97:90:26:94:ff:a0:d6:c3:ed:c4:03:dd:81:be:1c:
25:61:21:9e:fc:21:c5:d1:92:f9:1d:96:24:0e:21:14:d7:53:
07:e5:4d:d6:c7:b9:87:ba:a8:73:82:60:62:fd:2a:c4:42:d7:
ac:10:ca:e1:25:30:9d:4c:91:3a:01:05:07:00:f1:04:c0:40:
0c:32:38:b1:b9:0c:da:be:e4:55:b2:cd:f2:87:11:32:f6:90:
72:1a:e7:ff:ed:a6:42:a8:89:f5:03:6b:a7:f7:94:e6:7d:e9:
6d:9b:22:a1:3d:86:fd:19:f8:8a:b6:8c:00:a5:76:7b:cd:2e:
d1:9f:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:51 2025 by rpki-client