Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: 1uF7MygkYDjfkq88RQ//1q1kE7oRWuOn4sVzy7EeayE=
Subject key identifier: E9:1C:38:AE:D5:EA:E8:BB:6D:41:D4:27:75:A5:2B:FD:96:70:6F:57
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 01A4
Signing time: Fri 31 Jan 2025 02:29:43 +0000
Manifest this update: Fri 31 Jan 2025 02:29:43 +0000
Manifest next update: Fri 07 Feb 2025 02:29:43 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: XYqwpGxLx6bX89/dVtaXKFsvQChFoIk2QkyuzxL29wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Jan 31 02:29:43 2025 GMT
Not After : Feb 7 02:29:43 2025 GMT
Subject: CN=679c3597-d41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:27:46:9d:d9:d7:2e:70:ad:c1:47:c0:3b:
f4:9a:46:41:a3:a0:a8:7a:3a:75:5c:f8:3b:a4:42:
84:11:35:00:c7:55:1d:57:fc:47:48:84:f5:c6:be:
e9:3d:9b:8c:79:9a:05:0e:c5:b2:4c:fd:c3:87:29:
b7:7a:5c:d1:76:dd:a2:dc:bf:e0:57:12:8f:de:5c:
1a:80:bd:aa:53:35:22:21:26:99:f1:80:4e:ab:f4:
4c:62:24:fd:8b:9e:cf:f5:e9:40:48:b4:37:0b:0a:
00:0b:e8:a4:9d:c1:bb:70:00:19:4a:f8:47:be:22:
19:6e:f5:08:9d:84:0c:c3:7e:59:4b:47:3d:44:df:
e4:7c:6b:c8:9e:e5:8e:d0:95:8d:5f:3c:b2:51:ad:
37:30:46:29:93:bc:d8:93:77:e6:6d:6a:a5:d7:f8:
47:d1:4a:b1:5f:a1:69:3e:58:6e:5e:22:ef:13:1e:
74:7d:91:1b:48:aa:bd:3b:4a:8e:3e:1d:82:a8:1e:
4e:1e:73:c8:24:8b:9c:42:bd:4b:f3:77:fa:d9:f1:
08:14:7d:a5:d4:81:b5:bb:8c:b6:bb:46:6e:ba:f3:
25:f6:e5:26:89:2a:b9:42:cc:21:71:ce:27:e4:87:
f3:86:b1:42:bb:be:53:73:a0:dc:5b:f6:4a:38:28:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1C:38:AE:D5:EA:E8:BB:6D:41:D4:27:75:A5:2B:FD:96:70:6F:57
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:aa:ad:da:a5:7f:bf:bb:18:50:bf:27:df:fe:85:64:14:f5:
f6:9a:f9:b9:4d:dc:14:73:50:b1:9e:5b:ce:6b:a0:c7:a9:69:
ae:b0:e5:78:c0:fa:ce:96:7d:33:c7:23:77:da:eb:a7:3b:28:
b6:ec:cc:9a:75:75:62:7c:b0:d5:09:1f:4f:dd:ab:92:90:f7:
cc:01:c7:5a:53:35:53:d4:40:b9:25:5b:6c:e2:84:af:28:7d:
b0:04:e2:43:c6:d0:33:69:49:dc:28:04:e6:69:fc:a0:08:1a:
d0:d5:6d:2e:02:cc:4d:6b:28:59:b5:0a:18:eb:38:0c:08:c2:
e9:12:12:1d:9d:08:3d:8d:dc:8b:40:e1:90:9d:d2:96:35:38:
3f:0d:44:ea:d6:ca:2e:02:1a:b8:70:a1:09:e1:b5:25:11:ea:
2c:bf:9e:43:c0:be:98:a3:10:42:10:7d:9e:f0:b4:7d:2b:db:
3d:31:61:e9:23:9f:12:86:6b:dc:d1:65:b7:78:ce:5e:cb:a4:
2b:ed:5c:50:79:5e:bc:92:14:32:dd:32:c8:b9:cb:a6:59:8a:
2b:40:4b:d9:16:1c:fc:18:87:cd:9a:45:7c:f1:17:3a:3a:11:
1e:50:52:d9:d9:0c:5a:c2:cb:39:50:85:7d:66:3b:5f:60:9e:
a0:48:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:07 2025 by rpki-client