Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json)
Hash identifier: QKfPP4kQn7Y1lUUcewNhI4Tw719IiOdkVUwMHiiq3vs=
Subject key identifier: 52:8D:0F:62:9C:15:0E:70:A8:DC:12:7B:2E:A8:24:EE:38:89:A2:D1
Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Certificate serial: 0DB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
Manifest number: 0DBF
Signing time: Fri 31 Jan 2025 17:54:04 +0000
Manifest this update: Fri 31 Jan 2025 17:54:04 +0000
Manifest next update: Fri 07 Feb 2025 17:54:04 +0000
Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: WUxbBu7Jj2TEudrP0UF7zAKLaVfv4VFhBXoAktEoTXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3513 (0xdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02
Validity
Not Before: Jan 31 17:54:04 2025 GMT
Not After : Feb 7 17:54:04 2025 GMT
Subject: CN=679d0e3c-9cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:81:92:3d:fa:65:f5:cf:b4:e2:bc:5b:88:
f0:5c:6c:b4:9f:d1:7d:55:4a:12:50:f6:e8:c6:db:
49:f0:e7:cb:0f:52:a5:57:f4:5e:3d:3c:7a:cb:ac:
5f:3e:dc:5f:c7:9b:bc:e1:2d:52:7d:d2:90:66:af:
67:57:3b:23:23:9a:82:b0:50:9d:b4:c6:f7:ac:78:
c4:39:c5:84:5d:0e:70:29:b2:9c:29:91:25:8b:c5:
5a:de:0c:a1:92:eb:d1:09:53:2c:9e:e8:56:83:5b:
08:a0:7f:6f:f4:5b:61:55:32:d1:77:bf:e5:9e:ac:
f1:86:ad:0b:55:b7:0a:52:e3:34:78:e4:ab:e8:10:
a6:22:02:4f:04:e0:5d:38:10:e8:94:55:66:43:83:
5f:4e:46:75:40:ac:e6:0a:b7:8f:7a:9c:aa:e3:93:
38:bb:74:92:1c:62:b1:f9:db:7a:10:93:bf:b2:b5:
42:9e:fb:6b:82:60:9c:98:04:9b:d0:01:61:de:f2:
91:da:25:05:a0:f6:fb:1a:07:de:89:2b:03:dc:88:
16:71:52:46:fd:28:ed:a8:fa:37:87:91:d2:22:92:
d1:b4:58:31:26:da:06:61:94:f0:56:3f:94:8a:0a:
5b:bf:49:0c:3b:34:c7:fa:30:f3:48:e1:68:6e:a2:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:0F:62:9C:15:0E:70:A8:DC:12:7B:2E:A8:24:EE:38:89:A2:D1
X509v3 Authority Key Identifier:
keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:b0:6e:5e:50:cb:3c:7e:d6:4d:0f:68:18:35:78:b9:68:
fa:b2:3a:d0:bd:f5:14:64:29:9f:79:9a:b7:22:d3:e6:a1:c0:
33:70:1d:a5:2b:88:e0:b9:fe:f2:25:a3:e3:e9:e7:ab:5b:a5:
90:90:15:70:8c:b4:61:22:de:b2:59:f3:2f:db:41:25:11:e5:
9b:56:94:c7:9b:8f:f0:66:56:59:f2:24:13:47:4f:17:53:71:
86:6c:10:6b:fc:90:40:f7:c3:e0:f9:b3:f2:54:33:df:b6:d8:
de:01:a9:92:70:08:da:52:19:e4:92:05:f5:9e:e3:59:e5:0d:
7f:f3:4c:80:e5:e2:f9:84:c0:31:21:a7:95:8c:14:a7:7e:e0:
ec:c9:ae:4b:cb:29:ff:41:4a:fd:c7:21:48:88:a9:2a:48:39:
bb:4f:a1:7f:2d:61:77:42:00:a1:90:02:14:ff:74:15:bd:c4:
d7:ee:4a:2d:7a:af:43:51:78:d1:3a:5f:eb:0c:ef:f8:c1:09:
d9:b2:48:44:24:ce:c2:b9:73:f6:b6:b8:1a:fd:35:24:35:82:
3a:d6:c5:91:ae:53:2f:9f:80:30:ac:d0:ea:2d:57:56:79:24:
f9:8f:db:3f:08:e7:68:74:9d:af:2f:ed:f8:21:38:3f:f4:7e:
92:1d:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:53 2025 by rpki-client