Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json)
Hash identifier: 1PYqyoSX0Am4tvWt52A9BzES6T+bdhFVTo/01z2lPio=
Subject key identifier: 9D:83:50:42:39:AF:1C:11:EC:E4:A3:36:07:7A:17:33:B7:C6:D6:44
Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
Manifest number: 0BDB
Signing time: Thu 30 Jan 2025 21:42:03 +0000
Manifest this update: Thu 30 Jan 2025 21:42:02 +0000
Manifest next update: Thu 06 Feb 2025 21:42:02 +0000
Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: OEzGyuwJ0lY9y2se4pYoDCUywfHYgzXMkhdapoUMTRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3
Validity
Not Before: Jan 30 21:42:02 2025 GMT
Not After : Feb 6 21:42:02 2025 GMT
Subject: CN=679bf22a-1207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:d2:ac:00:7a:8d:6c:1d:81:42:66:00:86:
ae:75:9d:2f:af:43:d5:61:8c:ad:98:e0:d3:41:f6:
83:69:e7:7a:1d:1a:24:aa:a1:ff:fa:29:49:94:d8:
08:a8:fa:0b:19:58:d2:81:0a:6d:dc:6a:1e:4e:f2:
2c:47:90:b7:8d:8d:f5:7d:9f:a3:fc:0b:f1:ca:19:
60:af:04:20:b1:0c:2f:43:fe:f0:86:03:fa:4f:c6:
dc:63:9e:ac:47:d2:67:f1:d2:35:d8:d9:92:87:4b:
62:c0:02:cc:20:e7:b0:17:0d:76:11:1d:58:b6:fa:
5e:76:ed:2a:1c:ab:2d:ae:05:15:2b:20:81:4d:f9:
6b:9b:9b:f8:b9:f9:5e:39:9c:13:de:9f:b2:b1:81:
8e:71:de:0e:0a:10:9c:05:19:05:70:4a:dd:81:fc:
b2:94:fe:55:0b:b4:04:c9:45:b6:1b:56:98:10:c1:
2f:79:cb:d8:51:1d:d8:37:c4:da:92:d0:8e:ec:97:
d3:5f:e9:4b:d4:23:ee:0e:86:e8:cb:bf:26:cd:29:
33:8c:b0:31:5c:47:7e:6a:b5:7f:67:59:a5:89:8d:
3d:22:62:ba:69:6f:3c:30:d3:53:e3:5d:69:9c:36:
2a:d5:41:0f:68:04:24:cb:e2:13:65:97:c6:26:aa:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:50:42:39:AF:1C:11:EC:E4:A3:36:07:7A:17:33:B7:C6:D6:44
X509v3 Authority Key Identifier:
keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:18:38:b8:b9:3b:1b:c4:ee:3e:57:77:95:6e:28:c8:a1:
f5:79:be:23:31:71:e7:82:c9:87:88:27:f3:23:55:21:37:8c:
ae:6c:10:40:03:82:98:46:df:18:64:cd:b6:d1:b8:71:02:fa:
ef:99:9c:55:17:48:19:c6:2f:de:d1:35:11:d8:5d:18:19:b2:
24:a1:3d:0f:86:57:2f:f4:83:30:df:38:d4:78:e7:b2:32:0a:
25:fc:52:07:d6:dd:27:ba:f4:00:c4:e0:1a:93:3f:f2:6e:59:
90:98:b0:34:c2:df:7e:a6:b4:44:c8:96:c5:8f:92:ee:e7:19:
5b:d0:c1:98:9f:b8:6f:4c:a7:c6:1b:56:8b:f6:6f:01:7d:b6:
84:36:52:6a:b1:56:bf:7f:45:e1:c6:6f:35:66:77:14:f4:43:
d9:76:db:a0:c7:3d:ae:f4:2a:a2:7f:9d:fd:7a:aa:79:d6:5d:
a0:ea:74:bf:0c:94:d3:38:2a:3b:bf:9c:f8:a9:15:3f:7d:5a:
4e:d3:f7:5c:cc:5a:30:4f:e5:10:ec:ae:ed:8f:66:f4:fa:90:
eb:db:97:88:8d:72:01:6c:85:66:94:32:b3:61:ef:8c:95:f2:
36:cf:aa:23:8f:7a:58:71:eb:8d:cf:d8:4f:da:f9:aa:a2:49:
73:a0:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:36 2025 by rpki-client