Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json)
Hash identifier: uDDjUP3ZgBIiZ34DtA0rd1lmVMI9ql5MVTKR2L4LKoA=
Subject key identifier: 42:5C:B9:14:71:A9:9F:E0:35:35:96:37:F3:A4:0A:B9:9C:17:B0:FD
Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
Manifest number: 1A
Signing time: Fri 31 Jan 2025 07:01:48 +0000
Manifest this update: Fri 31 Jan 2025 07:01:48 +0000
Manifest next update: Fri 07 Feb 2025 07:01:48 +0000
Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: EB1I4j1wG+Nyxz8R7PwoK/cDO6p8FubA+/eYLNJUTSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78
Validity
Not Before: Jan 31 07:01:48 2025 GMT
Not After : Feb 7 07:01:48 2025 GMT
Subject: CN=679c755c-c5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:6c:3b:04:0e:16:52:4e:ce:a9:52:e6:4b:
4b:49:12:f9:75:63:b3:b1:8d:a4:fc:ae:81:ee:14:
6c:03:7f:81:a9:28:32:30:fd:cd:ba:8e:74:4b:95:
51:ef:c6:01:78:ea:99:7e:73:74:f3:94:bd:53:82:
b7:47:e4:02:77:3a:5f:74:92:c5:f1:12:0b:8a:2e:
e1:94:a0:31:9c:19:ba:c7:2b:04:4c:49:6c:37:c6:
97:d5:f6:b2:7b:86:66:0b:76:d8:ce:dd:93:7b:d2:
a1:28:77:aa:af:06:bb:51:c9:c9:11:3e:76:5e:47:
a4:2b:d0:17:33:96:38:c0:a2:5a:32:1b:44:31:b2:
f5:d2:17:cb:3f:57:a5:d6:cf:99:e1:fe:65:ea:98:
71:5b:ec:21:ee:25:62:ea:9b:c3:e6:d0:be:6b:12:
ce:aa:87:d9:74:d2:13:a8:c4:3f:4f:d8:34:a7:73:
d8:17:24:60:54:04:61:37:f2:28:e3:69:0d:94:72:
aa:05:b2:6e:ff:bf:11:11:05:7c:14:82:2a:d5:30:
a6:13:62:cb:b0:b6:58:c1:13:40:bb:6c:e1:b1:ea:
18:80:5f:98:43:af:f4:bd:85:d3:98:c1:4c:e1:89:
a1:ad:b4:0c:1f:a4:30:56:7c:3a:76:3c:de:d3:86:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:B9:14:71:A9:9F:E0:35:35:96:37:F3:A4:0A:B9:9C:17:B0:FD
X509v3 Authority Key Identifier:
keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3c:fd:b8:fe:a6:92:18:14:48:ed:bd:c0:ff:fb:c5:8a:b1:
04:cd:f4:d6:1c:21:d0:d8:48:15:cc:19:1b:3a:41:2c:05:02:
9c:3d:e8:63:3f:f8:29:6a:dd:f3:be:1b:35:2e:b5:2f:70:e6:
0d:55:ce:82:7b:da:76:1b:06:c6:92:50:8b:3a:34:62:76:94:
af:b0:92:dc:aa:4e:d6:30:dd:95:0e:8d:dc:7d:6e:1c:2e:54:
06:9c:06:45:18:31:65:96:32:e8:c7:3a:f1:69:4d:2f:45:72:
0d:17:9e:bf:58:44:48:2b:ae:d1:8c:84:7e:9c:19:d3:20:04:
ef:84:74:a9:92:c5:fc:13:78:74:88:e5:47:57:1e:a5:59:b9:
bb:46:c2:10:55:16:5c:c4:a3:e6:1f:d9:22:cf:b9:bd:50:3b:
81:e4:8e:c1:40:8c:65:7d:1a:99:91:7e:97:7a:c8:20:49:d2:
ce:35:f1:2f:43:24:bb:f1:87:49:a5:50:68:fa:1f:4c:fb:fb:
49:09:f8:d3:d5:01:55:2f:8e:2b:ee:0a:39:13:c3:2a:9a:58:
bb:ab:40:af:da:55:d5:cd:58:ac:6c:bf:fc:68:78:05:17:4a:
49:ea:f0:27:93:fe:2d:e6:7c:aa:e4:3f:9c:36:05:d3:0b:bd:
37:15:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:59 2025 by rpki-client