Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier: BJoC07CXM7ZQF4+ua5Tkm347otEYQthfOdAoG1V1Vuc=
Subject key identifier: 92:21:A9:14:DF:E6:83:1D:32:CB:2A:A6:70:C8:7C:2D:ED:30:E9:C1
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 14:40:50 +0000
Manifest this update: Fri 31 Jan 2025 14:40:49 +0000
Manifest next update: Fri 07 Feb 2025 14:40:49 +0000
Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: 02XddQKuBjEypoHHk+Ml16MRYiS3amUqeSGbPa5GBqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Jan 31 14:40:49 2025 GMT
Not After : Feb 7 14:40:49 2025 GMT
Subject: CN=679ce0f2-4044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:09:ec:c0:55:12:16:67:fa:9c:81:78:63:
83:bd:08:ba:cf:7a:bd:3e:f1:c4:ad:5b:04:a3:cc:
fd:1a:7b:9a:9b:8e:02:4f:ad:20:73:15:98:92:35:
ce:59:5f:69:fe:2e:22:c5:86:8d:68:7c:bc:c2:c1:
4a:7f:73:fe:4b:90:f0:e7:00:53:05:f7:59:87:a4:
73:e4:5d:5d:40:da:be:28:77:6e:01:50:89:fb:29:
7d:bf:69:52:5f:99:57:59:d3:71:1e:96:ab:d1:2d:
b4:93:db:74:3f:c9:7d:c6:5f:0a:47:ec:24:70:2a:
59:e5:35:e3:dd:cd:92:94:49:44:0a:ff:81:aa:62:
08:44:d7:62:d6:e2:ba:5f:29:8c:8a:08:91:89:39:
49:ba:56:a4:2a:f4:2b:57:d9:c6:b0:39:40:66:8b:
c4:8d:d4:e2:ba:81:17:4d:99:19:60:c0:48:03:cc:
9d:76:e5:c1:1a:a6:62:af:5d:c4:d7:c4:de:6f:eb:
20:49:75:96:af:ef:e1:d8:da:dd:de:5a:f8:2f:17:
41:51:d7:e6:db:50:1e:e6:72:ca:31:22:f8:d0:38:
47:73:ca:7f:1a:77:0f:89:37:83:b8:0b:c4:bf:3a:
97:6c:12:05:c5:6d:0f:53:cb:4a:02:5c:70:87:8d:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:A9:14:DF:E6:83:1D:32:CB:2A:A6:70:C8:7C:2D:ED:30:E9:C1
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:24:18:8c:d3:25:de:5e:c9:7a:7f:9f:e8:84:62:0a:b5:6b:
51:31:0d:7d:d6:91:af:89:6a:0f:2f:a4:f4:fe:3a:f7:68:f0:
e0:a3:9e:98:33:3c:5d:98:e9:a6:b0:57:77:d0:8d:de:9b:45:
8d:38:dd:93:01:6e:df:cf:8a:d7:13:8d:e0:ba:d3:89:9a:35:
7b:f5:7c:f0:c6:ac:f7:0c:a5:7d:e1:76:52:95:a7:ca:67:53:
80:6e:06:dd:3d:4e:06:03:55:ed:c7:e0:f3:f0:cb:ac:b8:bb:
ed:c2:f4:4e:a3:c3:c8:ff:35:02:2d:cb:ec:5c:d6:80:00:a6:
ed:7a:4f:3b:44:a9:1b:24:41:7b:28:85:56:24:4d:2a:e1:39:
ea:fa:a7:91:0c:28:e6:05:53:02:22:14:ca:1a:49:ca:9b:d7:
f9:23:10:70:b9:11:dd:67:0a:f7:77:4d:60:6c:a1:99:ed:3e:
23:a9:49:bb:c1:02:3a:1b:23:9a:b6:27:10:09:42:ac:a4:cc:
90:48:44:65:15:3a:0a:99:d0:93:d2:15:5f:4f:bf:12:a2:23:
c7:af:2a:cd:b0:55:bb:b6:fe:48:3a:5e:09:b8:82:b7:7d:4c:
c4:6a:48:ea:c1:31:d0:e0:33:10:46:7c:ea:3b:09:1b:71:c8:
8b:08:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:14 2025 by rpki-client