Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json)
Hash identifier: gT3vNojZr6R/O8SXP9afnTh9wuey5vtaK+9+IG7fBKw=
Subject key identifier: 11:2B:C7:AD:22:87:F0:B5:72:F3:64:4D:A0:82:24:D0:E2:D4:35:3C
Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29
Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929
Certificate serial: 1138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
Manifest number: 112F
Signing time: Fri 31 Jan 2025 17:15:50 +0000
Manifest this update: Fri 31 Jan 2025 17:15:49 +0000
Manifest next update: Fri 07 Feb 2025 17:15:49 +0000
Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: uxTPBy124j+TLYY82JYKrAPEWeQNZ+/OJUlrOGuzHJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4408 (0x1138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929
Validity
Not Before: Jan 31 17:15:49 2025 GMT
Not After : Feb 7 17:15:49 2025 GMT
Subject: CN=679d0545-520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:3a:86:8e:1a:a0:6e:7e:6e:c2:f3:b3:8b:
f1:c4:97:08:b9:a2:76:ab:0c:19:45:78:54:08:1b:
58:02:80:22:46:6e:60:d2:5d:ee:9b:7e:aa:3b:65:
0f:8c:8e:a2:b0:fe:91:aa:ff:78:84:d9:d5:96:92:
69:46:01:b5:1c:f7:b0:50:51:da:45:c2:06:26:d8:
be:ef:be:15:d8:c2:b4:20:3e:9a:4b:1d:61:a1:e6:
73:f4:24:54:db:0f:23:d5:5f:9d:e6:75:cf:b4:fb:
80:8d:2f:0a:a3:d6:d9:d0:29:35:e0:6d:ce:b3:33:
8b:b7:cb:62:ab:28:f1:84:93:f0:ce:fe:63:71:4c:
d9:a4:36:1c:bc:1e:ed:f0:f0:8c:78:4b:cb:39:b9:
ab:20:8b:eb:b8:f1:87:58:4d:3c:98:a6:79:cc:31:
ef:19:9d:08:e8:1d:5d:8c:65:51:82:af:ff:92:fe:
5b:da:8f:8c:10:8b:32:f6:cc:e6:a5:08:8c:96:36:
52:73:91:49:19:83:f9:88:7b:47:78:7b:da:49:f7:
55:08:0c:92:76:97:5c:be:57:29:c5:6f:10:26:6b:
42:de:ed:f7:74:fe:39:09:e2:72:22:0e:f7:27:52:
65:ed:18:4c:4e:52:2a:fb:3f:d0:15:4f:da:7e:fd:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:C7:AD:22:87:F0:B5:72:F3:64:4D:A0:82:24:D0:E2:D4:35:3C
X509v3 Authority Key Identifier:
keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:6e:a8:b9:97:85:e3:2c:a4:36:57:ae:1b:54:a0:58:d0:cc:
47:ec:15:d3:ec:c6:2a:f8:13:48:c4:06:fc:15:36:fa:10:20:
0f:42:00:c0:3d:33:51:04:69:0d:28:27:01:2e:77:e2:be:8b:
e7:5c:d0:7c:bb:95:d7:29:2d:7c:7a:32:77:fa:36:e9:9e:90:
83:f4:7e:86:84:fd:a5:71:9d:4c:b2:c5:67:aa:19:85:7d:7d:
f1:b2:5f:35:73:25:86:d0:e3:12:99:da:32:0b:91:53:b5:77:
1e:0d:49:a5:19:e1:41:7c:53:3e:79:9b:82:b4:a0:5f:37:df:
b8:2c:28:75:4a:ce:7c:e0:6a:c4:0f:5c:44:3c:4f:07:49:90:
90:58:75:d0:c2:d6:ba:a7:d3:50:1e:e9:25:43:d2:a4:bb:47:
51:4f:5b:01:61:ff:0c:39:95:d2:b7:5b:f3:7f:40:59:d3:7b:
43:cc:35:ef:42:55:e0:e3:f1:2b:c3:e9:54:3f:46:98:e8:c2:
75:b8:26:a6:42:3a:bc:0e:e6:63:cb:1f:6c:5f:53:db:17:bf:
aa:c3:0e:e5:a7:c0:db:a1:d8:b7:90:50:54:1d:ff:6e:aa:7b:
25:23:d9:b6:48:6b:4a:fe:c9:ef:71:00:6a:3f:2c:27:a4:48:
ee:fb:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:37 2025 by rpki-client