Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
File: 0KCTtlEHkzVIStC6HXZhX1w2aIo.mft (raw, json)
Hash identifier: fkppgO7Zxp/5D8cQTAlLIJzqWk16G1NzQmrtxc8kMVg=
Subject key identifier: 88:51:A5:28:12:D5:EA:34:E4:74:07:E4:15:89:AB:95:8E:E1:53:AD
Authority key identifier: D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A
Certificate issuer: /CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A
Certificate serial: 32DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
Manifest number: 996D
Signing time: Fri 31 Jan 2025 15:20:12 +0000
Manifest this update: Fri 31 Jan 2025 15:20:11 +0000
Manifest next update: Fri 07 Feb 2025 15:20:11 +0000
Files and hashes: 1: 0KCTtlEHkzVIStC6HXZhX1w2aIo.crl (hash: qwpQ47QnmHxgXtWfglW7myHJDwn9X1yCbShVj7RVTs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13021 (0x32dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E275B/serialNumber=D0A093B651079335484AD0BA1D76615F5C36688A
Validity
Not Before: Jan 31 15:20:11 2025 GMT
Not After : Feb 7 15:20:11 2025 GMT
Subject: CN=679cea2b-e807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:af:03:7b:2b:b2:e7:eb:d2:92:cf:6e:b5:
d9:87:e7:af:1e:cf:c7:8b:d2:8b:2c:a7:dc:48:92:
ee:ae:2c:3b:21:af:4c:40:23:44:cd:03:a1:80:3c:
9b:c5:92:09:41:52:34:da:06:c3:a8:7c:1c:a4:ae:
a0:35:57:e3:02:33:cf:d8:ef:db:d9:35:ad:29:04:
59:21:a1:4f:f6:51:a4:42:19:27:50:b4:90:9d:d0:
19:fd:2d:4f:3b:04:ec:df:e7:11:a7:9d:07:b4:fb:
48:76:f2:4d:e0:c0:d5:d6:c5:cb:64:77:0e:77:e7:
a3:37:a3:ca:5b:aa:4e:d6:e4:9f:83:80:98:2a:df:
d7:08:5f:36:cf:ab:0a:3e:de:00:f7:31:b8:f0:1c:
91:19:6a:35:3d:e4:87:d2:6f:19:db:2c:92:b9:f5:
9a:92:5e:b7:b9:38:eb:a6:37:b7:f9:2a:ae:a2:f5:
f8:f4:f6:ea:bc:13:7c:d7:b5:72:10:48:1a:f9:e6:
03:d1:2e:cb:bf:38:48:c9:44:7b:73:0d:31:1f:c5:
6b:e7:29:f4:95:f2:22:92:dc:7e:a4:09:78:5a:d3:
0a:92:f9:87:46:65:30:f6:22:df:aa:f0:90:81:d2:
5e:84:02:23:1a:f1:2d:c5:89:18:f9:c6:07:54:50:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:A5:28:12:D5:EA:34:E4:74:07:E4:15:89:AB:95:8E:E1:53:AD
X509v3 Authority Key Identifier:
keyid:D0:A0:93:B6:51:07:93:35:48:4A:D0:BA:1D:76:61:5F:5C:36:68:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KCTtlEHkzVIStC6HXZhX1w2aIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/0KCTtlEHkzVIStC6HXZhX1w2aIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:4f:34:dd:b9:00:9e:3a:fb:cd:6d:0c:77:db:80:a7:d3:58:
e3:96:91:d5:34:98:06:04:f8:4b:b1:c7:a0:db:47:59:20:49:
c9:a7:8c:1e:06:62:2d:f8:7f:a7:e8:48:33:c0:29:fa:63:41:
30:82:d0:0f:54:ed:a4:59:0a:2b:92:da:66:6c:19:00:1a:b7:
f9:ce:e9:70:d5:ef:5f:1d:f9:f3:f4:ec:95:db:97:34:07:00:
ad:84:29:41:b4:88:e4:c4:31:c6:32:14:2a:48:4b:1c:9f:4f:
b9:41:39:b0:ba:ef:31:e6:71:3c:c6:7e:ac:f8:32:a2:d9:4a:
1a:8e:b3:b1:15:02:52:22:ee:a9:c7:46:de:cd:1c:40:5b:0a:
cb:74:7f:38:bf:f0:f4:95:1a:83:62:d0:87:70:6c:1a:44:b1:
53:24:30:07:7f:31:a8:ea:e2:da:76:ad:a8:40:29:05:ef:bd:
0b:3e:59:23:74:7d:9f:fd:57:60:94:5d:29:48:1a:73:46:e9:
4e:0a:89:5f:1c:fa:4c:f2:18:34:f4:13:c0:54:9f:dc:50:8b:
5a:22:69:78:d8:3d:20:5e:b5:8c:1b:22:64:77:ec:23:9b:36:
41:ba:8c:75:bb:cd:cc:a5:a7:04:bf:af:fa:de:e4:41:c2:47:
90:ab:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:30 2025 by rpki-client