Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: apA9A+c21gbutl0UanquTZOUav16NvCeFf9YS3b+1y8=
Subject key identifier: C3:D9:CF:CD:62:6D:46:39:40:DC:B9:9D:81:76:85:0D:D5:3E:64:DB
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 344B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 344B
Signing time: Fri 31 Jan 2025 14:37:32 +0000
Manifest this update: Fri 31 Jan 2025 14:37:31 +0000
Manifest next update: Fri 07 Feb 2025 14:37:31 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: WX30WSKFBOzi6MjE4W7fA/k0fogiOnKYl8KZskuOPHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13387 (0x344b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Jan 31 14:37:31 2025 GMT
Not After : Feb 7 14:37:31 2025 GMT
Subject: CN=679ce02b-d6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:71:20:70:96:25:e8:86:71:ff:7b:6b:b5:
2c:30:fd:ae:a8:6e:28:7e:d3:90:56:51:f7:1f:02:
6a:d9:1b:5c:79:9e:cc:fa:f3:a1:70:91:45:a7:d3:
4e:05:c5:58:51:64:a4:d8:29:d9:9a:2d:ed:c6:5d:
ad:e3:bd:c8:19:d0:4e:c2:6f:0b:52:98:b9:9d:a7:
45:cb:28:17:df:14:d8:49:ac:08:cd:8c:22:2a:7a:
e6:f5:d5:cb:01:2f:59:e8:14:8e:d7:48:9e:66:a2:
ea:13:7b:ad:b1:cc:bf:e3:0a:cf:1a:02:0b:b0:55:
1d:2f:37:a6:64:95:aa:2e:28:e4:7a:15:e0:02:6b:
21:00:2a:7c:9e:8c:bc:b0:56:31:0a:fc:c8:d5:3f:
72:08:b2:80:97:10:2b:dd:75:41:a4:d8:f5:8b:9f:
b3:d8:f6:d5:b1:bd:a5:c0:fa:26:fc:15:40:45:3f:
02:e1:60:42:f8:12:80:be:01:5d:bc:ff:50:73:eb:
e8:c2:35:48:e8:a1:e9:17:b0:e5:a7:9e:37:37:b1:
b6:f3:20:1f:b9:45:da:16:cb:71:3c:ec:47:1c:79:
80:ef:90:fa:dd:06:2f:5d:2b:cd:43:80:1b:ca:d3:
8a:81:e5:a0:16:40:89:f5:55:24:aa:99:17:35:27:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:CF:CD:62:6D:46:39:40:DC:B9:9D:81:76:85:0D:D5:3E:64:DB
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:fb:6f:a5:ed:fa:01:96:b9:20:38:0c:5a:84:f3:fe:64:
e9:cf:81:7f:2f:f3:cb:df:50:cb:95:06:fc:a7:60:37:5a:3e:
aa:5b:ed:aa:18:e4:3f:22:2d:3b:ff:2d:02:9d:b1:4f:f7:a7:
46:01:7d:c7:9a:77:09:4d:a3:16:10:80:da:54:26:8a:4e:1c:
79:c4:00:72:89:ad:dc:b7:d2:5e:65:b5:4b:4b:39:89:de:06:
8f:07:a8:74:43:cb:01:b6:b4:f1:65:ea:3e:fd:73:bc:d4:7d:
1f:f8:79:6c:d7:5e:59:ac:b9:04:18:5f:8a:f9:2f:bf:43:2c:
b4:44:6c:7a:01:2f:6e:02:fe:83:07:ab:df:96:09:c3:21:e7:
bd:2c:4b:8c:70:93:e0:26:54:8a:21:01:e2:4c:cb:0c:99:8b:
68:99:60:db:88:5f:bf:7e:3c:ba:0f:bc:ef:5f:2f:ee:56:ed:
9f:b8:c3:66:30:f5:e3:61:11:90:52:9a:87:48:b9:b7:a7:07:
67:13:aa:75:fa:67:77:05:7b:bc:78:75:33:20:cd:a4:30:07:
c2:22:d0:60:0e:f8:84:58:08:1e:54:89:44:d9:3e:d8:a5:d5:
2c:bb:d0:96:6a:14:1e:d0:20:40:04:ef:b8:e1:1f:fe:a5:ac:
a3:1c:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:41 2025 by rpki-client