Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier: RkLuT/WJY3hxvQhlqWdHsxdHjzHChr3WKVEj4izH/dw=
Subject key identifier: F1:91:85:4F:98:F5:75:52:53:A4:FF:E1:6B:82:7F:2E:5C:9B:F9:44
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial: 072C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number: 0E57
Signing time: Thu 30 Jan 2025 21:40:49 +0000
Manifest this update: Thu 30 Jan 2025 21:40:49 +0000
Manifest next update: Thu 06 Feb 2025 21:40:49 +0000
Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: 1miJ1BiS8Y1bnLM5t/VCB11rl41F0N48RTxE3Lq8Dt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Validity
Not Before: Jan 30 21:40:49 2025 GMT
Not After : Feb 6 21:40:49 2025 GMT
Subject: CN=679bf1e1-0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:8f:5f:ba:1f:4c:d8:8b:33:62:10:e5:c9:
9f:40:5b:78:bd:99:34:e0:f8:a4:01:cb:68:a4:8e:
ce:13:c2:b6:5b:85:5f:2c:f7:7a:59:28:c9:74:0f:
21:96:cc:a4:9a:e4:64:b3:b5:22:22:48:b8:ee:2f:
c3:0f:95:6d:e5:6f:4c:ac:7b:f8:4b:ed:46:6e:b9:
99:37:bf:de:dc:23:c7:51:8b:5c:46:bc:95:e6:4c:
81:4c:f3:a7:c5:9a:f1:bf:09:ca:4d:f7:af:61:86:
86:6a:37:d5:65:d8:45:42:ea:3c:6f:4c:5c:75:72:
4a:3b:12:2f:97:c5:2c:5f:4c:f1:5f:4f:1d:82:c3:
1b:99:28:52:63:c0:41:82:cc:6d:fd:7d:30:3c:85:
04:ba:49:1b:e5:bb:03:6e:59:08:83:dc:7c:ef:9d:
19:91:50:7d:de:00:87:81:75:d6:77:5e:a6:fe:30:
17:c8:00:96:53:ce:29:a1:11:23:21:d8:11:b9:c0:
46:f6:c8:aa:2a:8a:05:3b:75:31:28:23:dd:56:6e:
5d:f1:ee:50:e5:57:3c:9f:dc:49:cc:d7:a7:51:86:
b3:14:a5:a3:61:a9:fe:12:81:e6:82:d8:29:b3:9c:
8e:9e:13:fe:a8:6c:e0:0e:7d:3e:24:ee:df:49:2b:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:85:4F:98:F5:75:52:53:A4:FF:E1:6B:82:7F:2E:5C:9B:F9:44
X509v3 Authority Key Identifier:
keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:4f:73:7d:5e:b9:05:c5:45:be:fd:cc:4b:f7:ac:fd:2e:
fb:2d:17:4a:3f:e3:63:34:6b:33:cf:fb:0a:18:77:01:68:6e:
ed:3c:5d:ce:ce:27:0f:a5:18:8b:9b:ca:0c:e2:b4:28:7c:0f:
d9:12:48:c3:0e:fd:6d:6a:3c:ab:01:e6:9b:9c:9e:b2:3d:67:
2c:58:7e:5f:78:31:4f:64:7c:ce:6c:57:c8:43:25:e8:e0:0b:
a1:51:8b:bb:5f:87:2f:b7:04:de:13:a2:53:69:59:5e:6f:07:
8c:97:e7:bc:55:84:b9:d1:13:47:a9:16:66:58:0b:4c:e9:a6:
27:06:a5:a5:a7:c3:5b:0a:71:62:eb:8c:ed:ff:59:dd:e8:ac:
21:ba:f8:20:cd:95:4d:5a:eb:ab:72:af:3e:25:a9:99:8f:a1:
3c:fc:14:c2:b0:76:b8:07:f0:fd:12:68:73:dd:3b:4e:c2:34:
19:3e:fd:3f:99:c6:b0:d2:cf:38:0a:ae:79:2e:6d:75:de:4e:
4c:93:31:c0:bc:73:06:aa:90:56:79:65:4b:a2:c2:d8:ae:63:
17:84:f9:c9:a3:7a:a4:38:7f:de:55:90:bc:51:50:56:c2:6c:
e8:e3:52:62:cd:a5:3b:01:f8:42:5b:ca:27:49:d6:aa:17:b9:
97:92:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:47 2025 by rpki-client