Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier: e0WtPdjymBfRbdH/trUTA7t7XrwR8UBj8qxNOv50fvc=
Subject key identifier: 47:2C:CC:61:E6:5C:61:37:AC:F6:09:D6:2C:D2:4F:94:D4:C0:06:FB
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial: 24FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number: 9E4C
Signing time: Fri 31 Jan 2025 14:31:52 +0000
Manifest this update: Fri 31 Jan 2025 14:31:51 +0000
Manifest next update: Fri 07 Feb 2025 14:31:51 +0000
Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: JXGAnWkTGAZcHTwGU3SqMOu06d2D7Ntk+QSHI4M/RuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9468 (0x24fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Validity
Not Before: Jan 31 14:31:51 2025 GMT
Not After : Feb 7 14:31:51 2025 GMT
Subject: CN=679cded8-4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:38:19:cd:06:04:5d:b9:d9:0d:bb:23:56:
51:a6:94:ae:f2:7b:5e:7c:25:c5:77:b8:34:1c:c1:
48:0e:be:b0:6a:f6:6c:59:b3:c4:3f:69:4d:21:b5:
b7:4c:27:22:ae:15:7d:ad:84:38:64:33:09:ee:e8:
42:52:07:bb:d2:e2:73:6f:89:5c:ea:c0:21:ab:fa:
3a:fc:3d:28:62:87:75:9a:34:58:a7:ea:78:9d:95:
43:ab:7f:cf:53:66:3e:84:13:71:53:df:31:77:2d:
e9:97:9a:e5:9d:59:11:72:e0:d4:5f:fc:66:d3:3e:
a2:b3:db:d5:ac:de:02:e0:2b:37:c4:41:bd:e5:98:
4c:40:3d:4e:76:30:4b:e4:23:43:94:da:bc:91:aa:
b1:8f:0a:15:80:b9:ee:f6:76:52:05:67:91:41:c6:
2a:3c:3d:e5:54:ac:25:aa:08:24:68:a0:20:90:e1:
1b:d4:c8:13:34:15:d1:f6:cb:c1:8b:d1:4f:d3:c4:
50:9d:6e:7f:cf:68:1e:09:f8:4f:05:54:e9:d1:99:
35:a7:f9:09:87:73:fc:11:3c:a2:e6:6f:12:0a:94:
62:1d:60:40:d7:ac:cd:ad:86:3a:bf:e3:0c:be:a6:
49:35:eb:6f:72:83:33:5d:41:0a:ec:ea:50:b6:80:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:CC:61:E6:5C:61:37:AC:F6:09:D6:2C:D2:4F:94:D4:C0:06:FB
X509v3 Authority Key Identifier:
keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
fd:27:0d:94:7a:0a:e0:46:17:52:68:85:de:ff:9d:43:2b:4e:
96:fd:2b:4e:87:ea:fb:6c:31:64:1f:f7:d8:15:af:4e:eb:c9:
b9:e1:20:4e:7c:e8:40:85:50:b3:a6:7a:fa:4c:2c:69:6d:59:
8d:06:2a:c7:28:af:9d:a4:cc:36:41:06:be:84:93:38:bb:19:
6a:64:6f:8a:6d:02:2f:1b:d5:d2:9c:81:e1:f4:f3:91:65:3f:
9b:40:cc:c5:0c:ca:fb:29:42:18:20:a1:6f:84:a2:c6:1f:61:
db:93:23:a9:89:7b:70:30:1f:67:08:a9:54:03:f2:7c:3b:7b:
a6:6a:b0:5b:15:0d:fc:7f:95:f3:19:ff:85:9d:ae:80:58:43:
a3:b7:99:e3:be:f6:04:85:df:59:14:c0:f6:90:b3:16:a0:9c:
13:61:dd:bd:a8:c8:02:58:35:55:84:70:ec:cd:99:e5:35:f0:
43:9d:13:bc:6a:46:0b:65:35:aa:8b:b0:5c:75:fb:0b:b0:ac:
0f:cb:2c:47:b8:9c:f8:f4:bc:fe:ec:a3:c6:ad:43:73:7a:c5:
d2:5e:4f:91:be:d7:8c:7c:dc:ed:20:07:15:06:d6:cf:4a:c6:
2d:e8:92:10:56:84:a4:06:ba:62:21:ea:11:8f:85:61:f0:dc:
bf:1f:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:01 2025 by rpki-client