Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json)
Hash identifier: olMZN84rwfHwkCi6MWeK6aHhqQwEqAVvPs6RV1fzfEs=
Subject key identifier: 50:1E:E5:AA:B8:E2:30:D5:49:1F:11:43:29:8B:13:40:38:4F:F3:60
Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38
Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438
Certificate serial: 0C98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
Manifest number: 0D8F
Signing time: Fri 31 Jan 2025 18:08:25 +0000
Manifest this update: Fri 31 Jan 2025 18:08:25 +0000
Manifest next update: Fri 07 Feb 2025 18:08:25 +0000
Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: kC35qHRpBEVrXLvZWPbmW5EtoeOiELDWGCFE8aZW9vE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3224 (0xc98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438
Validity
Not Before: Jan 31 18:08:25 2025 GMT
Not After : Feb 7 18:08:25 2025 GMT
Subject: CN=679d1199-0b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:66:7a:56:ab:3c:a6:21:7e:a1:07:c9:47:
88:37:81:62:71:b7:55:2c:72:59:6b:b3:74:6e:fc:
e5:ff:16:eb:dd:98:f6:cf:7d:5e:aa:32:6f:15:7d:
0e:b8:6e:9e:13:a2:1c:14:5d:65:3f:4a:9b:e9:a9:
66:10:09:e3:f0:04:bc:07:0b:0e:1c:ee:71:2d:5a:
66:46:a1:64:1a:67:3a:ed:bc:45:be:0e:1b:90:02:
34:d5:f8:7b:fd:9f:4c:1f:33:e7:56:21:ed:fd:c6:
51:0b:3d:13:03:e4:9d:f8:2d:60:ac:0d:2a:8e:de:
82:29:7e:8a:9e:62:a4:2d:90:ae:17:aa:b0:44:d9:
03:17:4c:1a:e1:13:52:52:39:66:0d:05:5b:f4:54:
0e:10:24:34:88:f3:13:eb:b9:fc:25:6e:52:4e:a6:
52:8a:15:7b:17:a8:5b:37:ee:01:c4:6f:03:d2:a6:
d0:8e:e7:fc:67:b3:e8:2f:34:6d:f0:b9:31:7f:65:
cf:48:0d:0c:40:4f:17:9d:91:85:df:de:c1:d9:99:
33:9d:e1:cc:6b:ec:b8:61:da:01:3c:dc:89:68:f6:
bb:0f:67:a4:40:10:31:33:c7:01:cb:dd:29:9d:30:
83:b2:d7:7e:21:db:f9:3a:c2:cf:fb:07:d5:2d:43:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:E5:AA:B8:E2:30:D5:49:1F:11:43:29:8B:13:40:38:4F:F3:60
X509v3 Authority Key Identifier:
keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ca:40:29:d3:dc:07:e2:e0:c0:19:12:3b:49:0a:78:31:e6:
77:3c:24:d8:30:c0:a3:75:41:86:eb:34:a7:bf:92:24:27:fe:
30:98:4a:40:0d:75:7b:ac:ce:05:e5:b2:b0:f7:12:fc:07:5b:
fc:a0:05:7a:e4:7d:15:c7:39:62:20:b7:43:ee:80:ef:45:fc:
12:a3:90:94:89:89:c6:1c:91:ee:8d:15:ea:f3:4b:db:18:79:
83:9a:f9:3a:c7:31:3a:c4:d9:a0:3a:e5:cf:81:c3:f9:0f:68:
2b:bc:3a:8f:54:8c:7e:16:33:ed:5d:4d:b3:19:08:c1:48:9c:
1c:75:8a:a9:68:a9:84:a3:1e:fc:06:5e:8c:3e:40:97:52:4d:
e9:3c:f9:65:7a:63:34:99:d7:81:b4:f4:eb:56:b0:af:ed:15:
70:64:01:cc:e4:7d:bc:e7:74:6d:29:81:29:68:98:9a:73:0c:
63:d1:1d:ba:3d:83:09:3e:31:30:fe:e4:dd:21:19:f0:dc:41:
a6:d9:e2:fc:88:be:dc:af:7b:88:c5:15:3e:5c:b4:51:b3:59:
75:d6:a7:51:00:d9:b4:6a:8e:4d:f0:62:d7:c2:ba:40:23:16:
57:4c:23:83:e6:23:e1:dc:b9:dc:dc:66:28:cc:49:f8:1a:ee:
d3:ea:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:07 2025 by rpki-client