Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json)
Hash identifier: 08akD4zbGtL+WhYdyPHycxO6r3MOpuUakqb6h9THDcA=
Subject key identifier: F7:B6:65:D6:2D:0A:E2:14:DD:F0:B4:82:A0:39:07:87:0B:26:44:78
Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
Manifest number: BA
Signing time: Fri 31 Jan 2025 05:02:48 +0000
Manifest this update: Fri 31 Jan 2025 05:02:47 +0000
Manifest next update: Fri 07 Feb 2025 05:02:47 +0000
Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Ypu/M/mKpriqZrzURj+t960TD7OriM1A4v2/kaFA1hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Validity
Not Before: Jan 31 05:02:47 2025 GMT
Not After : Feb 7 05:02:47 2025 GMT
Subject: CN=679c5978-a176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:b3:9a:10:0e:9a:77:3c:2d:60:36:68:30:
d7:2f:0f:34:50:40:98:93:4f:5a:76:41:28:ab:f2:
a5:2f:25:4b:5d:5a:64:82:2a:1b:d1:d7:00:ae:8d:
b1:39:ad:06:b5:47:e7:67:26:ea:05:7d:f2:05:1e:
13:6d:57:ca:77:01:fd:60:bc:aa:5e:af:36:93:b9:
24:87:e0:29:82:35:f6:91:30:b5:86:fa:cb:2b:7e:
5e:9a:19:04:51:69:b5:fb:09:7e:3c:34:ae:d4:85:
bf:ad:22:29:bc:d4:40:af:f7:8a:97:be:5d:38:36:
80:79:b2:ca:ff:53:1b:a9:3c:4b:bc:23:f3:e1:7c:
0f:4a:d6:80:40:c8:86:01:7b:e8:40:77:8e:e8:70:
7d:a3:a4:2a:c5:a9:c7:5c:1c:68:5f:a9:1c:00:bd:
28:6c:f3:f5:45:e7:d6:61:10:ab:d8:e2:f0:ce:35:
7f:76:5e:d9:74:be:2a:77:e5:47:7d:e4:b4:f8:8a:
aa:e7:37:a6:ce:a6:81:56:28:86:af:da:5b:41:67:
96:9c:21:99:96:21:b6:fb:56:e4:cc:d3:d7:5a:67:
14:c1:c2:19:63:79:cb:e7:86:71:2a:c0:6b:b5:de:
b0:13:55:54:26:c9:e1:5f:9c:78:0f:ba:e2:85:76:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:65:D6:2D:0A:E2:14:DD:F0:B4:82:A0:39:07:87:0B:26:44:78
X509v3 Authority Key Identifier:
keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:50:38:2c:73:9f:7b:96:af:2b:e1:4b:5d:7d:de:63:99:
fa:17:6b:34:24:b0:8b:76:a1:6a:39:11:52:94:a3:f3:4c:33:
6a:dc:39:51:5d:9f:04:9d:f3:2d:a4:63:36:b4:94:4e:7b:0a:
59:7f:d7:1e:b6:9d:21:aa:35:ea:2b:05:43:56:17:79:3c:dd:
f9:a2:f8:7d:75:da:c0:15:2b:53:e9:39:ea:fc:24:08:21:e3:
4d:9b:2c:3b:99:74:77:b4:4c:ac:7a:29:b3:b3:1a:e4:9c:40:
27:f4:67:14:18:b7:fb:fc:04:fa:be:9d:d7:25:b2:38:56:6b:
43:f5:17:25:fb:30:21:86:05:dd:eb:5b:98:14:06:fe:02:78:
58:5b:68:78:47:a4:66:ae:c8:63:46:47:af:a6:df:91:4a:bd:
ee:8a:e2:6d:22:ab:ca:81:53:01:fa:a5:cb:73:72:7c:80:cb:
86:21:a7:a1:92:46:61:a6:64:00:4b:0f:1b:a2:54:cb:cc:f2:
6a:4f:fc:0d:dc:ca:0e:bb:dd:1d:61:f8:15:bc:5a:fa:07:8e:
1b:de:47:71:30:3e:eb:8b:17:99:5b:2a:2d:4f:0a:5b:0b:a9:
18:09:aa:2f:de:69:1a:75:ad:d3:60:00:0a:c0:6e:04:e1:35:
93:52:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:49 2025 by rpki-client