Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json)
Hash identifier: BfB94A4zpsvSfd1AZoafff3huS9t9EuJYgSdWuIkRLs=
Subject key identifier: 64:98:FB:6C:97:60:42:89:EA:3B:98:58:83:C4:6B:19:90:73:02:0D
Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Certificate serial: 0AB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
Manifest number: 1291
Signing time: Thu 30 Jan 2025 19:35:12 +0000
Manifest this update: Thu 30 Jan 2025 19:35:12 +0000
Manifest next update: Thu 06 Feb 2025 19:35:12 +0000
Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: NZxrkbH1k78QK4KSwVsF0AlrP9tIl6E5GI66z1qeN9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Validity
Not Before: Jan 30 19:35:12 2025 GMT
Not After : Feb 6 19:35:12 2025 GMT
Subject: CN=679bd470-05a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:64:6e:93:36:49:f6:70:a9:12:d2:03:fd:06:
d4:27:58:cf:c2:00:7d:04:e7:26:50:f6:c9:8c:45:
c3:74:37:1b:4b:06:bf:71:75:7d:0c:cd:b4:f9:80:
88:d9:c1:8b:cf:69:49:81:5e:2c:5d:80:4e:92:04:
09:da:0a:86:d5:dd:01:d6:11:30:d7:00:61:65:1a:
25:46:94:81:a0:1a:cd:06:e3:73:da:2d:4e:8a:17:
a9:fd:cf:d8:e3:bd:aa:79:f2:29:0f:98:96:db:f1:
85:3a:3a:06:7c:b4:68:5c:0e:8d:29:7c:0d:44:08:
29:38:72:95:cf:f6:3a:97:be:c7:e1:cd:50:b2:d6:
08:eb:80:1d:fe:7f:bb:11:bc:d3:fd:28:1a:b7:21:
ed:ee:49:88:29:04:63:e5:f3:a4:74:e1:d0:92:64:
2c:25:2d:de:7e:42:e3:3b:ae:85:3a:b2:7c:08:02:
25:62:f6:c2:c6:61:b3:05:5d:20:2b:86:bc:9f:96:
23:94:b6:1e:75:0a:ce:d5:84:ee:c4:68:57:9b:96:
95:43:31:93:da:be:6b:60:67:4d:f2:30:c4:74:3f:
2d:c2:b3:aa:aa:22:07:9a:4b:d1:63:58:6f:22:24:
20:c4:c3:5c:42:a3:5e:86:70:a7:23:e1:5d:06:dd:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:FB:6C:97:60:42:89:EA:3B:98:58:83:C4:6B:19:90:73:02:0D
X509v3 Authority Key Identifier:
keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:8d:99:b1:19:75:a9:06:7d:0a:b3:3f:18:f2:b5:6f:3e:
82:95:f1:fa:3b:a7:11:bb:1b:a0:fd:8b:8f:15:0a:1b:6f:89:
5c:4c:c9:a7:23:eb:df:57:07:8e:33:84:46:cd:6c:9b:a1:e6:
88:55:0c:49:7f:fc:fb:d7:11:4b:70:02:33:ec:e7:b3:df:4f:
7f:0c:c9:1e:f9:9a:67:63:c3:21:e3:31:7b:d9:61:a1:7b:a9:
bc:f3:ac:ca:05:6c:a6:f0:2f:7d:75:e0:f7:ad:bf:e0:1f:56:
f4:71:08:7a:04:04:97:1e:a9:5c:7b:d3:e6:5a:46:bd:e0:52:
51:51:6b:14:e5:58:b9:b5:75:63:9e:8e:5e:9a:6e:91:43:6c:
3e:e8:e9:8c:b4:34:69:d0:76:07:df:29:1d:df:97:29:fc:db:
08:38:24:af:95:75:c5:f1:98:88:7e:b0:0b:a3:58:70:57:d0:
d2:b3:33:cd:24:7b:83:ec:5e:94:df:5d:40:24:aa:80:19:be:
3b:f6:0f:64:e2:1d:39:37:73:78:7e:9e:5b:75:e6:54:f0:05:
cf:35:eb:c9:fd:8b:f9:2d:82:0a:8e:01:f5:73:4a:6b:47:85:
14:b5:ef:90:34:62:ab:f1:e4:42:ee:8f:be:c3:e3:3e:c5:2a:
6f:e4:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:22:48 2025 by rpki-client