Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier: r2m/E0/iyg06ra9+O9rZEUSdfPaytmV8L43vIKjTID8=
Subject key identifier: E6:02:19:43:D0:9C:97:88:33:A0:9E:47:89:2A:5A:78:AC:86:54:02
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number: 0129
Signing time: Fri 31 Jan 2025 03:45:32 +0000
Manifest this update: Fri 31 Jan 2025 03:45:32 +0000
Manifest next update: Fri 07 Feb 2025 03:45:32 +0000
Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: jYKyLkNJRLXXd2ugwg7Rk5pDKK3VehXHv8hBUI5jo3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: Jan 31 03:45:32 2025 GMT
Not After : Feb 7 03:45:32 2025 GMT
Subject: CN=679c475c-d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:df:e6:69:06:2c:15:c7:ea:74:ef:c4:83:
63:b8:e0:12:0e:6a:c0:8b:74:75:ba:5b:84:6d:da:
82:85:42:29:b9:88:95:a5:2a:a4:fc:95:f8:12:0b:
af:59:a4:04:91:72:f0:6b:9c:ea:c9:15:60:d3:9a:
1b:19:32:c0:78:29:0a:3e:4b:7a:bf:f2:83:8a:43:
fe:b8:90:0f:e5:dc:0d:bb:9d:27:69:e2:ff:58:92:
a5:fe:27:34:2d:fc:e9:d2:f5:3d:d7:e9:91:29:fb:
aa:fe:05:b6:cf:e9:da:42:da:1b:87:bd:40:2d:12:
8d:23:85:c5:de:59:09:c2:dc:9c:17:ba:a1:61:d9:
75:2a:f3:4f:37:d5:e6:52:1b:b2:1d:bc:4c:78:dd:
09:4b:21:1d:6b:70:7d:54:63:4c:75:97:93:74:69:
31:69:73:a4:72:9f:bb:9c:29:ba:51:4d:8e:52:b3:
e7:ec:95:a1:a2:5e:71:6f:3d:d8:56:f9:2c:8f:15:
59:46:81:02:cc:53:93:da:85:9d:cf:1c:d5:81:12:
80:8b:f8:d2:1f:1b:75:9a:1a:0c:e3:d2:76:ee:af:
49:42:85:8a:02:d1:d2:9b:8c:94:fe:52:4a:d4:2e:
e5:fb:35:4e:a3:93:b0:f7:f9:6b:70:f0:62:7d:f2:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:19:43:D0:9C:97:88:33:A0:9E:47:89:2A:5A:78:AC:86:54:02
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:85:65:b6:4d:da:b8:bd:c2:d9:e3:34:e9:24:e6:d2:80:
2f:a6:12:8e:80:24:41:ff:82:63:aa:cf:2b:1c:81:c7:0b:ce:
e3:a9:f6:da:6d:de:78:69:2d:fe:03:00:d4:48:8c:bb:e7:8a:
2e:f9:99:a5:c0:54:94:b2:9c:ce:8e:ee:70:3b:2f:25:6a:8c:
cf:8a:bd:f8:a8:40:04:78:ec:18:3e:de:3f:12:dc:dd:ae:51:
08:fb:b6:39:e0:4d:d0:3f:31:04:81:26:3f:7b:a1:e2:be:43:
aa:fd:91:c2:b7:f7:e4:6a:58:68:7a:80:93:72:b6:c4:30:c8:
b6:f3:e5:81:52:5e:c4:b6:7b:56:41:9b:da:45:4f:ac:b3:ad:
3d:74:41:2e:b8:02:4c:04:ad:8e:59:d9:75:01:e4:ce:8e:ad:
d4:fe:a0:ea:ef:14:1e:7e:37:7d:21:56:26:ea:99:1f:2f:97:
36:b7:31:29:0c:a2:14:ee:60:07:ae:4a:36:d2:d6:ee:2f:c5:
90:55:2e:24:01:2f:98:a4:79:65:6f:e8:e0:98:f2:2b:f6:c7:
d6:08:d5:91:7d:7f:57:5b:53:c2:2d:ed:5d:2e:ee:44:d0:f2:
8f:a9:f7:95:b9:e1:8d:bf:b7:47:17:be:dc:86:60:71:a2:ee:
6c:07:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:39:58 2025 by rpki-client