Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json)
Hash identifier: vJyQGPp+XFkXSm0xQPs08I1ZBy9HuxIotP+uKNpNA9w=
Subject key identifier: EB:6B:41:3D:6B:C0:A1:28:96:76:60:8E:15:37:A1:2F:37:8F:78:26
Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
Manifest number: 3446
Signing time: Fri 31 Jan 2025 15:16:01 +0000
Manifest this update: Fri 31 Jan 2025 15:16:00 +0000
Manifest next update: Fri 07 Feb 2025 15:16:00 +0000
Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: dHB5qLVuOlJbHn5AQDeOVgqhkkEemadmPtz/tu8jXGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Validity
Not Before: Jan 31 15:16:00 2025 GMT
Not After : Feb 7 15:16:00 2025 GMT
Subject: CN=679ce931-4d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:26:e6:29:98:09:32:5b:3d:3d:6b:0c:87:
7a:1c:0e:14:6b:16:cb:92:e5:fc:77:b5:59:85:74:
09:25:d4:f1:a2:5b:78:81:fa:bf:3b:06:55:58:ea:
a0:74:a5:fb:53:d7:36:67:35:f7:95:9f:9c:4f:a4:
bc:62:68:73:ef:b1:c1:c8:81:6d:ec:8d:80:5c:ea:
8f:6f:df:fb:c7:0f:6e:63:7e:59:1c:ed:60:1c:2a:
92:e6:18:e9:64:81:71:c4:6d:b5:8d:fa:fd:10:fa:
71:e5:b7:cb:52:d0:9f:b8:c8:b1:39:b6:70:33:f0:
ff:1b:c8:c4:97:f2:e3:74:03:46:d9:58:65:1a:16:
81:4e:3f:d1:27:54:d9:fc:52:c9:f8:0e:36:d9:d5:
28:5b:f4:79:00:03:3f:46:9e:64:f4:cc:a5:e8:75:
f5:0c:c6:df:9b:56:32:10:09:f1:dc:63:4e:5b:2a:
e6:4e:a5:b9:3c:bf:74:5b:f1:6b:e5:e6:c0:3b:44:
ce:c3:2c:0a:44:e5:9f:af:63:e1:6a:74:bd:f8:da:
f2:ce:bf:44:a6:82:ab:17:cb:8c:81:ef:44:3b:8b:
01:ed:0f:9d:93:12:5d:3c:a6:f2:6f:51:84:70:32:
df:38:dc:6c:b8:99:fd:d8:d2:76:5c:a5:f6:b7:9a:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:41:3D:6B:C0:A1:28:96:76:60:8E:15:37:A1:2F:37:8F:78:26
X509v3 Authority Key Identifier:
keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0c:49:b6:4f:c8:99:60:2e:e0:41:ac:9a:5f:32:75:47:28:
3f:af:b7:1f:b2:98:73:1e:de:78:63:d3:36:52:58:d5:31:5d:
b6:77:4e:7d:18:ea:e2:b5:7d:e9:0d:25:1d:87:64:fa:e6:09:
50:e5:fc:3c:30:15:85:3e:2c:ea:07:54:a5:7f:19:f1:1b:32:
54:42:79:9e:df:ce:84:25:5f:98:66:e0:55:2f:c8:f4:2d:d5:
58:77:1e:53:eb:a3:0f:55:b4:68:66:f3:01:b5:9c:48:93:02:
1f:81:5e:bb:d9:63:1b:f2:a2:cc:9d:29:31:86:ea:a2:63:12:
d2:a4:14:82:62:7f:60:dd:44:85:22:1e:69:a2:a4:8c:24:4d:
23:96:5e:f6:3b:d2:1a:71:30:28:23:ef:e6:47:0d:55:fb:bf:
57:12:ea:13:25:85:aa:6a:ec:66:59:47:13:36:24:e4:64:d8:
36:5f:00:ba:44:33:c5:ce:57:13:d8:83:7f:f5:1a:75:eb:67:
15:cc:94:42:c8:c3:6a:36:64:d9:66:79:6b:69:38:dd:05:eb:
ab:94:55:1b:39:64:ff:7f:7d:00:1c:f5:80:65:f5:18:f4:c4:
86:9b:4f:d2:ef:12:3a:ff:f7:93:a1:eb:de:22:f8:bd:3f:1b:
00:ba:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:48:00 2025 by rpki-client