Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier: h0owKApGx2uWkGHDWVArTa2/0SdA6LzO5Dkefb5+hyY=
Subject key identifier: 11:D2:8F:D3:AE:69:9C:5F:B1:77:80:0C:2A:6E:44:B0:51:DD:91:65
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number: 04CE
Signing time: Thu 30 Jan 2025 23:53:08 +0000
Manifest this update: Thu 30 Jan 2025 23:53:07 +0000
Manifest next update: Thu 06 Feb 2025 23:53:07 +0000
Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: hWM8oHTyMVTTv3rZ192xkhAv4Mg3Ty+/4/v9ii61fA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Validity
Not Before: Jan 30 23:53:07 2025 GMT
Not After : Feb 6 23:53:07 2025 GMT
Subject: CN=679c10e3-c557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:b7:b0:79:92:eb:0a:66:b4:69:c7:b0:ab:
f1:86:b3:47:b9:05:e1:61:7b:a5:8b:71:b0:e4:44:
84:86:4c:79:15:23:db:4e:32:1e:7b:cf:1a:7c:82:
40:65:f9:b0:ce:63:19:42:eb:59:25:a5:08:85:34:
44:68:f9:0b:8a:be:a0:ee:fd:70:a5:3c:66:17:49:
5a:fa:98:64:29:06:ab:39:19:3d:a5:01:48:9a:32:
a3:46:f1:9e:c7:04:67:0a:a3:75:61:0d:d5:80:8c:
b3:db:e0:7e:dd:0f:fa:6e:c0:17:99:5a:72:21:af:
5f:b0:3a:a2:86:46:6e:f0:91:c7:30:cd:c4:7d:4a:
01:f7:17:ee:e0:8a:79:ef:3a:e9:d9:5f:54:3d:47:
fd:7a:8b:21:3e:c3:c5:e6:0e:87:0b:1f:c8:7d:54:
70:8e:52:fe:34:a9:09:a4:28:08:e9:5d:18:48:14:
1d:52:be:8e:b2:02:3b:c5:2c:60:ef:46:a2:02:89:
0b:36:fc:ee:44:76:21:c0:9f:68:09:14:e7:33:af:
15:d8:31:f2:50:62:82:ff:ed:ea:7b:25:43:28:bf:
84:63:be:74:4c:7d:36:b1:ed:6f:c5:fc:64:c9:b4:
f2:50:75:f9:08:dc:3e:5f:ec:55:ec:94:db:86:b6:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:8F:D3:AE:69:9C:5F:B1:77:80:0C:2A:6E:44:B0:51:DD:91:65
X509v3 Authority Key Identifier:
keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:14:69:5c:e2:9f:60:60:f5:ad:a5:99:cb:c2:a4:ca:6a:
40:23:82:17:19:ca:3b:24:61:62:c9:c6:5a:ee:8b:60:1f:d5:
3b:07:41:b9:f4:04:43:da:7b:20:1f:44:a4:b8:e5:cf:da:37:
07:05:f9:8d:f1:fb:90:89:84:8f:47:34:37:52:d1:20:f8:8c:
97:86:6b:da:b9:68:e6:d9:23:57:4e:e3:2e:3b:7b:d6:b1:44:
69:c1:dd:a3:65:a6:b4:57:f8:fd:a4:84:34:70:49:40:c3:75:
da:aa:bd:f8:1f:2b:10:7e:4c:53:42:06:1a:fa:83:d1:d1:fd:
9b:ec:13:a1:3b:0e:b4:e5:6d:cb:c2:d4:37:6a:fc:5d:e6:e1:
77:a7:84:01:06:f7:d2:55:3c:b5:5d:77:d8:ae:10:a8:63:1b:
ef:34:80:3f:f0:27:42:f1:f9:b4:92:4a:2a:24:f4:a5:76:13:
01:b2:a6:bc:15:8b:47:ba:22:5d:98:bd:9a:27:3a:03:e9:2f:
09:c8:17:5a:ff:ee:07:88:2f:0b:21:31:96:56:96:cd:0b:b0:
4d:07:45:f0:00:41:dd:50:a6:ab:0a:96:8b:a8:63:f8:19:dc:
cc:e8:56:11:a6:ba:3e:57:4f:2a:0a:5a:6c:ce:88:49:b0:21:
f2:a4:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:54 2025 by rpki-client