Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
File: kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft (raw, json)
Hash identifier: p2qhEVOas/3itsP1jfJ9Yo0e+0YsKSKQHTf1TW9OgYM=
Subject key identifier: F3:8A:AF:C1:3D:7C:0D:57:10:A2:49:DB:F4:34:55:30:62:D4:69:BD
Authority key identifier: 92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
Certificate issuer: /CN=A911D5F1/serialNumber=92E848E71F7008DCC777B8E23F73DA9278C9A50E
Certificate serial: 0F9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
Manifest number: 0F94
Signing time: Mon 30 Dec 2024 17:28:08 +0000
Manifest this update: Mon 30 Dec 2024 17:28:08 +0000
Manifest next update: Mon 06 Jan 2025 17:28:08 +0000
Files and hashes: 1: kuhI5x9wCNzHd7jiP3PaknjJpQ4.crl (hash: s8aifKBTSXByTDqUwZVVIpGtsvO6Hs55dbOEMZyYKjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3998 (0xf9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D5F1
Validity
Not Before: Dec 30 17:28:08 2024 GMT
Not After : Jan 6 17:28:08 2025 GMT
Subject: CN=6772d828-58f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:ca:d6:4a:2a:a4:e9:81:f9:b7:08:52:09:
5d:1c:9c:4b:0f:59:46:32:29:ea:14:cf:04:cc:c5:
46:45:82:fd:8d:2f:a1:dd:6c:73:71:49:db:c3:30:
d0:35:79:9c:92:df:76:7c:a9:81:9b:38:c8:48:7f:
ab:de:32:59:37:c6:dc:53:85:71:93:cd:23:4a:e9:
ea:5c:96:7b:a8:27:78:f2:e7:54:93:26:d2:f1:0b:
fd:d6:ef:2b:f5:7e:2b:b4:d3:71:30:e0:bd:a9:ff:
7c:ed:8d:8f:54:77:48:fb:c2:09:8c:3b:0e:28:37:
a2:c9:b8:9d:4d:0a:c2:03:ef:d3:3f:c5:20:60:eb:
c2:0b:56:d2:cd:5a:60:6f:11:26:ed:d4:8f:78:2d:
34:6b:51:5c:db:74:a3:f7:76:95:31:7d:9a:31:ee:
f7:e5:a8:bd:e7:3b:fb:cd:95:ed:81:96:0a:6f:e8:
7a:f5:22:75:6a:ae:ee:a7:ba:1f:55:a2:89:28:20:
9d:8e:5e:dd:cc:fb:99:91:3c:9e:fe:50:37:54:2f:
29:59:0e:ff:a0:72:54:cb:2f:8e:4a:62:6c:ff:5e:
39:32:3c:12:8e:50:0f:8a:b9:15:32:11:4d:a7:90:
73:07:c5:61:c8:e3:4c:59:4a:2c:ca:de:d2:1e:8c:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:AF:C1:3D:7C:0D:57:10:A2:49:DB:F4:34:55:30:62:D4:69:BD
X509v3 Authority Key Identifier:
keyid:92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b8:79:4d:50:97:6a:6b:0f:0c:8b:8b:9f:13:8a:b0:29:8c:
33:b4:33:db:f3:a7:b9:41:0c:97:78:dd:61:e1:9c:19:28:35:
5f:f7:7b:28:8b:c5:0e:91:23:dd:b2:f1:c9:b6:df:bb:8a:a9:
08:c9:49:37:63:16:6a:11:8d:6b:9d:d0:45:cd:73:24:ab:f2:
bd:c0:a0:8b:51:c0:66:f8:87:0e:9b:a0:db:98:be:d4:24:ba:
87:00:ee:d7:18:98:97:1c:6d:12:69:d2:27:cf:27:31:05:4d:
41:d4:04:4c:a5:fd:9f:db:94:05:e2:f8:96:57:88:0f:c6:cf:
b2:3f:c2:3b:46:4c:64:d5:ae:6d:b2:cd:2f:1b:70:88:27:2b:
4d:44:93:ec:2a:d7:0c:69:08:bd:55:9e:29:f3:46:66:a9:e9:
85:a6:4e:42:e9:85:cd:72:69:6d:0f:fe:93:ad:36:51:07:95:
5c:66:a7:36:de:ec:39:29:33:f1:1f:7f:46:f4:b8:13:06:0b:
9d:f9:fe:66:72:fd:22:5e:9c:b5:e0:4b:c5:a7:34:56:9e:3a:
07:83:7e:ca:4d:b0:81:cf:a5:4c:3d:bb:33:7b:80:1a:fb:b4:
0d:50:0e:fa:71:09:84:25:93:bf:c8:cb:75:d3:06:9c:a5:5f:
50:c4:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:04 2025 by rpki-client