Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json)
Hash identifier: dSaC3XWZw823UB5xWuZhg5EJsP4cdhw9L2KXu11a19I=
Subject key identifier: C3:23:C2:18:B5:54:21:C2:C0:61:1B:C5:46:4C:0C:DE:CF:12:6D:32
Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD
Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD
Certificate serial: 24E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
Manifest number: 24E3
Signing time: Fri 28 Mar 2025 14:16:37 +0000
Manifest this update: Fri 28 Mar 2025 14:16:37 +0000
Manifest next update: Fri 04 Apr 2025 14:16:37 +0000
Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: FpBi2Bh1UQa9ZWVP+wP74tjtfgrwmLxgrsdkGR72Nfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9443 (0x24e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BFC5
Validity
Not Before: Mar 28 14:16:37 2025 GMT
Not After : Apr 4 14:16:37 2025 GMT
Subject: CN=67e6af45-3c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:33:0c:ab:9d:d9:d2:46:05:f5:74:80:9b:
95:3d:a6:42:ff:99:ef:c2:c0:b7:85:48:20:50:cc:
af:aa:b1:bb:f4:0c:34:7a:48:21:57:c1:04:8c:ad:
1a:04:12:31:08:1b:aa:1b:1b:ab:b9:1f:ad:cb:c3:
76:04:e1:73:fc:2b:38:8b:77:d7:cc:96:20:3f:82:
a8:7f:03:e8:8d:1a:ca:12:51:14:0b:66:b4:e7:1e:
ed:e5:5f:56:71:8b:2a:28:ca:d1:4e:5c:2e:73:41:
46:41:32:c3:32:48:9a:f7:8b:cc:b7:bf:60:20:8b:
c2:6c:52:a8:4b:1e:e4:38:f0:d4:39:ae:02:68:ab:
93:39:98:e6:f7:ce:f5:df:c9:60:05:36:7a:0c:79:
bd:39:f0:0d:60:e7:0e:30:21:35:1e:dd:c1:28:00:
35:87:f2:d2:2e:db:96:e2:a7:fa:27:10:4e:70:45:
08:f4:d2:70:2c:7c:83:11:e8:c4:cb:47:36:08:be:
fe:c7:09:09:f8:e8:cf:ae:a5:b2:70:35:4a:47:26:
c8:c0:ae:09:69:3f:5f:5f:a0:0e:a1:29:55:74:b4:
84:90:0d:04:fb:13:48:66:47:7c:51:99:fb:1c:35:
6a:de:d4:f4:fa:ef:91:84:1f:68:bc:a3:e9:02:40:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:C2:18:B5:54:21:C2:C0:61:1B:C5:46:4C:0C:DE:CF:12:6D:32
X509v3 Authority Key Identifier:
keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:19:ab:f5:08:d6:e8:7d:f3:fd:f5:ab:a7:dc:05:0d:bb:09:
1e:d3:bd:ee:90:b3:ad:ff:d0:ff:a6:e3:75:89:59:ec:8f:f2:
f5:a8:d5:b0:ca:24:fb:d4:af:e4:80:51:39:af:05:df:e4:4f:
6f:07:9b:2c:25:3c:c5:1a:fa:fd:84:11:b1:d2:84:fc:bd:74:
62:be:c0:d9:f5:e5:de:9f:43:07:16:d4:e5:aa:21:df:be:9c:
f6:15:68:27:0e:b2:61:ad:eb:a8:fa:45:10:c1:e2:0c:63:3b:
a3:b4:c0:26:23:60:ff:a3:dc:8b:f2:22:6a:58:93:62:3c:33:
97:18:9e:e7:f4:2d:61:79:4b:03:a1:24:00:f9:13:ef:6a:91:
1b:f6:9c:90:0a:ee:b0:f6:38:a6:4c:87:f8:77:61:42:1b:6c:
66:dd:5e:ea:03:91:32:38:ce:75:6e:c7:b3:04:62:4e:67:e1:
e5:58:af:0b:26:6f:55:85:ee:77:fc:3a:5d:61:29:70:e0:1a:
b8:d9:45:bd:62:67:d7:13:64:9f:da:e5:28:bb:df:31:64:6c:
bc:81:76:cd:30:70:dd:8b:0a:8a:a0:92:cd:bb:38:89:56:d4:
a3:60:9f:af:6d:0e:2f:8e:a9:84:78:13:68:ea:3e:42:69:8d:
c5:03:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:26 2025 by rpki-client