Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
File: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft (raw, json)
Hash identifier: AEfNlSRWdTmwv1oHtlzDx33HkGBjs8335RpkUwON1w0=
Subject key identifier: 62:9E:43:CB:80:92:F7:D7:C2:FE:F0:F2:17:4F:A2:54:6F:32:B1:A6
Authority key identifier: F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17
Certificate issuer: /CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
Manifest number: 0271
Signing time: Sat 29 Mar 2025 01:56:28 +0000
Manifest this update: Sat 29 Mar 2025 01:56:27 +0000
Manifest next update: Sat 05 Apr 2025 01:56:27 +0000
Files and hashes: 1: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl (hash: hIpfonU7gW21TT3xfxJKQ3doICHzjHwA5iJn8y/ek7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91329C1
Validity
Not Before: Mar 29 01:56:27 2025 GMT
Not After : Apr 5 01:56:27 2025 GMT
Subject: CN=67e7534c-946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:5e:83:80:7e:77:71:f8:af:ba:e6:bb:9a:
3d:85:3b:9c:28:10:20:2d:a2:6f:39:7e:73:4b:b5:
84:dd:db:26:a8:22:2f:67:a3:13:d2:d7:32:ca:42:
26:94:0a:c9:e1:c7:92:58:b7:e3:d0:72:fd:f0:e7:
b6:a0:7f:b7:a4:7c:10:9a:7f:32:46:c5:85:a9:19:
b3:1e:78:ac:cc:69:f1:28:b8:47:81:83:d2:15:ca:
43:85:34:28:d9:53:25:70:5f:21:39:58:67:66:19:
02:b2:8a:d7:eb:94:2a:7b:fc:e7:00:50:2f:95:a0:
a6:12:7a:f7:81:68:b0:e0:93:77:e1:3a:fe:08:9c:
62:a2:3a:3a:4a:af:57:32:9d:15:69:c6:8c:aa:cf:
a0:38:98:43:52:14:b5:39:48:40:20:8a:7b:f8:af:
bc:dd:d3:8c:c2:35:f7:60:bf:cf:38:43:7a:a1:84:
c5:6e:4d:8f:2b:8a:46:6b:56:77:40:3f:03:c4:f0:
5a:62:48:28:e5:46:4a:25:81:4e:1b:e7:bf:84:48:
99:f7:9a:ef:a4:4c:42:b2:87:e6:4e:f0:96:c0:4d:
2a:8f:3e:9c:8d:66:13:72:35:d9:8c:83:ce:71:0a:
13:5b:63:d6:29:6b:38:70:f3:42:36:46:20:80:f0:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:43:CB:80:92:F7:D7:C2:FE:F0:F2:17:4F:A2:54:6F:32:B1:A6
X509v3 Authority Key Identifier:
keyid:F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:33:c8:84:6f:f2:24:14:75:e1:ef:b4:ae:e9:85:00:18:
18:3b:ec:25:7c:84:16:a8:f9:ab:e7:ba:56:e4:09:0e:90:fe:
8d:0f:cf:9e:14:f5:68:a9:d1:cb:eb:d3:b1:25:dd:ef:e6:2a:
db:d4:f8:ac:e6:ce:af:2e:7f:31:15:cc:e6:9c:b7:ba:db:3d:
c1:5f:79:f0:41:16:3b:bd:4a:f4:59:e5:e8:bd:bb:ef:66:ca:
d1:16:94:0d:5a:c8:a1:2b:e2:50:ee:4f:d5:06:f0:f0:f9:f4:
ab:87:39:53:34:0e:8f:3e:3f:9b:6f:38:0d:57:ec:96:e7:2a:
cc:9d:38:85:1f:68:7a:96:8a:ef:95:24:91:93:75:9e:89:68:
b6:ea:ba:47:9c:2a:97:4c:06:be:56:e9:67:fa:16:c4:ee:ba:
e5:6e:d3:5a:9b:a0:77:12:cf:3d:95:13:3f:7b:d9:a1:e7:81:
97:02:35:74:6b:5e:20:1f:55:8d:34:83:42:4d:88:8f:6d:20:
7b:36:1e:fb:d8:95:dd:cf:e7:b0:a8:4d:18:47:95:0f:4e:db:
74:f5:6e:a2:f4:b9:2d:38:c3:66:eb:f6:7a:ea:cd:fb:1b:8b:
0d:c4:7d:64:40:de:73:c7:98:a4:c1:e5:e1:e1:0e:72:28:d8:
b8:ee:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:56 2025 by rpki-client