Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
File: xhlIJCxagX94h_N49IM8VrevtXw.mft (raw, json)
Hash identifier: yys+T6YzXqLyDHf4l/NhjA9DPZOHDdJkUx6+xP1z2hI=
Subject key identifier: AF:F0:44:C5:AC:96:39:6B:EF:3B:47:7F:66:D6:E6:24:11:B5:B5:5E
Authority key identifier: C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
Certificate issuer: /CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C
Certificate serial: 0697
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
Manifest number: 068D
Signing time: Tue 07 Jan 2025 00:41:24 +0000
Manifest this update: Tue 07 Jan 2025 00:41:23 +0000
Manifest next update: Tue 14 Jan 2025 00:41:23 +0000
Files and hashes: 1: xhlIJCxagX94h_N49IM8VrevtXw.crl (hash: +VzVNc2cdiQYcmWYr51n0lTWknSPSYlPPKZVfNeBCF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C0C5
Validity
Not Before: Jan 7 00:41:23 2025 GMT
Not After : Jan 14 00:41:23 2025 GMT
Subject: CN=677c7833-05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:c5:ef:9a:60:87:23:df:84:74:df:77:f2:
8f:67:1e:8b:56:e9:9f:17:66:e2:40:d1:8c:f9:4c:
74:21:ea:b3:49:74:d7:85:27:f6:3f:f2:02:94:8d:
b4:12:b4:d5:c8:6a:da:36:be:c5:1c:3c:71:38:7b:
a9:00:07:c7:f5:d7:98:1e:d6:f0:a4:1e:e2:89:9c:
b2:d9:b3:cc:e4:77:b4:d0:bc:63:f6:b8:4d:47:17:
15:a4:89:95:fc:cd:7c:44:19:30:31:79:63:d6:f2:
a1:e0:d5:fc:cb:1b:f2:e3:c1:e7:0d:c0:d2:56:95:
de:2f:14:f5:79:f2:34:4a:fd:02:59:85:c7:f9:d6:
db:27:e1:5b:cf:f6:25:56:42:72:c8:6c:7d:72:80:
bd:6e:31:9f:0e:3b:ad:6b:c1:68:06:a0:e6:ae:a5:
08:e3:c9:c2:86:14:0c:93:01:3a:8f:2a:f8:d7:84:
b9:20:f9:8f:11:eb:85:9f:92:01:9a:a3:66:e7:75:
a5:43:1d:9c:d4:7c:da:98:1f:08:c3:19:51:33:9d:
b6:c5:dc:80:f3:d3:1a:e3:fb:bd:aa:f9:93:b6:45:
3f:7c:26:48:3e:40:a1:c6:85:8e:4c:4b:13:9b:80:
24:46:bc:e9:ad:35:01:34:c2:c5:44:5e:f5:f8:ba:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:44:C5:AC:96:39:6B:EF:3B:47:7F:66:D6:E6:24:11:B5:B5:5E
X509v3 Authority Key Identifier:
keyid:C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:bc:f5:5d:50:10:94:56:3a:08:90:7a:14:a9:c6:b9:68:
e3:9e:1d:a2:a7:a0:22:8f:cd:ff:fb:d8:1e:b7:74:b9:0d:0a:
af:ff:8d:da:9e:39:21:e8:5e:ad:91:08:d1:63:c9:25:00:6f:
20:b5:48:46:1c:5f:79:31:62:9f:0a:1f:18:2e:98:ab:10:47:
32:34:9e:31:19:ac:8b:14:d6:19:ee:2d:fe:d0:38:23:4a:43:
95:1e:2a:54:9d:a3:3f:cb:f6:25:30:70:36:45:60:51:24:2e:
0f:00:0f:6b:00:59:ca:63:b1:b3:8a:f9:47:b0:61:09:e6:7b:
f9:dd:05:06:40:86:51:fc:91:4b:2f:44:85:54:a3:8c:63:ad:
f3:e9:26:f1:66:a8:8d:18:8a:31:6b:fd:0a:56:1c:0a:c2:8b:
7d:40:d2:fd:5b:44:04:b9:fc:48:11:79:d7:97:0f:4b:f4:33:
09:f3:99:39:37:b2:e6:6c:28:cc:2e:4e:dd:e3:ff:f9:2f:ce:
cc:71:04:d6:7f:69:26:4c:26:a8:87:08:f3:4e:7f:51:03:5c:
6f:3c:eb:70:fc:30:08:45:68:df:e2:0f:13:66:26:d6:9e:1f:
e9:a6:ef:d0:03:8d:f9:ba:9f:2d:ef:c4:21:e1:6c:ad:c0:27:
6f:7a:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:35 2025 by rpki-client