Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
File: xYjecPKsY-wWHdqc3CADirBHKkU.mft (raw, json)
Hash identifier: 5ApZPb1noQWDjnKKWnds30NJv+TsBdvA1LAbgjGLpWY=
Subject key identifier: FD:B5:D7:A6:E1:F7:43:F1:0D:39:26:A2:C6:0C:8B:61:38:4D:13:82
Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Certificate issuer: /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
Manifest number: 020C
Signing time: Wed 12 Feb 2025 02:00:55 +0000
Manifest this update: Wed 12 Feb 2025 02:00:55 +0000
Manifest next update: Wed 19 Feb 2025 02:00:55 +0000
Files and hashes: 1: xYjecPKsY-wWHdqc3CADirBHKkU.crl (hash: l6sqEY7r5NGRcLfdHXZPnWEXd3WKwlfBIVfPbu+e/iQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DFF7
Validity
Not Before: Feb 12 02:00:55 2025 GMT
Not After : Feb 19 02:00:55 2025 GMT
Subject: CN=67ac00d7-3326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:06:36:52:21:2f:69:5e:f7:73:dc:c0:7e:
90:b0:6a:53:96:2f:3d:58:92:e6:72:ef:91:64:60:
fe:76:ff:3a:29:24:4b:2e:60:9c:de:c5:4b:48:1c:
09:34:96:42:df:b6:4f:46:3e:33:76:26:3a:58:02:
09:d2:55:43:3a:c6:32:fa:c1:fb:69:b7:f0:18:cf:
8a:a3:b3:db:8a:d2:2f:3f:bd:8a:13:45:03:e6:cd:
5f:91:86:1f:80:88:fb:be:f2:7d:f5:8f:f2:bd:6e:
95:d7:96:48:f8:2d:d8:a0:5d:ae:55:5d:80:e7:62:
48:80:b8:5c:52:b9:74:5c:ab:ad:66:34:2c:d3:13:
ce:f0:91:7e:4c:2b:d7:e5:e6:a2:fb:40:fc:e3:ce:
f7:d2:4d:50:16:ec:24:0f:c7:9d:65:ed:e9:da:d7:
a4:3c:fb:9b:01:6a:33:c8:d2:f4:88:18:62:f6:ce:
c7:c6:b7:d1:8b:85:e9:4f:6d:31:4f:53:1e:90:c2:
a7:3b:a0:80:88:e6:d9:ee:7b:0d:f5:1f:4a:b7:0c:
c2:40:e6:65:20:1a:92:b2:6d:fc:d8:95:c5:47:80:
df:2e:eb:fa:0a:33:fb:39:06:4f:25:9f:96:50:c0:
c8:6f:a5:a7:aa:40:78:0c:a3:9b:e5:c1:50:7a:f1:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:D7:A6:E1:F7:43:F1:0D:39:26:A2:C6:0C:8B:61:38:4D:13:82
X509v3 Authority Key Identifier:
keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:89:0c:21:4e:65:bc:4e:72:c8:e1:2f:0d:a4:6e:02:b2:93:
e6:e9:c0:14:67:b4:59:ea:10:66:e7:30:b0:45:24:63:0a:54:
19:47:01:1f:19:c8:a2:8e:82:a7:f0:ac:12:dd:40:3d:6e:e9:
e3:8c:eb:8b:b2:62:9d:41:06:ce:37:8e:ec:4c:48:35:54:8f:
8b:3f:b0:a1:46:94:25:da:61:57:f7:62:d8:5b:d3:5b:f8:e2:
8a:49:4e:70:20:65:7a:7a:d3:f1:05:cc:1f:89:2c:45:94:8d:
a7:09:32:b4:a6:c0:2f:c9:e5:96:38:9e:4c:bb:81:5c:cc:01:
be:ff:07:d6:0a:db:71:28:9f:67:0a:4c:52:08:36:9a:59:5c:
06:21:6f:76:f8:ab:06:9d:da:04:47:82:04:42:14:e2:d1:bb:
01:dc:fa:73:04:36:ad:d0:88:9e:65:69:01:1c:ba:b0:fb:cc:
27:e6:44:3b:11:d3:99:a6:30:6a:87:1d:8b:76:32:41:21:af:
cd:cb:20:e7:7e:f7:03:80:42:f1:ca:5d:d2:f3:bf:f8:72:ab:
c8:a1:0c:65:e3:7f:fc:b6:58:a3:a3:f8:94:a6:be:83:97:60:
de:f2:83:c3:a0:f0:38:0f:d6:07:da:90:15:1e:2c:03:73:01:
d8:5f:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:09 2025 by rpki-client