Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: W4a37iAmN49cYnj9NFatz5BTixDDgSgBl8/5sivAVYo=
Subject key identifier: E5:86:3B:8E:2E:8D:FE:A3:1E:90:60:73:68:18:47:A0:5C:6D:18:5D
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 2404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 4617
Signing time: Fri 28 Mar 2025 15:53:36 +0000
Manifest this update: Fri 28 Mar 2025 15:53:36 +0000
Manifest next update: Fri 04 Apr 2025 15:53:36 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: Vh5II1Ua0cJWb4fSjhgxRZdapvXeod/i/Qx0clLjgo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9220 (0x2404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29
Validity
Not Before: Mar 28 15:53:36 2025 GMT
Not After : Apr 4 15:53:36 2025 GMT
Subject: CN=67e6c600-6d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:2b:4e:b8:2e:f3:09:20:17:0d:c1:d7:c8:
9b:78:fc:d2:65:96:eb:dd:0d:dc:6b:20:19:21:c9:
60:bd:13:7a:58:d8:c2:4b:8f:31:16:f8:12:5a:49:
1c:df:82:2a:07:1f:fa:24:72:a5:23:f4:23:86:97:
d1:3e:36:ee:00:1c:2c:a0:51:77:59:b6:22:be:12:
ed:17:a4:fb:e1:38:a9:bc:ed:44:f7:55:d6:47:0d:
e4:ad:14:2d:10:43:88:a1:b5:5b:41:15:ec:4d:ef:
66:9f:83:50:17:68:74:e4:1b:5e:a4:21:3c:83:17:
82:67:2a:e9:2b:1e:a1:a0:57:c4:fb:b7:f1:55:c1:
b4:3e:c3:48:0f:e7:73:fd:4f:11:b7:04:ea:17:d1:
64:14:b8:3f:d6:f1:39:21:55:7a:c2:60:2d:d8:84:
0d:e7:05:0b:fb:6a:e9:56:9e:6a:bd:1b:79:2b:72:
cc:29:34:64:bb:0d:d5:ce:68:5d:dc:22:d0:e2:08:
e5:dd:e3:d7:db:c5:29:d9:3f:ad:71:82:9f:25:1a:
5a:d8:cc:37:f3:1a:b8:93:c2:02:c7:36:66:92:23:
99:d6:7c:47:44:78:88:99:88:2b:ac:ce:7f:b8:80:
ea:2f:35:2c:bb:df:2d:8a:8a:52:b8:18:3e:82:10:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:3B:8E:2E:8D:FE:A3:1E:90:60:73:68:18:47:A0:5C:6D:18:5D
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ec:0c:c0:e3:49:51:1a:be:e4:cc:81:d7:d8:5d:cc:d5:1c:
9b:5d:89:a1:e7:b8:b8:5d:c8:76:84:1e:2f:a7:cf:5d:d3:ec:
37:f1:54:4d:19:99:10:47:77:c6:52:93:58:a0:4d:0d:60:d6:
77:1f:b4:6d:77:4f:3e:c4:f1:32:82:9f:b4:a4:2a:a1:eb:b4:
9e:1c:ca:ac:be:9b:5a:1c:d0:aa:a4:42:6b:79:59:6b:b0:dd:
1f:3c:46:40:a7:ea:91:53:dd:02:a8:4b:a5:1b:fc:68:61:a9:
2f:99:87:1a:26:e1:a2:f7:2f:45:88:19:e2:e1:41:0f:de:8d:
d2:07:5f:19:e2:9d:70:ec:62:25:2a:a8:09:af:49:9b:cf:03:
e6:a9:b8:98:d3:80:64:57:a0:f1:38:a7:73:ea:23:c3:23:f2:
a7:3c:9a:92:9f:fe:ed:31:96:6f:96:65:ea:80:e7:e0:d6:57:
76:d3:bc:b7:9c:25:ac:1a:eb:70:a9:bc:3d:b8:fc:d8:0b:e5:
bc:73:30:84:56:21:9f:33:9a:e1:5a:ba:d6:43:b0:eb:74:01:
3b:d5:9b:49:c0:d4:e6:21:f9:59:d3:e5:32:f9:dd:73:b7:4c:
19:17:e3:93:fa:89:cf:3b:2f:b9:16:78:10:40:ba:d4:8f:bf:
2e:23:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:06:33 2025 by rpki-client