Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft
File: RTGic8LE6mi2e5it5VtGI--TdaQ.mft (raw, json)
Hash identifier: x1Oed6Vhts6fzqErhAjRQml9i4OnFCX9oKOOP3lCEYA=
Subject key identifier: 49:2C:F7:8E:FD:82:BF:3F:81:02:4B:EA:54:13:48:F3:AA:56:83:10
Authority key identifier: 45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4
Certificate issuer: /CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft
Manifest number: 07B2
Signing time: Thu 16 Jan 2025 07:01:54 +0000
Manifest this update: Thu 16 Jan 2025 07:01:53 +0000
Manifest next update: Thu 23 Jan 2025 07:01:53 +0000
Files and hashes: 1: RTGic8LE6mi2e5it5VtGI--TdaQ.crl (hash: rHmXrX8Rmv2EWz91+4BSSoUoQnqA4NIi+mtcFzw9SPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954C1
Validity
Not Before: Jan 16 07:01:53 2025 GMT
Not After : Jan 23 07:01:53 2025 GMT
Subject: CN=6788aee2-5d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:b7:00:37:06:0d:25:d3:b3:73:a4:ce:bd:
7b:08:25:68:d8:f2:28:7a:7c:c0:c3:bc:97:35:16:
38:54:3b:d3:15:9c:fa:a2:30:44:bd:3d:01:7d:3c:
19:ce:6c:dc:28:e1:04:0c:26:0c:cd:89:b1:ab:4e:
bf:62:ad:47:ee:ce:4b:5f:f1:3c:28:32:5b:7e:1d:
60:ea:22:33:94:75:75:4f:04:06:85:02:c7:6e:07:
3a:3f:c5:1c:51:d6:a8:55:ca:01:49:ac:c6:92:15:
f2:5f:b9:c8:9e:db:0c:66:d6:e1:0c:ab:66:50:3c:
fd:9e:c3:bc:48:d3:c7:0a:e8:6c:8f:a2:94:c5:2a:
d7:c0:5d:87:81:eb:1b:8f:4b:9e:08:0e:77:80:c2:
3a:ce:cc:6f:02:eb:5d:c9:e5:cb:8a:25:5d:5b:a6:
ed:a0:54:a4:cf:05:e5:cc:e9:10:6d:80:22:7a:4a:
74:a6:48:b4:f7:66:0b:a5:6e:8e:b5:ff:91:2c:31:
b9:5d:e7:d7:84:32:b7:c0:cf:d5:ff:26:0b:d7:fb:
4d:08:e2:85:80:d1:be:b1:08:e0:90:c7:cc:c2:6b:
66:17:db:65:fa:ea:46:d1:90:2e:4d:1e:72:9a:bb:
1f:6b:e9:0d:ab:12:5b:17:3e:15:49:63:be:19:0f:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2C:F7:8E:FD:82:BF:3F:81:02:4B:EA:54:13:48:F3:AA:56:83:10
X509v3 Authority Key Identifier:
keyid:45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5f:31:54:15:5f:b0:22:50:57:db:4d:1d:43:5d:75:a4:d6:
d4:37:94:55:eb:85:5c:48:c0:ce:46:b3:4c:05:7f:5f:a9:bf:
d9:4d:e9:50:9e:a5:11:71:6f:2d:f4:21:84:fa:e8:37:c7:d5:
61:ba:11:33:09:57:45:cc:d1:db:03:21:16:d9:07:f2:5f:e6:
e6:21:0b:a2:75:10:23:cc:31:6c:da:3e:25:5c:00:63:32:e5:
4e:57:5c:88:2d:a3:72:9c:6a:4c:d9:cc:51:38:5c:11:fe:89:
be:3d:b2:ec:ad:83:58:84:3d:af:c9:18:a9:f7:80:00:90:4c:
23:7b:28:e7:3c:8a:e7:20:69:1b:49:da:a4:03:74:be:4b:6e:
5b:96:8b:72:a5:29:fd:45:8a:5a:1d:ed:2b:10:46:59:57:e9:
94:0d:54:8c:16:fa:71:46:29:33:70:4c:db:6e:f4:23:69:9f:
f5:15:0f:6b:95:82:bb:d7:cc:7b:7e:18:77:49:ff:50:6a:fc:
7e:18:6c:ee:3b:d8:18:c3:7c:08:43:43:a5:fd:b5:e4:fd:91:
9e:83:90:82:6b:74:41:9d:d9:0b:59:67:a7:78:18:82:73:be:
87:6c:3c:af:ff:9b:e8:93:af:77:36:e7:f7:ac:d5:d5:40:56:
22:a1:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:11 2025 by rpki-client