Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
File: vR2pHc9Y0IwVyUUayvYvirO-JCA.mft (raw, json)
Hash identifier: DsJpHvYeiqDtw/7PPoXBHiYR32N/OLqb2gZEV8Pzkv8=
Subject key identifier: 3E:08:F6:EB:51:ED:DC:37:C2:01:F3:A7:0D:83:CB:20:96:64:B6:EA
Authority key identifier: BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20
Certificate issuer: /CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
Manifest number: 033E
Signing time: Tue 11 Feb 2025 03:28:16 +0000
Manifest this update: Tue 11 Feb 2025 03:28:15 +0000
Manifest next update: Tue 18 Feb 2025 03:28:15 +0000
Files and hashes: 1: vR2pHc9Y0IwVyUUayvYvirO-JCA.crl (hash: VU/Sp3Omjd2+Bf5wtwOE2WjXxVRpA/Xhp9F5E0jlNMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156B77, serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420
Validity
Not Before: Feb 11 03:28:15 2025 GMT
Not After : Feb 18 03:28:15 2025 GMT
Subject: CN=67aac3cf-8868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:83:a6:ea:fb:19:77:e0:03:17:fc:07:10:
ba:b8:ac:9a:77:a7:5d:b2:3b:8b:98:72:7a:c8:7b:
4c:14:83:06:8d:62:49:8e:03:5f:ab:7a:0f:45:0e:
fa:a4:3e:a5:aa:2e:bf:d6:29:bb:59:55:a6:08:58:
ee:9e:45:47:e8:11:12:a2:d1:14:61:2c:45:3e:ab:
f1:0d:c4:d3:d5:2d:69:84:be:4a:41:9e:66:47:c8:
1a:54:64:a4:db:a6:5f:37:9d:dc:80:a6:0c:05:0d:
a9:57:94:f8:87:8c:1f:43:b6:f7:47:74:9e:ae:3d:
a2:b7:08:47:a3:42:c4:b0:bf:71:2f:8d:b3:74:0d:
c4:2b:57:31:b8:e9:88:8f:25:8b:a1:1d:5a:d7:1c:
97:0c:6b:37:aa:ba:6e:9b:b3:20:02:73:ca:af:7c:
89:98:ed:0e:b1:5a:f3:46:1b:8c:d5:7b:a0:5e:69:
b0:83:5c:d5:0b:7f:5e:b8:44:87:ee:6b:48:48:5a:
e8:3a:01:8f:98:a8:fb:44:42:d0:ae:e0:ea:63:93:
fb:0a:16:2e:ab:14:b4:41:54:48:61:de:f9:d7:1c:
26:1a:8e:ac:fc:94:f8:67:32:53:c4:3b:49:32:8c:
58:77:30:7f:df:c2:2b:c1:f6:88:a4:8b:5d:ac:7b:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:08:F6:EB:51:ED:DC:37:C2:01:F3:A7:0D:83:CB:20:96:64:B6:EA
X509v3 Authority Key Identifier:
keyid:BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:f4:83:61:15:d2:37:7b:72:a7:1d:91:d0:aa:e4:44:3c:
77:a5:c4:bb:57:04:8b:2a:6b:9a:0f:53:d2:34:e0:5e:71:f7:
66:a4:d0:99:a6:bf:8a:c4:6d:d5:48:82:b8:c1:50:ab:49:74:
a9:be:6a:65:de:c7:bf:4c:8d:21:94:78:46:b4:ed:ec:02:1b:
3b:18:93:4a:c7:78:68:96:a3:c5:27:ed:2b:fb:c7:2c:0b:43:
8e:5f:df:44:99:5b:c9:a4:84:a1:5f:52:4f:24:c1:7d:fe:ad:
a1:21:32:5d:12:a4:38:68:da:82:d7:07:af:81:5d:f4:66:e2:
4b:0f:41:b1:df:0c:35:c4:54:37:df:c9:3a:4e:1f:8e:10:92:
d6:db:a2:65:85:f1:f8:97:dc:af:8e:87:78:33:a6:36:3d:a0:
5b:fe:57:96:6e:6c:42:99:33:c6:5d:d1:59:ec:b1:ca:d3:03:
cf:1b:5e:84:ed:0c:f9:6d:eb:6c:a0:7d:eb:2d:3b:5c:72:6e:
14:d0:d7:69:ac:f5:ea:86:a9:31:65:3e:c9:58:41:76:20:33:
ce:d5:be:04:cf:6f:60:fd:08:07:56:b5:a6:aa:8f:27:74:72:
c2:7a:b9:fa:1a:53:e1:ce:1d:53:f6:11:3e:0b:ac:70:66:7f:
38:18:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:26:34 2025 by rpki-client