Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
File: IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft (raw, json)
Hash identifier: CKqC9+Wl6thoIS+Jgf75x7j9dc2Zhfwwb4t+IMwcb+c=
Subject key identifier: E1:0F:4B:C8:1C:9E:ED:82:0A:85:4E:5F:FE:C0:87:AD:02:DC:BC:46
Authority key identifier: 20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
Certificate issuer: /CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
Manifest number: 0625
Signing time: Wed 09 Apr 2025 04:32:12 +0000
Manifest this update: Wed 09 Apr 2025 04:32:12 +0000
Manifest next update: Wed 16 Apr 2025 04:32:12 +0000
Files and hashes: 1: IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl (hash: kfdBQjWVTkvrRprL5r2+ksV83cET2xtnl/wSdBfgrVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B44D, serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Validity
Not Before: Apr 9 04:32:12 2025 GMT
Not After : Apr 16 04:32:12 2025 GMT
Subject: CN=67f5f84c-51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:0c:ae:f9:c8:0b:b7:49:c7:1e:5c:26:ab:
75:b8:eb:69:f8:ad:4b:59:6a:38:a6:14:ab:5a:24:
c2:1f:7a:4e:d6:cc:e4:a7:65:90:7d:2a:f7:dc:71:
d5:9d:03:e2:fc:1a:43:9e:dc:95:ca:75:9e:f1:c9:
41:20:73:b1:8b:22:70:83:86:fe:87:f8:d1:e1:a5:
a4:a0:46:6c:7a:4a:b2:fe:d0:77:78:94:61:64:5c:
26:1d:0a:64:7a:cf:fd:a0:5b:75:8a:cb:47:e7:52:
f1:32:06:2e:19:84:8c:a6:30:9c:95:fb:07:8a:7c:
98:d9:5a:4e:82:2c:61:52:f9:22:71:62:d9:89:6a:
6f:31:b4:3a:e4:9e:df:7d:79:ce:ef:a5:5b:21:1f:
93:14:6b:45:db:be:0a:b3:94:32:90:0d:f3:6e:b0:
93:4f:a6:1b:61:90:36:a0:06:19:18:5e:ce:0d:32:
97:64:ca:f4:91:de:43:b6:d8:2c:e9:ff:89:9f:15:
f5:65:fe:f6:fb:9a:d4:d1:e1:38:f7:8f:a5:9f:61:
38:d2:ea:6b:fe:40:51:f8:11:56:34:8f:be:47:3f:
d8:9f:1d:3c:be:22:0c:cf:55:13:5a:e0:79:da:63:
d6:89:ee:f7:28:aa:10:12:c2:73:93:38:5b:7a:cf:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:4B:C8:1C:9E:ED:82:0A:85:4E:5F:FE:C0:87:AD:02:DC:BC:46
X509v3 Authority Key Identifier:
keyid:20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d8:ef:2b:e2:6c:74:8a:50:34:47:3b:af:d3:71:55:4c:a0:
8e:43:87:7c:49:31:0e:70:bc:02:70:2e:fa:95:e1:e7:02:a2:
52:b4:44:e2:37:86:dd:0e:6e:56:c4:d0:9e:db:38:18:19:ac:
d8:2e:f6:d1:f0:4a:a1:ea:4f:bb:b7:7f:91:c9:22:24:63:d2:
7e:64:e5:2f:b0:ef:a8:bd:aa:b1:02:53:0e:4d:95:f5:7b:92:
33:bd:2b:cd:1e:12:9d:41:d7:92:ef:0d:fa:b6:e5:95:d9:05:
77:32:4e:2c:a5:84:27:61:68:21:dc:75:59:dd:99:99:0e:56:
5f:8a:8a:50:de:be:91:01:54:d5:6f:e1:03:07:2e:e7:10:a0:
69:ba:bd:00:cc:1d:af:91:e9:da:00:21:fd:b8:87:27:ce:8e:
82:8a:8e:3c:11:fe:15:7d:21:c4:a5:d1:c1:3b:06:9c:21:ff:
60:aa:e5:47:2a:6c:40:10:2d:bc:39:a0:52:72:4c:18:e2:d8:
85:be:64:6e:ea:13:11:34:e0:6b:0b:15:36:5c:60:05:f1:ae:
4b:ac:92:97:a2:96:8b:a1:2b:02:1c:10:8e:8e:9f:d9:38:4e:
68:56:28:55:fd:65:ff:a4:41:68:23:24:30:1c:3f:99:65:92:
f4:e5:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:16 2025 by rpki-client