Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft
File: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft (raw, json)
Hash identifier: wwQ0lqSDvQrqoeyRcFAaw1kHNerBbFgTZZJTRc3amdA=
Subject key identifier: 23:B3:A1:37:0F:7A:3B:5F:8A:99:64:FD:35:DD:94:D3:E5:F4:AA:7C
Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487
Certificate serial: 1313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft
Manifest number: 1302
Signing time: Sat 18 Jan 2025 16:55:00 +0000
Manifest this update: Sat 18 Jan 2025 16:55:00 +0000
Manifest next update: Sat 25 Jan 2025 16:55:00 +0000
Files and hashes: 1: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl (hash: xwjhW2L/og8fmIYCukXGBkmHMh652Lc28hSYn3Blx/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4883 (0x1313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F89D, serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487
Validity
Not Before: Jan 18 16:55:00 2025 GMT
Not After : Jan 25 16:55:00 2025 GMT
Subject: CN=678bdce4-9e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:ed:6d:dc:9d:a5:da:52:32:15:d6:18:c8:
5f:2b:44:98:be:2a:68:ae:8a:81:b3:f7:29:5b:b0:
d8:b6:8e:e6:88:75:87:0b:97:eb:22:2c:5e:a4:ad:
d9:fa:8b:fb:f4:2d:6a:a6:72:cf:02:5b:99:cb:54:
45:31:88:03:c1:fe:a7:58:8f:77:4e:87:e8:56:a2:
f1:c5:b7:4b:c6:8a:b7:c3:4e:86:68:af:ec:05:1f:
6e:b1:4f:ef:24:5d:e2:be:62:84:41:4f:e2:2c:d7:
90:22:10:1a:c4:af:05:1f:81:19:35:e9:5a:84:93:
58:8f:53:08:3e:65:59:eb:d5:6d:19:f7:7a:8f:9c:
36:91:37:f0:58:69:af:15:2c:cc:01:4d:93:e7:29:
29:9a:29:09:6d:e5:69:44:00:2f:b4:2e:2b:51:d5:
b4:40:86:ff:e1:25:a7:ac:a9:a6:a7:72:c5:77:0c:
d1:9b:c8:22:50:56:5b:ad:53:ee:37:9a:dc:cb:b9:
f0:67:80:48:a7:38:59:ab:43:fb:34:9a:4b:e3:41:
61:bb:a4:48:5f:47:a3:c0:58:59:77:c9:b4:96:5a:
36:51:df:10:45:51:13:5c:5b:58:42:84:d2:5a:33:
bb:f3:99:5d:42:dc:d1:b1:51:54:58:37:eb:31:bc:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:A1:37:0F:7A:3B:5F:8A:99:64:FD:35:DD:94:D3:E5:F4:AA:7C
X509v3 Authority Key Identifier:
keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:32:b8:0c:61:f7:0c:d3:41:97:54:b0:b5:4c:8c:ef:1e:
7e:a5:79:08:a9:83:c1:6b:b9:40:fa:0c:a6:29:df:5e:56:f8:
19:26:0f:dd:fc:8e:b4:d2:df:8f:56:8d:02:ee:a6:24:23:e1:
f2:22:ab:65:af:64:ee:df:60:03:99:97:8c:33:a8:88:e0:78:
7d:c3:02:f3:3e:56:91:c4:8a:ef:ce:7a:ec:33:bc:0e:3e:8b:
70:0c:18:55:a5:a1:96:04:49:6e:e5:24:c9:30:41:75:c0:73:
2b:83:83:c5:7f:7b:36:e7:fb:fe:df:67:68:88:43:5d:37:96:
45:ea:ae:f0:a2:41:28:e3:c9:b7:eb:cf:3b:42:9b:33:65:d2:
b0:aa:78:f1:6a:00:f6:b7:aa:26:57:83:e9:cc:7e:5a:0b:7e:
5a:39:39:3f:e9:68:c7:52:92:fa:7f:78:c3:e3:22:00:a2:32:
9b:85:99:14:89:ba:a0:66:bb:3b:da:ce:ed:7d:93:5e:ae:38:
ab:7f:ef:38:a4:c5:0f:16:6b:18:99:15:5b:a1:a3:ec:c7:1e:
2d:ae:f1:e6:c2:86:b6:1b:23:1c:81:e0:9a:3c:97:ef:74:d6:
69:79:bf:23:df:12:55:16:55:b3:c1:97:0c:e1:fc:41:a6:9e:
d4:99:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:18 2025 by rpki-client