Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
File: pVeQOZhitrqnfgugRGfoWfsEnBE.mft (raw, json)
Hash identifier: CBrgUliKMLQWp1+gPNSUBomHeeuYDKDy6JY+z5NRStI=
Subject key identifier: FA:0E:66:56:AF:20:51:1C:D3:B5:70:74:D1:BF:87:46:32:78:16:CA
Authority key identifier: A5:57:90:39:98:62:B6:BA:A7:7E:0B:A0:44:67:E8:59:FB:04:9C:11
Certificate issuer: /CN=A91C1DF8/serialNumber=A55790399862B6BAA77E0BA04467E859FB049C11
Certificate serial: 0BC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVeQOZhitrqnfgugRGfoWfsEnBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
Manifest number: 1363
Signing time: Tue 16 Jul 2024 02:36:08 +0000
Manifest this update: Tue 16 Jul 2024 02:36:07 +0000
Manifest next update: Tue 23 Jul 2024 02:36:07 +0000
Files and hashes: 1: pVeQOZhitrqnfgugRGfoWfsEnBE.crl (hash: O2l+8GSuCHubOTWA+nI75wgv23Ch0dKkHR24ug+lBfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DF8, serialNumber=A55790399862B6BAA77E0BA04467E859FB049C11
Validity
Not Before: Jul 16 02:36:07 2024 GMT
Not After : Jul 23 02:36:07 2024 GMT
Subject: CN=6695dc97-a85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:7b:44:4b:e0:26:ce:d5:cd:79:24:39:67:
b1:bb:be:c7:d0:62:81:97:bf:c9:8d:65:15:03:cd:
25:6c:de:69:68:1d:94:2b:37:71:7d:11:fa:11:fb:
74:06:9f:1b:29:2a:5c:9a:55:2c:e0:df:cf:a1:f3:
61:ce:a7:65:85:b3:24:1d:ef:72:9c:63:cc:44:c9:
d9:e1:47:eb:31:9a:0b:d2:93:ad:33:90:c1:e4:10:
c2:8e:45:b5:d1:11:7b:a2:0e:56:94:01:3f:f6:8f:
e1:72:89:a5:0c:10:a2:71:25:1a:5e:1b:b7:0f:73:
d2:0e:4d:3d:f2:76:6e:79:6a:17:95:21:79:a3:d1:
e3:a8:4d:56:6a:ba:a9:18:d8:c6:c5:69:bf:a7:5f:
de:a0:44:91:89:73:9e:84:b2:e0:7a:cf:d0:2c:08:
ee:e5:1e:92:5d:a1:bb:1d:7c:f1:63:60:f7:e3:74:
b2:55:c3:14:76:3f:85:43:53:dc:31:88:ba:e0:c6:
99:c6:fb:b4:c0:71:2b:89:e6:a9:5a:d1:b3:17:85:
4a:3f:a5:5e:c1:e1:4d:01:56:85:51:09:28:bd:2c:
59:f0:89:da:ba:09:aa:25:c9:c5:06:0e:61:7b:d4:
bc:ff:64:7d:5a:f2:db:37:db:10:30:1e:96:a7:85:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:66:56:AF:20:51:1C:D3:B5:70:74:D1:BF:87:46:32:78:16:CA
X509v3 Authority Key Identifier:
keyid:A5:57:90:39:98:62:B6:BA:A7:7E:0B:A0:44:67:E8:59:FB:04:9C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVeQOZhitrqnfgugRGfoWfsEnBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:b2:59:a7:ca:88:86:e9:fd:cc:8d:90:68:6c:79:b7:c2:63:
29:a8:3f:9f:ad:9d:51:67:00:26:54:64:5e:55:5a:f3:30:57:
07:6d:aa:e3:e4:6b:ea:20:17:6a:eb:ca:3a:42:0b:6b:d7:70:
a9:af:3a:0e:5b:78:9f:99:4a:a4:46:e8:91:ba:97:62:c2:6b:
a3:7a:45:e5:eb:42:3e:45:4a:74:d1:ed:6d:8b:b7:3d:82:2e:
40:a8:bc:a4:f1:dc:d0:d4:88:97:b0:2f:c9:11:79:08:f2:48:
b2:ef:b1:c4:5c:f2:33:37:d4:d3:8d:7d:92:31:a8:d9:84:56:
71:a8:8c:31:6f:2f:08:56:f3:f0:3b:90:10:0d:67:39:f2:68:
4e:17:22:f2:00:a0:ac:dc:62:78:fc:8e:c1:d7:5a:d5:9f:2f:
33:df:20:b6:7d:43:aa:94:37:59:ac:94:f6:99:eb:5c:3e:27:
c6:97:54:32:d3:de:b7:31:35:84:aa:b2:a4:9d:09:ed:1d:e9:
cc:a9:b9:64:ef:6e:3d:53:de:ae:74:2a:18:f0:66:a7:05:da:
ad:17:18:b2:d0:60:fd:8a:44:c8:5b:f6:3f:2e:c1:b1:a5:a0:
bf:1b:cb:ba:56:2d:92:6b:fc:b9:51:88:c4:94:97:04:e1:62:
d2:b1:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:10:36 2025 by rpki-client