Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
File: lUYNFYUCHTnq191bsrVTv0dKyUM.mft (raw, json)
Hash identifier: C+doBqEaXbyFrhrTmOISCokLo6ft/OIk/A8tVDOnkYQ=
Subject key identifier: 3A:B1:65:BB:6D:98:AB:B6:D8:C3:FA:C5:B3:C6:EE:03:0D:4E:8D:65
Authority key identifier: 95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43
Certificate issuer: /CN=A91F1ADD/serialNumber=95460D1585021D39EAD7DD5BB2B553BF474AC943
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
Manifest number: 0529
Signing time: Wed 12 Feb 2025 02:12:24 +0000
Manifest this update: Wed 12 Feb 2025 02:12:24 +0000
Manifest next update: Wed 19 Feb 2025 02:12:24 +0000
Files and hashes: 1: lUYNFYUCHTnq191bsrVTv0dKyUM.crl (hash: zed92xmSAyQpXyDe/msXr4aKdNY1o6KaEegcqft4H1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1ADD, serialNumber=95460D1585021D39EAD7DD5BB2B553BF474AC943
Validity
Not Before: Feb 12 02:12:24 2025 GMT
Not After : Feb 19 02:12:24 2025 GMT
Subject: CN=67ac0388-c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:ee:45:16:ca:7b:fa:60:ea:57:ad:59:83:
87:a2:bb:e8:79:bd:d0:a9:84:fb:77:3a:2a:11:14:
36:5f:db:94:57:b3:a0:fb:ee:63:03:0c:49:40:fb:
be:d0:67:05:06:d8:b6:60:38:39:f8:1a:ec:9f:62:
89:05:d0:9c:e6:c3:1b:d4:fe:7c:60:a6:23:6b:80:
30:b8:0a:53:2a:8d:d4:a7:c4:2e:e1:f5:20:3e:b6:
ed:b4:0b:e6:f8:16:4b:0b:c3:de:62:5f:6c:ce:41:
a7:d5:57:00:6f:3f:c3:ba:c9:36:18:f9:37:3d:85:
51:60:96:0e:a8:e0:ce:31:47:32:5b:6f:e4:4c:e5:
4f:49:7a:24:74:41:dc:5e:44:be:4e:ca:43:92:38:
2c:36:0f:d2:eb:a3:c2:7a:a1:1f:d2:4b:cd:e6:98:
c7:94:30:10:95:a9:67:26:96:48:25:f2:38:f9:1e:
f3:16:f7:c7:ae:af:ca:ff:6e:39:ad:d8:02:1f:db:
7f:49:66:7c:4b:9a:65:3c:97:60:42:c3:d3:27:ee:
aa:cf:77:2d:97:4c:c5:2b:79:5d:83:d9:72:ed:9f:
62:d0:de:d7:08:c0:a3:44:70:7a:77:63:f2:ea:7e:
1d:19:25:1b:c9:fc:11:9e:aa:4b:e7:30:d4:0f:67:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:65:BB:6D:98:AB:B6:D8:C3:FA:C5:B3:C6:EE:03:0D:4E:8D:65
X509v3 Authority Key Identifier:
keyid:95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:3a:f0:2e:44:77:93:2a:7e:c2:ce:9e:2e:d3:6f:79:4a:
8d:1d:d6:c5:9e:bb:9e:6e:e3:97:16:71:f3:a7:9a:f5:fa:c1:
c2:06:76:e1:68:b8:ea:cc:1f:2b:38:33:d6:39:85:6f:24:eb:
d9:e6:06:c5:f3:b7:4b:36:d5:cd:41:4b:9c:34:57:64:97:a7:
e1:9d:d9:fb:a9:44:16:c7:53:7f:66:2e:25:31:7a:e4:58:c6:
e8:1f:cc:7f:6f:3d:95:e3:7c:58:87:09:48:20:d1:46:74:ae:
d5:fd:67:0e:5e:9b:a8:64:64:f7:b3:0e:eb:6e:fc:cc:13:c5:
f6:1a:6f:89:6a:34:02:07:e0:50:b7:0c:d1:45:0d:6e:a4:f6:
3f:2c:8d:96:98:39:77:1c:91:8b:87:70:5b:2e:69:7b:96:81:
7e:2f:42:fa:39:38:5f:9f:f4:b0:06:6a:84:9b:0a:20:e5:63:
3a:d1:41:f2:ab:41:16:a0:3d:04:da:e4:ce:d7:20:0e:4e:2e:
e5:b7:10:28:7f:36:d7:b1:c3:ad:ba:3a:f5:5f:c2:b6:6b:b4:
e5:39:89:4f:7d:70:aa:95:27:a6:e3:14:12:cd:aa:ec:80:4d:
00:14:b9:90:b8:c5:39:d7:cb:9e:3c:0a:3c:61:a5:1e:8e:38:
df:13:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:24 2025 by rpki-client