Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
File: rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft (raw, json)
Hash identifier: mXa6ajhGyQ3tg1I+zmWqN38b7hDcZU5+iuUDrlQTQxQ=
Subject key identifier: 76:0A:B1:F9:74:50:DA:12:4D:8E:E3:9C:2C:2F:89:64:D5:21:E0:0A
Authority key identifier: AC:89:19:0D:37:67:2F:D6:B4:23:1D:13:FC:77:FB:26:9F:D0:76:A8
Certificate issuer: /CN=A91F577C/serialNumber=AC89190D37672FD6B4231D13FC77FB269FD076A8
Certificate serial: 0404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
Manifest number: 0400
Signing time: Tue 31 Dec 2024 00:06:43 +0000
Manifest this update: Tue 31 Dec 2024 00:06:43 +0000
Manifest next update: Tue 07 Jan 2025 00:06:43 +0000
Files and hashes: 1: rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.crl (hash: a8ILIWITThzZbVyTGdbrvJsEDA/K3v8lP4/vSRpGAb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F577C, serialNumber=AC89190D37672FD6B4231D13FC77FB269FD076A8
Validity
Not Before: Dec 31 00:06:43 2024 GMT
Not After : Jan 7 00:06:43 2025 GMT
Subject: CN=67733593-9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:90:8a:90:df:55:1d:a9:3d:70:d2:f7:7e:
d3:47:0d:14:ee:5a:47:f1:17:24:b4:45:d3:c5:4b:
2c:8e:1a:d9:b6:23:0c:7e:ca:c2:ab:73:40:9c:5c:
db:b4:13:4a:ee:8b:30:0a:e6:48:0c:a6:65:71:f3:
27:9e:af:48:c0:13:48:40:dd:af:90:b0:40:fe:da:
57:52:47:39:9e:cd:50:a6:24:ca:8d:c9:0d:1f:2a:
02:e6:87:0c:c4:31:8f:54:b7:40:91:6a:c5:f5:a0:
2e:ab:a5:d2:07:76:da:0a:fa:e1:7d:f1:1a:81:d1:
b2:45:b6:58:fa:37:d4:66:c2:91:33:08:5b:6e:3f:
93:20:90:3c:1d:27:01:19:22:f7:7c:af:55:25:59:
ce:ff:58:f7:ac:75:f0:95:82:65:82:42:6d:55:7d:
0e:a0:71:e8:0c:a7:f4:96:ca:34:84:da:01:b7:55:
1b:e3:0f:57:81:61:81:ec:2e:90:4f:71:05:45:2d:
7a:08:6f:de:45:c1:01:34:cf:bd:34:bb:a2:ff:be:
c5:ff:c9:5f:91:5a:e3:02:0f:17:e3:3e:80:b7:d4:
6b:0e:04:29:0d:cc:82:ab:2a:7d:d6:1a:b2:79:41:
be:b4:68:91:e5:20:06:eb:d6:9b:35:49:e3:8c:8c:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:B1:F9:74:50:DA:12:4D:8E:E3:9C:2C:2F:89:64:D5:21:E0:0A
X509v3 Authority Key Identifier:
keyid:AC:89:19:0D:37:67:2F:D6:B4:23:1D:13:FC:77:FB:26:9F:D0:76:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F577C/58DB98C6568C11EC826B2F1EC4F9AE02/rIkZDTdnL9a0Ix0T_Hf7Jp_Qdqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9c:3f:2c:17:56:2f:8f:41:63:a8:1f:6d:60:e5:2f:b0:dc:
92:e6:b4:0f:1e:43:8a:fa:e9:24:42:55:4b:9d:a4:13:5c:9e:
5c:ca:ba:8a:dd:60:57:93:00:53:dc:ef:0f:0c:cb:c3:3b:46:
b7:37:ae:f9:d4:72:1b:0d:bd:67:82:64:bf:88:97:09:22:e0:
56:a0:54:da:e5:c2:b6:52:5e:42:a8:fa:4a:4a:c7:80:b3:bf:
36:ba:c2:79:80:b8:17:55:9f:46:bb:40:1a:94:21:d9:b3:b7:
2a:92:f1:b2:53:78:ec:61:9c:88:bf:cc:7f:4d:4b:da:d3:5e:
90:e2:5c:df:39:2a:0d:1c:51:a0:32:ed:d7:e0:23:7f:38:cc:
56:63:f1:ed:14:98:0f:f9:07:c9:6e:c0:3d:5f:54:4d:df:c8:
4f:fb:11:b0:f8:48:37:97:b9:bb:e7:a9:d2:17:e7:ca:8e:62:
34:28:7d:3e:72:23:24:88:2b:35:9a:cd:a6:b6:5b:24:48:cb:
88:0e:84:71:91:9f:99:a7:71:9b:aa:c7:4d:ef:fe:6e:83:f0:
c7:97:2c:7a:31:50:89:06:2b:70:6a:a8:99:44:2b:12:e8:4d:
24:10:29:69:c5:cf:ac:0b:b4:2b:b5:d6:89:81:a8:a2:9e:79:
09:57:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:21:57 2025 by rpki-client