
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft
File: Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft (raw, json)
Hash identifier: 47OwarWhgHg+7YXVzriWW/El18UZyqe7k07a2sfJFzc=
Subject key identifier: 8B:1E:5F:E0:D3:C1:2C:81:46:23:DF:2F:35:B4:C4:6D:C1:35:A4:94
Authority key identifier: 3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
Certificate issuer: /CN=A91FA6CA/serialNumber=3B1DB316C08D2936C74A356A277EEAC43CB7524C
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft
Manifest number: AC
Signing time: Mon 09 Dec 2024 04:13:08 +0000
Manifest this update: Mon 09 Dec 2024 04:13:07 +0000
Manifest next update: Mon 16 Dec 2024 04:13:07 +0000
Files and hashes: 1: Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.crl (hash: SeQEAakNkHQvCiIiuQRdMeQ6EqjSBsc/AjtsqK2FZKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6CA, serialNumber=3B1DB316C08D2936C74A356A277EEAC43CB7524C
Validity
Not Before: Dec 9 04:13:07 2024 GMT
Not After : Dec 16 04:13:07 2024 GMT
Subject: CN=67566e53-d151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:67:c3:3f:94:08:41:f7:42:8a:f1:c7:b4:
71:e5:6d:a1:d2:9b:db:8d:83:e4:53:3f:1d:a6:8e:
83:04:e0:e3:c3:a2:4f:d1:44:4c:31:fd:c5:fe:f8:
33:bb:af:f5:ab:d0:91:04:d5:ea:21:cb:a4:08:79:
1e:33:5f:ef:c5:f1:ba:c4:bf:00:57:83:6a:01:dc:
c9:1f:4b:00:05:8b:7a:a4:e7:9d:a1:7c:11:95:74:
c0:72:92:09:2b:26:1f:c7:05:9e:24:b8:1b:e8:de:
eb:06:bd:87:87:ad:12:6f:bb:54:2a:3e:16:76:d0:
7c:50:9e:2c:8e:8a:3a:9c:47:c2:4a:f7:f1:dc:80:
e6:93:6d:3e:98:9e:df:a9:f6:95:0b:34:d6:cd:ef:
70:87:1b:87:0c:6e:81:20:ad:14:d0:db:94:1f:cb:
e1:67:fb:b7:1e:a7:1f:ad:a7:ae:eb:51:dd:80:d3:
5d:38:4a:fc:d3:7f:cf:a7:b8:aa:d1:4b:af:11:d8:
47:dd:96:02:93:4d:f7:ed:9b:46:b0:0e:4b:ba:33:
d2:2c:77:19:bf:86:7f:69:b2:30:e2:92:29:ce:e0:
9d:e8:e5:54:f2:8a:44:22:62:ca:72:41:bf:1f:16:
a8:7e:35:4b:87:51:63:d9:0a:f3:da:08:15:f2:7e:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:5F:E0:D3:C1:2C:81:46:23:DF:2F:35:B4:C4:6D:C1:35:A4:94
X509v3 Authority Key Identifier:
keyid:3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:aa:36:50:3b:f2:79:2b:78:f9:8b:b6:64:95:a3:17:e6:a3:
26:30:34:47:2d:a7:51:81:ca:b3:e7:7e:57:18:8f:bc:a5:96:
21:31:cc:39:0b:14:40:e9:52:a2:ae:bb:9c:6c:f0:ed:39:15:
f5:4d:d1:ce:d0:fc:ea:cc:b1:11:4f:48:21:27:6f:0a:ea:61:
9f:af:bb:c2:1b:61:1a:22:73:b7:f4:b3:0a:e4:9c:19:21:be:
8b:22:d5:df:ac:76:11:1d:c0:8e:b3:a6:63:76:56:29:2d:4e:
df:10:7b:d9:b2:81:c2:e0:57:62:2e:36:8a:75:5d:c5:4b:b1:
61:18:0a:07:1d:e4:05:4d:fc:83:0d:07:35:5c:19:a1:15:6e:
f6:f4:8b:58:34:a7:6c:10:56:2c:54:38:bb:c9:fd:41:85:d1:
72:0e:8e:09:53:f5:d9:eb:97:84:5b:2d:68:ba:57:36:71:f0:
ad:81:04:bb:f4:43:57:e4:20:eb:3f:0c:c5:67:a0:48:09:a7:
ee:89:85:dd:ef:74:64:df:3b:4d:df:b5:5b:f8:0e:44:00:46:
dc:5b:26:6a:24:c7:99:2d:98:ec:cb:16:29:08:83:ad:43:b2:
58:21:88:be:cc:a3:aa:43:0c:0f:d6:c5:24:92:46:55:ab:4c:
1c:d9:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:44 2025 by rpki-client