Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
File: cKH09V1h0yEhCBXRHZ1aIoGF49g.mft (raw, json)
Hash identifier: 9TlEtUf3LHVPdhEKIu+JZmMwd4H4cTwkOXdoRy6ZVM8=
Subject key identifier: FE:47:39:33:A3:EE:69:F3:BA:54:6F:6E:09:08:84:21:BE:9D:F5:13
Authority key identifier: 70:A1:F4:F5:5D:61:D3:21:21:08:15:D1:1D:9D:5A:22:81:85:E3:D8
Certificate issuer: /CN=A917368A/serialNumber=70A1F4F55D61D321210815D11D9D5A228185E3D8
Certificate serial: 02EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKH09V1h0yEhCBXRHZ1aIoGF49g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
Manifest number: 02E9
Signing time: Tue 18 Feb 2025 03:44:02 +0000
Manifest this update: Tue 18 Feb 2025 03:44:01 +0000
Manifest next update: Tue 25 Feb 2025 03:44:01 +0000
Files and hashes: 1: cKH09V1h0yEhCBXRHZ1aIoGF49g.crl (hash: LKBqu2KinEOZyxML5hNd+Inh3dUlrcqgAQDYyp7sPXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917368A, serialNumber=70A1F4F55D61D321210815D11D9D5A228185E3D8
Validity
Not Before: Feb 18 03:44:01 2025 GMT
Not After : Feb 25 03:44:01 2025 GMT
Subject: CN=67b40202-4078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:7b:0a:43:21:06:65:4b:42:df:5d:a5:e9:
d3:7d:a9:01:c3:84:e1:2f:57:9f:17:da:b5:7d:92:
64:d7:97:a6:06:dd:85:77:00:5e:69:0d:25:36:fd:
c5:11:70:fb:97:1f:2d:6e:76:e9:05:11:2d:15:ef:
e9:5c:ee:14:08:3b:7e:68:dd:a2:f7:5c:6d:bb:0e:
28:5a:ff:ea:ea:f4:76:79:86:81:46:aa:57:46:ff:
0a:72:f6:58:3a:e8:ba:69:21:55:36:da:5d:e9:ea:
8a:0e:fa:cd:97:68:3e:7c:3d:c8:8d:76:a6:b1:56:
66:98:dc:1d:92:c7:10:42:94:c1:6a:c5:92:c7:87:
75:14:bb:51:f3:ce:e8:9c:77:9a:03:d9:bf:e2:a8:
15:02:97:6b:ce:d9:45:a4:ee:35:7c:ea:a3:44:eb:
cc:cf:ba:e0:2f:e1:e0:01:bc:74:90:72:40:0b:a6:
56:e0:8a:bf:15:ce:19:80:f5:53:cb:49:eb:35:78:
80:8e:e7:cb:2d:f7:ad:ee:79:40:2b:69:f6:78:fc:
cd:6a:4a:f7:7b:19:64:f5:4b:12:f2:33:e6:a3:be:
51:d7:89:fb:0e:0e:25:6e:cf:e5:c1:6b:4e:ba:ff:
7a:f2:4f:62:c6:7d:38:b5:1c:f7:9b:18:23:91:7d:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:39:33:A3:EE:69:F3:BA:54:6F:6E:09:08:84:21:BE:9D:F5:13
X509v3 Authority Key Identifier:
keyid:70:A1:F4:F5:5D:61:D3:21:21:08:15:D1:1D:9D:5A:22:81:85:E3:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKH09V1h0yEhCBXRHZ1aIoGF49g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917368A/A5996EA6CD3B11EC9D262145C4F9AE02/cKH09V1h0yEhCBXRHZ1aIoGF49g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:25:d3:17:d0:a6:72:43:d6:12:f3:d4:3e:c2:f6:8c:ce:
94:52:7c:f6:14:96:96:9c:c4:41:88:be:23:65:26:e6:93:16:
2d:bf:22:07:d4:f4:40:f4:b9:cd:59:8f:a1:33:d7:df:47:7a:
b7:93:dd:42:e0:5a:13:6c:82:65:2c:69:5e:dc:b0:52:7a:8b:
50:ff:8a:c7:00:70:50:a9:5f:2f:a7:f1:51:83:4c:2d:40:94:
a1:ab:78:cc:c5:d4:72:8b:1e:71:16:b1:12:1b:80:3d:aa:2a:
b5:5f:8e:96:4c:97:4c:3c:78:03:71:ee:86:10:10:07:22:0c:
2e:d9:d8:c5:fa:b8:ef:39:ab:53:e9:94:d8:f8:c9:a7:ea:26:
8a:34:f1:ce:84:f6:44:3e:63:78:e9:f0:f0:b2:2e:c5:dd:62:
4e:77:d3:89:13:cb:ca:b1:9c:80:f9:eb:33:fa:8f:e8:a5:95:
9a:ca:fb:43:80:1b:18:03:20:89:ee:80:bf:ec:e3:84:04:9d:
e8:13:1e:70:09:c1:95:b7:c3:ae:0f:6e:78:75:84:44:65:72:
61:c5:7f:65:56:ab:73:d3:cf:e2:cd:03:d6:3f:87:98:d3:38:
35:38:16:54:dd:ee:5e:94:02:79:54:50:34:6f:c6:11:ea:f3:
d5:2c:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:38:04 2025 by rpki-client