Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
File: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft (raw, json)
Hash identifier: eJbgsWFPiF3VKLmQdlR/+VQVkau3ZTDqSxJAQ3Xn0CI=
Subject key identifier: 7C:F6:40:93:FC:DD:3C:E9:B5:DD:07:F3:FB:A2:CB:96:F4:B8:E6:12
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
Manifest number: 04B1
Signing time: Wed 19 Feb 2025 01:53:18 +0000
Manifest this update: Wed 19 Feb 2025 01:53:18 +0000
Manifest next update: Wed 26 Feb 2025 01:53:18 +0000
Files and hashes: 1: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl (hash: NFpMYo/oLGXoiBktG5pmT73rZxGyAwYQ4X01pU1G5lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6, serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Feb 19 01:53:18 2025 GMT
Not After : Feb 26 01:53:18 2025 GMT
Subject: CN=67b5398e-6ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:0f:a5:c3:0d:89:55:05:69:c6:fb:d0:2f:
ec:2e:2f:7a:00:85:10:7d:a9:1d:a1:41:ff:7c:b5:
d6:fb:42:30:15:33:de:d3:1b:00:11:fd:a6:c9:3f:
f6:92:87:e5:23:64:a4:ca:9c:66:5c:9a:0d:3f:4b:
ed:10:68:e3:f3:c5:e5:43:31:a7:e4:4f:9b:ed:b8:
68:f1:2d:f5:00:f8:f5:94:6d:30:2e:21:cf:a9:5f:
66:3d:8b:b5:9e:40:08:9b:5b:c6:8b:c0:50:79:00:
f9:b0:34:c8:ae:5e:4f:86:21:9f:09:53:32:1a:48:
36:be:00:0f:6a:70:b7:1c:d6:d7:82:a8:8c:b8:46:
11:7b:6b:f9:4e:26:b5:3c:61:08:b1:94:37:90:8e:
38:f6:ea:5f:88:28:78:6b:ed:35:2d:27:6b:ea:0a:
8b:72:34:8b:81:8f:97:a2:84:05:af:29:68:5f:45:
14:81:a8:8d:c5:32:b8:8a:60:34:3d:b3:01:a3:48:
a2:b6:15:46:52:b6:b6:f9:1e:7c:1a:85:d3:ea:88:
00:13:c9:8c:80:77:ad:48:82:33:94:c1:0b:f2:d0:
90:07:ed:ef:49:30:c2:98:c8:d6:52:08:19:82:5b:
8c:46:ec:21:20:d8:65:e6:26:22:21:f0:fb:92:f2:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:40:93:FC:DD:3C:E9:B5:DD:07:F3:FB:A2:CB:96:F4:B8:E6:12
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:fe:8a:b4:2e:fb:29:b5:3f:48:45:47:5e:cc:55:0b:bf:
b1:bc:35:55:7f:a1:9f:29:8d:c5:cf:2b:64:1a:06:c5:c2:48:
14:7d:54:e2:02:67:b8:47:d1:28:26:4f:b2:63:8b:f7:0d:88:
77:e4:54:3e:97:7c:a6:4f:70:8f:97:1e:93:dd:51:22:37:f1:
4d:f6:57:09:e1:82:6f:21:6f:e1:69:db:6f:0c:0a:33:41:00:
9f:14:9a:c3:91:12:66:e9:e2:19:12:8f:38:0d:f8:e5:c9:de:
34:00:6e:72:b8:f7:fb:68:59:55:1f:70:99:44:bf:bc:2e:95:
4c:6b:5a:c8:4f:6b:7c:ab:bf:1e:64:ca:e7:ad:b1:7f:81:0b:
f6:77:93:81:ab:7f:26:44:f7:26:5a:d8:59:3f:ac:c0:b3:4e:
95:b4:01:5c:94:67:0e:8d:3d:99:24:d2:bc:9e:72:ec:bb:08:
cb:5a:df:39:4b:a7:92:63:4e:25:80:8a:60:78:ea:e5:2a:a5:
57:21:85:55:ab:50:ba:a7:57:35:b2:e5:bd:bd:5f:14:97:d0:
1e:03:bb:8e:cd:92:8b:b1:d6:21:38:b0:2b:27:1c:1b:c3:cb:
3b:b9:ee:8d:8a:9c:96:9f:89:26:7c:a2:52:24:1f:3f:c6:08:
5e:9a:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:06:44 2025 by rpki-client