Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier: hcDTi8jjYK3ylPaycxZDRDfpKosNu27qwHCDF81+pxo=
Subject key identifier: A8:8E:08:23:84:35:A1:16:9A:38:49:15:35:A3:2C:4B:43:19:92:C7
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:48:49 +0000
Manifest this update: Fri 31 Jan 2025 06:48:49 +0000
Manifest next update: Fri 07 Feb 2025 06:48:49 +0000
Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: 2PkA32qXdmIQ7IuxG2P/emDZRVx5IX0l/J7xykDKWTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Validity
Not Before: Jan 31 06:48:49 2025 GMT
Not After : Feb 7 06:48:49 2025 GMT
Subject: CN=679c7251-3651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:ac:76:2f:91:a2:7b:09:56:66:79:19:bd:
62:db:22:6e:2c:56:22:aa:1e:4a:f2:17:05:bd:ac:
5e:23:c0:a8:9e:28:b6:c9:67:b6:60:01:e0:c8:9d:
86:03:1c:d4:03:a2:51:e0:68:5f:dc:9e:03:f3:d6:
7c:ac:24:7c:43:67:d6:cd:d7:f6:eb:5f:fa:de:07:
21:56:9b:d0:7f:12:2d:7f:f4:e1:f6:c2:5f:22:57:
20:b5:bc:53:f5:d8:d6:1e:55:ab:71:35:d6:7e:76:
60:ca:f5:cc:a3:06:4a:cb:3b:b3:49:ab:75:78:15:
28:3d:57:20:ba:cc:89:30:91:f4:32:a1:ed:db:5f:
2e:54:c3:ba:89:ab:24:a0:d1:2a:00:b8:50:6a:c9:
4d:5c:c9:b6:6b:f9:d9:88:2a:ad:94:f1:8d:5f:97:
22:56:4e:35:df:aa:ff:d9:a3:43:9f:37:87:49:93:
21:43:ff:e3:f7:a1:30:db:03:8a:9f:bc:0d:2c:6f:
ba:7d:39:e4:5c:93:58:fe:93:9f:45:7a:c3:5c:fb:
08:60:a3:f8:03:36:a4:04:39:43:77:7e:91:1f:c3:
a6:5b:94:a5:3a:c1:ff:58:d0:bf:e9:c6:de:15:21:
e2:28:46:d5:eb:dc:9c:e7:35:a8:f7:2a:cd:21:ea:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:08:23:84:35:A1:16:9A:38:49:15:35:A3:2C:4B:43:19:92:C7
X509v3 Authority Key Identifier:
keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:9d:4f:6e:a6:1b:94:a5:f1:03:d4:76:a8:40:3d:92:7f:
54:46:d9:27:99:9e:93:68:ec:c4:fc:47:d0:01:a1:d2:e2:4c:
c0:f2:5e:e1:4a:12:a3:a8:11:76:d7:71:22:73:29:02:4f:ff:
de:11:4e:4b:90:9d:37:5a:b3:58:0c:a5:fa:bc:08:8b:60:82:
69:54:40:33:6b:dc:94:1b:a8:c1:2f:59:e7:b9:c0:2a:06:e5:
ef:b2:e9:58:ed:e9:55:19:9e:33:d8:07:33:ae:1c:3b:56:20:
55:89:ec:98:8a:02:66:92:ea:ea:d3:dd:a0:6d:64:5f:aa:35:
fd:69:b8:f7:cd:66:1e:42:91:e9:4d:bd:6f:e9:b4:62:60:66:
e5:14:31:36:f5:07:9c:65:c4:29:12:5c:63:33:03:2a:71:06:
2b:20:2b:02:c5:39:7e:12:b7:11:03:88:b5:98:bf:1a:46:7e:
fa:17:20:a5:3b:cb:d0:72:a7:27:e7:ce:69:68:8c:71:86:4f:
02:53:e4:5a:26:27:48:07:cf:bf:09:af:33:1a:1a:3b:3f:36:
6a:db:cf:0c:c6:7e:b1:22:96:a2:a7:60:cb:1b:8e:74:a6:3f:
d2:97:50:5a:11:e2:79:65:ff:4d:b7:2e:08:5a:26:26:7d:8d:
0b:c9:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:32 2025 by rpki-client