Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier: gD83vxmh86BEcSC8UvcwSboewxwtBcb+fM1qmiGICuU=
Subject key identifier: 29:E1:1A:4A:5E:87:82:45:8A:22:7B:66:1E:28:D4:14:0D:AF:AF:79
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number: 01D8
Signing time: Fri 31 Jan 2025 03:07:59 +0000
Manifest this update: Fri 31 Jan 2025 03:07:58 +0000
Manifest next update: Fri 07 Feb 2025 03:07:58 +0000
Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 9V2eez17B5ELk9pk59wWNVphQ6GBuhs6KqRhS/6TRNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Validity
Not Before: Jan 31 03:07:58 2025 GMT
Not After : Feb 7 03:07:58 2025 GMT
Subject: CN=679c3e8f-adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:86:2d:c1:17:ee:3b:df:dd:86:44:31:ce:
df:d5:34:38:d6:54:f7:69:92:05:6f:ac:30:b7:4a:
fb:a3:d2:49:d0:3d:7e:4c:e9:14:02:e2:3e:48:63:
0a:1a:53:e4:bc:aa:77:20:be:ca:39:77:95:97:3d:
7d:f3:c6:03:c4:f9:2e:1e:9b:03:8c:39:d0:dc:f9:
9d:6a:4d:de:d5:3d:b7:97:cd:e2:b1:a4:65:a1:49:
9c:c2:4d:25:25:c6:5f:ae:07:f7:92:87:32:84:07:
ce:6f:df:ee:b1:a9:2b:53:5b:90:6a:cf:e2:8e:03:
04:2c:a1:3f:b8:4f:98:12:9d:13:70:a7:8a:4c:07:
c4:57:3b:8a:53:96:2e:ac:42:b7:50:58:53:74:59:
47:19:68:e8:cf:1f:01:c5:48:58:09:a7:13:93:96:
8c:97:3e:30:dd:18:9a:40:da:c0:56:a7:eb:47:c0:
64:65:6c:c0:4e:f0:5e:75:f8:55:28:25:8d:1f:45:
6a:28:8b:e9:37:27:77:ca:fe:8f:87:ea:43:ff:69:
e0:68:98:c2:e2:f9:d0:ff:cc:76:66:61:1b:c2:8a:
61:4a:f5:ba:8e:bd:ed:a4:be:89:5f:2d:d5:db:40:
1e:6e:77:93:94:2d:7b:55:cb:6b:fd:01:0c:6d:8b:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E1:1A:4A:5E:87:82:45:8A:22:7B:66:1E:28:D4:14:0D:AF:AF:79
X509v3 Authority Key Identifier:
keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:f7:27:5d:26:69:b1:70:7f:71:bf:69:2e:a2:95:e8:f6:
43:4b:62:02:73:28:5b:19:e5:c4:d3:5a:48:77:eb:17:f9:11:
89:3f:58:38:dd:a1:4d:c0:4d:10:ee:19:2a:89:4f:02:d5:0e:
e1:07:c8:3b:a1:ce:51:62:dd:2e:90:ba:ed:b1:f8:a5:70:54:
f5:c3:73:8b:ad:cb:33:02:c9:d3:91:d5:97:13:64:87:d8:52:
5c:1a:26:57:8e:67:43:7c:f7:30:29:c3:bc:a2:00:87:87:1e:
17:91:71:e4:48:23:67:12:08:7f:4d:a7:5a:5e:0e:82:51:5b:
41:f9:8e:d4:01:0f:ec:8c:6e:4e:b3:2f:cd:ec:17:78:ac:be:
06:c1:a4:02:0a:40:12:84:ee:18:68:5c:28:7f:e1:bf:bc:9e:
0c:b8:ca:ac:34:96:ed:6a:64:75:19:36:69:4a:f4:29:29:7d:
b1:fd:3b:11:82:bd:3d:e0:fc:a8:43:27:dc:fe:cd:35:fc:bd:
71:0c:23:48:32:0c:d6:ce:64:0a:81:38:b2:2a:dd:57:bd:b1:
74:5d:42:6f:36:26:a6:68:63:36:08:fb:bb:e7:6c:e0:c0:3e:
97:ff:9b:8a:a2:06:22:63:3f:c5:56:f5:8c:93:eb:df:a2:46:
31:b1:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:42 2025 by rpki-client