Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier: 2uoWw+GvconvQT9RkzcV+ye6AT/BDFst6PURv1s1o3k=
Subject key identifier: C9:99:68:C2:7E:87:7D:66:AD:AB:36:77:E6:EA:AF:6D:E1:E2:7E:67
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial: 0DCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number: 0DCA
Signing time: Fri 31 Jan 2025 17:51:04 +0000
Manifest this update: Fri 31 Jan 2025 17:51:04 +0000
Manifest next update: Fri 07 Feb 2025 17:51:04 +0000
Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: r7SfDOuDkWtUHVPMx/q8yPGrvnJOZL+1LRFgCY1ahlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Validity
Not Before: Jan 31 17:51:04 2025 GMT
Not After : Feb 7 17:51:04 2025 GMT
Subject: CN=679d0d88-846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:c5:ec:00:89:be:1a:db:e8:a0:89:99:20:
35:64:02:28:8f:da:6d:fd:2d:5c:fc:95:2f:08:60:
a7:08:d1:90:9f:5e:99:f5:74:26:cf:15:c4:2d:11:
0d:2c:b4:a2:6f:1d:4b:8f:7a:0f:40:8c:c8:99:85:
1a:88:59:df:d0:2a:00:1c:7c:04:18:ce:78:e3:9e:
6a:16:2b:91:3b:75:56:50:b3:fa:47:a2:65:1c:5e:
90:15:1c:38:d4:a7:ec:ef:cf:41:9b:19:d8:51:9c:
ce:51:d6:bc:cf:7c:f1:3f:91:1d:d5:e0:51:13:48:
d7:2f:d6:fa:8c:a3:d4:e8:ce:5a:c5:15:83:22:79:
2c:d9:6b:28:a0:80:16:fa:4c:eb:51:06:9c:8d:f5:
bb:32:9b:8b:67:dc:3c:04:d6:36:24:20:01:a4:51:
8d:ca:a9:e2:3b:c0:48:8f:93:c3:ae:05:5d:5f:59:
bd:4b:e7:97:1e:cd:1c:82:bc:5e:fb:8b:84:8e:72:
46:2c:3d:bf:0b:29:f1:99:4d:25:5b:b6:84:52:da:
19:44:f7:d9:0d:93:ed:ee:56:74:89:a7:2c:7f:2f:
6b:f6:43:d8:48:3b:05:9d:96:55:f5:11:b0:8a:95:
b5:63:52:b7:72:fd:9e:ce:9b:f4:77:cd:70:16:84:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:68:C2:7E:87:7D:66:AD:AB:36:77:E6:EA:AF:6D:E1:E2:7E:67
X509v3 Authority Key Identifier:
keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:35:36:eb:ca:87:29:41:6e:12:82:67:69:79:74:95:6d:f2:
2e:97:25:8c:f8:03:fb:f4:86:11:d8:11:50:c1:a5:f2:cc:da:
ec:18:73:35:e9:59:33:90:0c:5e:49:e0:11:6f:93:02:b9:22:
3c:46:d6:af:20:19:4d:50:24:78:60:db:9e:11:92:55:a0:7d:
b0:06:bf:8c:ce:df:79:86:fd:7e:66:87:63:e1:4f:a0:a8:ca:
a2:3e:1f:7b:dd:ba:b5:54:e2:43:ed:40:25:c8:9d:aa:54:0d:
ea:8b:50:ef:a2:a6:d3:d0:85:8e:41:5b:e0:b3:ae:e0:1b:a1:
8f:8e:9d:e3:37:1d:e7:55:2a:1d:31:d3:40:bd:9a:b9:1d:e3:
d4:d7:cc:48:b5:63:f8:60:ab:6f:8e:e7:b0:8e:35:c0:05:46:
bb:6c:79:e4:ed:1d:e0:fe:b4:53:7c:04:9e:96:e4:8e:1d:c3:
c4:b1:34:c1:e0:55:52:36:55:f0:07:bb:c0:2a:fe:92:8e:e1:
36:41:02:8c:96:5f:9b:ba:cf:8f:16:a7:e5:47:cb:05:ee:51:
31:4b:32:8f:93:0d:2b:53:5f:01:5d:72:30:61:61:07:b7:49:
ea:fc:ff:be:74:b9:9f:32:71:b0:2e:d2:a4:18:11:d4:bc:aa:
e7:a0:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:24 2025 by rpki-client