Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json)
Hash identifier: drjGCqOdbJFZbgwOZEvcQfPOEXca9NdVRBh9U5YwUA4=
Subject key identifier: 36:D5:0D:72:9D:03:CA:B0:C9:57:6A:75:72:9C:AD:45:95:8C:24:97
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial: 0B6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
Manifest number: 0B6A
Signing time: Thu 30 Jan 2025 19:08:58 +0000
Manifest this update: Thu 30 Jan 2025 19:08:58 +0000
Manifest next update: Thu 06 Feb 2025 19:08:58 +0000
Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: E84b8w4sotcZ0Ycx1SnKmSALIIp35jAuTxuHbqhByww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2927 (0xb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Validity
Not Before: Jan 30 19:08:58 2025 GMT
Not After : Feb 6 19:08:58 2025 GMT
Subject: CN=679bce4a-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:09:17:26:ee:d1:64:b7:2b:d6:39:d2:9e:
38:73:a2:17:52:c0:38:27:5f:17:71:f8:b5:fb:65:
ac:93:35:10:c7:ed:be:a4:5c:00:fa:2d:bb:70:56:
66:9e:77:b6:cc:ff:3c:bc:d7:b6:2a:20:31:fc:9e:
a2:0e:dc:3a:fe:9b:35:a3:a0:55:71:99:fe:dc:a5:
7b:cb:c0:84:01:c0:6f:29:ed:83:d7:06:43:bb:a5:
a3:fb:e3:c4:a4:7d:db:f9:0c:9f:67:2f:04:9f:97:
a8:59:cd:67:fa:9d:f8:3f:eb:8c:d2:71:35:71:1b:
6c:9a:87:a1:d2:43:ed:56:40:5f:ed:d8:a5:74:82:
a3:2f:58:11:e8:bf:eb:55:01:23:ab:0e:0d:ff:81:
21:a8:c5:49:0b:d4:98:e2:03:67:6f:c2:16:c1:eb:
5e:91:24:45:74:80:d7:28:cf:49:f2:95:a0:bd:15:
18:bb:34:81:b9:ed:64:d0:86:ac:d8:03:88:8f:aa:
80:d6:26:61:66:a9:79:43:43:e6:ef:5e:4e:4f:45:
71:5f:ee:65:21:aa:76:fe:ba:e4:29:5e:74:f5:b9:
12:21:33:78:81:f7:8d:1a:84:8a:c4:e4:ba:c7:5b:
60:fb:fa:1b:66:a1:5d:62:44:c5:10:0e:96:70:aa:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:0D:72:9D:03:CA:B0:C9:57:6A:75:72:9C:AD:45:95:8C:24:97
X509v3 Authority Key Identifier:
keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b0:e6:67:06:78:f3:59:a6:b4:f0:ca:52:71:33:85:d5:06:
ce:97:27:34:2d:92:c4:4c:af:c4:50:0b:90:d2:cc:7c:ce:c6:
fc:fc:56:fa:7b:e9:89:81:2a:48:b9:48:7f:f8:dc:3e:1c:d6:
1c:d7:12:62:c7:5b:16:05:9b:d8:63:48:38:7f:c4:70:be:36:
ba:d9:b3:a5:e1:e4:28:9c:62:3d:48:b1:cc:39:3d:31:93:d5:
66:00:19:3f:52:c4:94:33:84:b8:62:8a:b6:78:67:54:ea:b1:
10:90:c6:73:26:51:30:d1:ca:e1:5a:f5:0b:4c:31:d6:5a:10:
61:4f:f6:d4:e2:24:df:b2:65:59:16:e1:6a:d6:d9:a1:93:54:
10:ad:5d:8b:ed:b3:58:54:47:a2:78:e4:c7:e2:57:a9:e8:a9:
c3:87:78:1b:1a:25:dd:19:12:f5:bd:7b:7d:47:48:19:a0:d3:
0a:7b:cb:09:ff:d0:dd:fe:a0:90:47:a6:dc:c4:46:52:e9:1c:
b6:75:b0:55:69:ee:5c:03:af:7c:bb:2b:5c:37:89:5f:57:9f:
6d:b1:f1:bd:08:20:a2:b7:dc:0d:d2:ed:76:5f:7e:b9:d3:50:
6e:ad:8a:dd:f3:cc:db:b3:69:a0:2b:ae:a9:08:c8:e4:a8:f0:
41:6b:f3:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC
QTY5RTQ0M0QwHhcNMjUwMTMwMTkwODU4WhcNMjUwMjA2MTkwODU4WjAYMRYwFAYD
VQQDEw02NzliY2U0YS1kYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGAJFybu0WS3K9Y50p44c6IXUsA4J18Xcfi1+2WskzUQx+2+pFwA+i27cFZm
nne2zP88vNe2KiAx/J6iDtw6/ps1o6BVcZn+3KV7y8CEAcBvKe2D1wZDu6Wj++PE
pH3b+QyfZy8En5eoWc1n+p34P+uM0nE1cRtsmoeh0kPtVkBf7dildIKjL1gR6L/r
VQEjqw4N/4EhqMVJC9SY4gNnb8IWwetekSRFdIDXKM9J8pWgvRUYuzSBue1k0Ias
2AOIj6qA1iZhZql5Q0Pm715OT0VxX+5lIap2/rrkKV509bkSITN4gfeNGoSKxOS6
x1tg+/obZqFdYkTFEA6WcKpyEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbVDXKd
A8qwyVdqdXKcrUWVjCSXMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0
ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W
N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpsOZnBnjzWaa08MpScTOF1QbOlyc0LZLETK/EUAuQ0sx8zsb8/Fb6
e+mJgSpIuUh/+Nw+HNYc1xJix1sWBZvYY0g4f8Rwvja62bOl4eQonGI9SLHMOT0x
k9VmABk/UsSUM4S4Yoq2eGdU6rEQkMZzJlEw0crhWvULTDHWWhBhT/bU4iTfsmVZ
FuFq1tmhk1QQrV2L7bNYVEeieOTH4lep6KnDh3gbGiXdGRL1vXt9R0gZoNMKe8sJ
/9Dd/qCQR6bcxEZS6Ry2dbBVae5cA698uytcN4lfV59tsfG9CCCit9wN0u12X365
01BurYrd88zbs2mgK66pCMjkqPBBa/NR
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:23 2025 by rpki-client