Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier: AH/Pvt2ak+RdAdfmRGKXvn60mOhcHTmDGyx1yQeinws=
Subject key identifier: 87:5F:E1:17:9D:EF:08:CA:EC:AB:34:C4:8F:D3:2A:E8:04:8E:D9:E5
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number: 05F5
Signing time: Thu 30 Jan 2025 22:53:11 +0000
Manifest this update: Thu 30 Jan 2025 22:53:10 +0000
Manifest next update: Thu 06 Feb 2025 22:53:10 +0000
Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: MYUIhM1JvSgxcvbRlSgKGyTawpw7J9zh3pWo3ggGAto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Validity
Not Before: Jan 30 22:53:10 2025 GMT
Not After : Feb 6 22:53:10 2025 GMT
Subject: CN=679c02d7-103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:b0:90:8f:c6:c4:f2:a4:38:e1:f8:22:06:
4a:2b:07:57:88:fd:13:e1:08:23:67:1c:c7:14:f6:
f4:a1:7f:e0:82:cf:be:67:b0:6a:c2:ce:3d:97:8b:
04:89:02:f5:ba:9d:c3:e2:07:fb:c5:ae:f8:8f:c3:
96:60:d4:2c:72:a6:c0:ce:5f:df:23:a3:b9:02:c3:
84:93:87:6e:d5:78:c1:89:1e:16:00:92:37:3d:e2:
c1:ae:16:c0:4d:78:b8:0d:18:08:8f:fe:9b:ee:d7:
99:0a:ce:85:db:7c:5c:7c:b4:24:93:07:6c:d2:f2:
43:f2:e7:b6:d2:40:61:b6:3f:ce:b8:6d:00:eb:04:
2e:e2:5e:2c:d9:e8:48:87:85:c1:79:59:f3:a3:d3:
e3:7c:27:d0:59:95:da:9d:61:9f:8f:4f:53:f9:4b:
8d:94:36:3d:1a:72:ca:46:76:53:39:3c:38:2a:7d:
25:99:d2:f4:45:9f:49:78:e5:99:27:29:b1:21:84:
c7:fb:3f:85:04:a4:e9:90:9f:f0:ce:d5:71:aa:db:
13:3c:22:0b:9f:75:9e:5b:73:95:eb:d6:bb:bb:49:
b3:1d:42:22:81:d0:c0:ab:24:11:f0:e8:cd:da:3c:
7b:0e:d8:9f:f1:c2:a2:a1:31:04:23:ae:6a:64:f4:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:E1:17:9D:EF:08:CA:EC:AB:34:C4:8F:D3:2A:E8:04:8E:D9:E5
X509v3 Authority Key Identifier:
keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fd:82:64:69:26:b5:46:99:79:24:9a:27:00:ff:55:49:a6:
98:6c:02:61:a8:5e:73:1c:f2:3d:dc:59:83:b2:40:7e:13:3e:
e4:73:57:92:e2:5d:4b:f5:3c:c9:64:03:88:b7:03:eb:89:8b:
ea:93:9b:1f:fd:3c:5f:46:88:a9:73:1c:30:c7:cf:84:cf:69:
09:90:b4:a3:73:8b:e7:47:7b:f7:f6:3b:82:d4:01:43:d4:74:
ae:2b:40:b6:90:74:e1:d4:20:f6:bb:10:03:a0:aa:bb:c4:3d:
2e:f4:84:22:d8:62:8e:b1:db:a9:80:34:02:2f:f4:8b:3c:3a:
e9:79:0d:62:b3:a2:10:1d:93:5b:69:a0:4e:c9:0a:6d:f9:fe:
9b:09:2d:d9:0b:76:1b:1c:3f:3f:d1:54:17:c6:fb:9f:a9:14:
a9:07:b2:3e:e5:4c:1a:c3:a9:90:da:41:0a:78:24:e3:82:66:
db:83:da:a9:4a:9f:6e:51:a5:e5:c2:cb:3f:55:d9:74:0e:11:
cc:bf:29:c6:21:d0:30:96:85:c8:b7:1f:bf:af:e8:af:77:62:
4d:33:32:d6:4f:63:27:49:05:af:7e:91:19:b6:4d:c8:e1:c4:
e8:40:2d:5a:6d:c0:33:0a:37:47:a8:23:03:44:da:af:8c:db:
1d:36:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:03:16 2025 by rpki-client