Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json)
Hash identifier: 0Of3zJ+z8to+8n9VaCgKrOx6phTNwyROp/FVShWO1Lk=
Subject key identifier: DC:76:34:62:DA:E4:6E:77:9A:DC:56:EB:7F:F3:35:E7:61:ED:78:1D
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
Manifest number: 0330
Signing time: Fri 31 Jan 2025 01:10:30 +0000
Manifest this update: Fri 31 Jan 2025 01:10:30 +0000
Manifest next update: Fri 07 Feb 2025 01:10:30 +0000
Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: kK/Zn3PDB05fIhyzApzuWfw9VD7FAZLNmQBaqP4SagI=)
2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: Q0fNfLOcKzzEZus7R55E69tTYXEUxIWv89YZB7PtU84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Validity
Not Before: Jan 31 01:10:30 2025 GMT
Not After : Feb 7 01:10:30 2025 GMT
Subject: CN=679c2306-58e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:fd:67:1e:15:4e:1d:55:9c:01:21:56:9e:
30:ed:2a:22:20:2a:06:5c:d6:22:36:46:68:f8:22:
d9:6a:0d:7c:7e:81:1a:e5:a7:61:be:6d:f8:96:73:
14:54:ca:f4:4d:e9:f5:3a:c8:fb:d3:76:32:f6:7a:
db:7f:4e:2c:3f:9d:fe:a5:d7:66:2f:64:e2:6c:8a:
59:7e:6f:fb:0d:c7:ee:9d:2d:6d:84:c6:0e:74:70:
5b:f2:40:78:6d:2c:8c:c6:b6:09:cd:60:4c:d2:81:
68:00:14:8b:e3:96:10:3f:54:31:73:13:bd:b3:47:
38:1c:84:ce:c2:89:c5:6e:7b:40:2c:d5:13:34:69:
b3:f4:28:72:b3:e8:06:18:8d:eb:e3:0c:76:55:23:
73:17:22:4d:c0:49:0a:5a:73:d9:4b:52:4e:5d:22:
7e:6b:27:f0:11:ae:89:52:e8:f3:4e:69:d9:21:3f:
6d:c6:e5:16:5f:e7:00:57:e1:1e:33:6a:78:7d:bd:
aa:9a:d8:84:0e:b3:7b:a8:47:d7:d6:26:fe:c0:9b:
3c:65:51:5e:02:b4:31:24:99:13:db:ca:38:68:42:
0e:0e:28:70:2c:e5:23:b8:df:8e:00:a8:a0:e9:a8:
7f:d1:0b:52:66:33:62:65:15:78:61:9b:6f:0a:06:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:34:62:DA:E4:6E:77:9A:DC:56:EB:7F:F3:35:E7:61:ED:78:1D
X509v3 Authority Key Identifier:
keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9d:85:88:86:63:81:b5:b3:09:68:f0:c3:4d:29:51:f5:c7:
38:83:e8:71:34:75:d0:c4:f8:2a:ac:66:2c:95:cc:c5:ab:03:
74:58:b5:1e:df:35:88:7c:35:eb:5d:62:a0:b4:d9:27:86:19:
ab:a0:24:6b:42:a6:e4:b1:66:3d:64:e6:38:55:ba:fc:69:07:
53:03:33:ce:6e:a8:4b:f0:32:f9:dc:fe:d1:11:48:84:d2:13:
b9:dd:0d:80:d9:dd:2a:93:c7:cf:40:f9:b8:84:f2:91:9d:86:
cf:6c:d6:f1:50:06:0c:11:b4:30:ab:13:cd:be:4c:d0:7d:7f:
d6:11:9f:f5:06:dc:bd:3a:dc:3e:63:54:12:03:5a:db:c8:fb:
e0:66:ab:f7:59:90:5c:9c:8e:c1:4a:29:f8:ad:76:e3:79:7b:
17:1b:e9:58:31:d8:cb:cf:8c:e7:ed:4b:2e:3e:c0:e4:e4:51:
b8:48:8b:c3:b0:ac:6e:04:4d:78:04:09:c7:af:ea:de:90:a6:
c0:e7:51:85:bb:d8:61:2a:43:97:69:b4:42:34:61:64:cf:8c:
0a:4e:57:10:99:f6:11:4a:c5:50:70:e0:1d:06:d3:de:68:cf:
27:e7:40:8a:1c:05:d9:eb:32:89:f1:5f:8d:9a:7c:3f:50:77:
a4:95:37:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0
RTU3QTc0NTQwHhcNMjUwMTMxMDExMDMwWhcNMjUwMjA3MDExMDMwWjAYMRYwFAYD
VQQDEw02NzljMjMwNi01OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCf9Zx4VTh1VnAEhVp4w7SoiICoGXNYiNkZo+CLZag18foEa5adhvm34lnMU
VMr0Ten1Osj703Yy9nrbf04sP53+pddmL2TibIpZfm/7DcfunS1thMYOdHBb8kB4
bSyMxrYJzWBM0oFoABSL45YQP1QxcxO9s0c4HITOwonFbntALNUTNGmz9Chys+gG
GI3r4wx2VSNzFyJNwEkKWnPZS1JOXSJ+ayfwEa6JUujzTmnZIT9txuUWX+cAV+Ee
M2p4fb2qmtiEDrN7qEfX1ib+wJs8ZVFeArQxJJkT28o4aEIODihwLOUjuN+OAKig
6ah/0QtSZjNiZRV4YZtvCgaSrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx2NGLa
5G53mtxW63/zNedh7XgdMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF
ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk
RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3
MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsnYWIhmOBtbMJaPDDTSlR9cc4g+hxNHXQxPgqrGYslczFqwN0WLUe
3zWIfDXrXWKgtNknhhmroCRrQqbksWY9ZOY4Vbr8aQdTAzPObqhL8DL53P7REUiE
0hO53Q2A2d0qk8fPQPm4hPKRnYbPbNbxUAYMEbQwqxPNvkzQfX/WEZ/1Bty9Otw+
Y1QSA1rbyPvgZqv3WZBcnI7BSin4rXbjeXsXG+lYMdjLz4zn7UsuPsDk5FG4SIvD
sKxuBE14BAnHr+rekKbA51GFu9hhKkOXabRCNGFkz4wKTlcQmfYRSsVQcOAdBtPe
aM8n50CKHAXZ6zKJ8V+Nmnw/UHeklTes
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:39 2025 by rpki-client