Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier: MvGnHE1GLGgSQKu2ONZdKL62lWXlqVHBz4B8+QTrt7E=
Subject key identifier: 7B:F6:8D:79:C4:2D:85:5A:54:40:7C:D1:F0:D9:E6:04:95:77:02:9C
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0D41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number: 0D37
Signing time: Fri 31 Jan 2025 17:59:03 +0000
Manifest this update: Fri 31 Jan 2025 17:59:02 +0000
Manifest next update: Fri 07 Feb 2025 17:59:02 +0000
Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: 21Y4liJrmZs7EAnmCXH79NxJinGUj1Cd3uiOafitQOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: Jan 31 17:59:02 2025 GMT
Not After : Feb 7 17:59:02 2025 GMT
Subject: CN=679d0f66-cf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:91:60:c5:20:15:61:b3:64:c4:ab:dd:d1:
8e:a3:ef:84:86:23:ae:39:c9:00:10:27:ff:d4:31:
cd:4b:bf:85:1e:4c:5a:cb:c9:49:4d:55:2e:08:42:
4a:6e:07:0b:1f:2a:10:fe:9a:d6:d5:ff:87:c1:00:
3a:5e:40:9f:b9:aa:74:e9:94:01:b8:bb:6c:8d:72:
a0:0b:11:d4:da:4a:16:11:37:1b:f7:9e:3d:a9:7b:
ee:61:a0:ba:c6:1d:c3:e1:0f:33:49:53:b9:05:81:
81:09:ab:de:0f:2c:b2:28:35:cd:b3:5e:35:8a:b8:
de:7b:01:71:a6:36:83:5a:6d:8b:96:8d:54:87:58:
90:5e:82:5d:1c:f7:88:14:bb:1f:5e:c1:2d:c4:82:
be:b3:c5:ac:e9:10:b3:fe:4e:1f:67:de:70:fc:ca:
f6:2a:68:57:40:5a:ed:02:77:81:b9:f5:4b:27:8b:
7c:c5:fb:5a:74:49:80:07:43:91:20:8d:a2:2c:97:
92:00:94:76:b8:59:55:82:23:29:e8:87:a2:26:2c:
32:d0:78:42:c9:de:b3:7d:fb:f0:65:5d:9c:6f:23:
0c:67:21:83:60:d8:64:ee:cc:06:47:27:2f:81:b8:
4a:fc:35:33:57:8e:16:c4:8a:c2:43:d7:78:c7:a3:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:8D:79:C4:2D:85:5A:54:40:7C:D1:F0:D9:E6:04:95:77:02:9C
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:41:cf:66:96:8e:fc:16:96:35:2e:45:ed:84:2a:56:34:15:
52:c8:3c:d6:38:59:99:e2:8d:e4:8b:4c:69:34:75:02:51:5d:
6a:02:da:34:de:0b:58:d3:d2:c1:f3:09:93:b5:7a:2e:d8:0e:
46:1a:85:e1:e9:95:ce:9f:2e:56:cd:1b:86:b3:63:a8:f2:29:
b4:32:3e:b3:fa:93:2e:98:a0:3e:39:09:26:52:93:cb:28:90:
f3:4f:25:58:9b:62:09:db:63:09:e8:db:6a:bb:58:75:6b:ee:
45:43:a7:40:c9:44:e2:c2:4a:86:b5:46:e0:de:ca:45:03:2b:
c3:27:9b:fd:17:20:85:9a:ca:9f:58:d4:c5:10:bf:80:7e:d6:
46:b4:44:a4:49:d6:a8:dc:02:94:d9:f6:58:be:c7:3e:61:de:
40:82:34:40:c4:28:e5:5c:60:45:41:6f:ce:9a:89:7e:0f:74:
04:90:86:b7:86:c8:f1:69:d1:ce:70:fe:1e:bc:a3:58:2c:cb:
fa:1f:2e:af:0e:f2:c9:1a:83:fc:a7:93:fa:4b:68:ed:dd:24:
0d:e7:15:74:2f:d1:5a:16:68:ab:6a:d1:c7:26:d7:e0:c0:c9:
de:9e:29:15:7a:33:4c:f0:1f:ee:b3:c5:0b:9b:db:c1:c5:de:
df:e9:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:19 2025 by rpki-client