Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json)
Hash identifier: z096hE4m23HLUMI9LmvR7bGUYgCL2zoKsbi8fCSFHCA=
Subject key identifier: 99:98:B8:74:F1:B7:85:B1:E3:F0:75:C5:F8:E8:8A:B5:52:67:7F:EB
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
Manifest number: 0729
Signing time: Thu 30 Jan 2025 21:41:20 +0000
Manifest this update: Thu 30 Jan 2025 21:41:19 +0000
Manifest next update: Thu 06 Feb 2025 21:41:19 +0000
Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: o+Zj8pk/1l6dqGa5tRd4ifSSqpnksZ0vcB2KrlFeDGQ=)
2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Validity
Not Before: Jan 30 21:41:19 2025 GMT
Not After : Feb 6 21:41:19 2025 GMT
Subject: CN=679bf200-f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:5a:68:fc:83:a4:4b:bf:2f:15:72:29:bb:
b0:b2:c2:7b:4b:8e:f7:4b:a3:e4:a3:f1:ba:00:da:
cd:94:62:1c:56:5e:0d:e1:13:bd:42:84:15:df:53:
a8:c5:70:95:97:34:9a:cb:23:2f:21:30:12:e9:6e:
22:92:d5:57:e5:8f:6e:7b:52:4c:3a:f3:9c:ae:e6:
19:63:22:cd:6a:f2:50:ac:1a:cf:dd:12:00:4c:a3:
b1:17:f2:78:57:5c:d4:33:ed:aa:ad:62:a0:ca:3d:
1f:1e:96:52:87:0b:ce:07:6f:23:f7:29:32:80:05:
9e:8e:60:74:62:e2:7c:be:b5:f8:01:37:23:52:49:
fd:34:17:a2:24:f6:94:3e:ad:1c:4b:24:58:f0:9e:
5a:f2:3e:dd:6e:47:3d:d6:4e:f0:7d:ab:75:4d:61:
92:06:d3:ce:95:69:c9:e8:97:da:01:4c:f0:20:65:
5c:4e:72:ae:4b:00:62:e0:62:8a:f5:18:89:1b:ee:
8b:8b:28:35:e9:6d:b6:53:72:74:7e:52:06:ac:84:
7a:a1:dc:89:3c:af:37:36:66:90:e2:aa:f1:85:e7:
30:df:91:b5:5b:46:7f:39:8a:61:04:34:8c:05:11:
b9:78:8d:4b:64:9a:25:61:e9:ad:24:2e:50:0f:bb:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:B8:74:F1:B7:85:B1:E3:F0:75:C5:F8:E8:8A:B5:52:67:7F:EB
X509v3 Authority Key Identifier:
keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:7e:5b:85:f1:e5:22:f8:be:12:de:85:c8:b2:dc:70:47:
db:0b:59:ba:1c:d1:57:e1:78:13:21:a4:95:61:e0:1d:88:98:
3f:ca:13:63:1a:53:0e:dc:3a:03:90:43:43:3c:ab:62:33:7b:
01:ef:b2:17:bc:69:8d:08:c2:89:cc:ed:c4:a4:23:6c:69:63:
4a:0e:ec:d5:38:66:12:d5:64:23:cb:b6:8e:e9:16:34:5f:75:
7a:f9:e6:20:6c:5a:e7:62:e8:7b:44:74:e1:10:75:16:a3:00:
5b:57:93:02:02:56:6a:84:29:af:91:6d:7d:3f:60:01:1e:15:
ca:93:cf:96:d0:61:9d:f5:ca:5d:f3:ca:d0:6f:1c:c1:ab:0a:
12:8a:9f:43:77:9e:43:a8:c6:58:3c:5f:b0:11:a0:e2:a3:45:
48:3d:c1:20:15:bb:a3:c6:56:e6:fd:6d:2b:42:e6:2d:7d:52:
e7:fb:b9:68:70:0d:0f:91:b5:c4:f1:53:d9:34:87:72:50:7b:
c9:96:9f:1d:fd:98:62:24:f6:72:52:cf:38:19:20:b6:e7:08:
31:c7:36:f0:21:ba:2d:ea:1b:1c:62:41:39:c5:9e:99:7b:e3:
ac:43:02:d1:a2:e4:ce:84:a0:4e:2d:ee:52:b4:e1:f4:8d:eb:
c3:e7:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:49 2025 by rpki-client