Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier: xX+eTfZTfmHcKYpFALJOyTP1hxWUofGHvHP4dIA8Yf4=
Subject key identifier: 0F:21:94:03:B5:74:7A:BA:C3:86:CD:F8:31:4E:0F:24:A1:BF:D6:04
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial: 0AA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number: 0A94
Signing time: Thu 30 Jan 2025 19:40:24 +0000
Manifest this update: Thu 30 Jan 2025 19:40:24 +0000
Manifest next update: Thu 06 Feb 2025 19:40:24 +0000
Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: 1UQCbu4kPg2+bL9yBFQdvlt0VooqEfSIQUIpKL1/eTI=)
2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2721 (0xaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Validity
Not Before: Jan 30 19:40:24 2025 GMT
Not After : Feb 6 19:40:24 2025 GMT
Subject: CN=679bd5a8-5e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:71:1f:f2:e8:d2:f5:55:24:49:8a:3a:38:
0d:1a:23:c2:e6:ff:42:7c:ae:93:73:73:b6:76:da:
53:59:bc:fc:91:34:d5:03:f8:b7:6a:82:3d:69:5d:
98:37:86:60:43:89:8e:15:53:52:d7:a0:af:e9:df:
6b:0e:7b:1d:ca:25:46:f9:c2:f4:ef:71:02:0b:6f:
98:e3:17:40:6e:d8:99:2e:25:d2:7b:39:be:98:f8:
17:6b:fb:57:95:a8:11:5a:bb:7b:ba:46:30:f4:a0:
e6:7e:2f:17:c4:58:7d:7d:0d:35:98:51:35:f0:98:
3c:57:10:93:2c:a1:97:46:f5:d4:cf:fb:32:b9:3b:
7b:a0:06:64:a8:58:7d:28:b8:c2:89:7a:05:ad:37:
2d:ee:ea:bf:9a:8a:38:2e:5d:f8:17:15:19:1d:0f:
26:7d:96:0a:84:cd:4d:6d:d5:83:25:1b:37:eb:5f:
56:49:5f:a1:af:88:03:c0:5b:8c:c6:6a:e6:50:12:
70:80:46:de:2d:cd:e6:e2:d5:18:b9:c2:79:f9:d5:
3b:c5:2d:0a:73:ef:4b:6c:7a:df:70:41:5b:60:8c:
f5:53:2c:96:a7:bf:c7:c4:bd:e8:8b:ee:a9:86:f0:
78:1b:d6:13:e1:e0:45:5e:79:b6:38:33:9f:9a:fa:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:94:03:B5:74:7A:BA:C3:86:CD:F8:31:4E:0F:24:A1:BF:D6:04
X509v3 Authority Key Identifier:
keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e2:66:ef:aa:2d:7f:8d:68:40:6a:2e:15:73:ff:33:c5:14:
96:17:fd:bc:12:90:34:f1:3a:ba:7f:f1:ee:85:c1:9a:6e:74:
ec:e8:66:eb:46:9c:6e:2a:2f:dc:91:a4:12:50:86:0d:38:6b:
08:07:d4:e6:b8:13:f1:4a:65:9a:26:33:ff:03:90:c6:dc:a3:
58:2f:b3:83:f3:03:90:68:b0:79:e2:6b:63:9c:2f:16:83:f2:
ab:63:d7:71:a5:bf:5a:a5:2a:ae:ec:f1:a1:20:bf:e8:24:5e:
5f:d7:46:4e:02:04:8f:a3:e7:45:6e:d2:a4:c8:cb:52:5f:e2:
41:ba:6b:19:7a:2e:1f:b6:f5:49:f5:5f:b4:c9:3c:e4:bf:0d:
0f:65:e3:ad:26:53:d9:8c:4f:3c:df:8b:0d:83:e8:7b:54:bf:
fa:bf:9a:fa:c4:29:26:57:7e:fc:37:28:24:04:37:62:e8:0c:
8f:ab:57:df:3c:29:f4:6c:94:d5:8b:41:3d:df:40:65:20:ad:
b0:26:d1:c8:6d:4a:bf:09:49:fc:84:9c:7a:84:db:8a:02:9c:
dd:a2:7c:64:66:4f:88:7c:63:14:7c:6a:83:14:59:ae:4f:55:
dc:8e:7c:69:ac:9d:76:61:11:99:78:ed:8b:35:d5:61:ba:f5:
8b:21:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:43 2025 by rpki-client