Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json)
Hash identifier: 9IE7FK32Gwg8v0lAOuKgrl3iRJZUfmcKf4wberkDf2c=
Subject key identifier: 42:A5:97:CA:B8:5D:85:4F:13:AE:BE:AB:3B:79:BF:28:3D:00:20:0A
Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42
Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
Manifest number: 0629
Signing time: Thu 30 Jan 2025 22:35:16 +0000
Manifest this update: Thu 30 Jan 2025 22:35:16 +0000
Manifest next update: Thu 06 Feb 2025 22:35:16 +0000
Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: JHVwo2zPvvJSvcxsMg1L0V5nyRMflLvcm89hufm7Lnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942
Validity
Not Before: Jan 30 22:35:16 2025 GMT
Not After : Feb 6 22:35:16 2025 GMT
Subject: CN=679bfea4-6396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:b8:79:b2:e1:b8:96:9a:30:eb:a9:a8:b9:
cf:cc:4d:22:b7:8f:d8:70:0d:99:e0:81:e0:6a:54:
99:f7:6d:fe:bb:df:1f:ca:c1:bd:bc:48:bf:2a:8b:
94:6e:f8:86:76:ca:ab:27:3d:51:bd:46:2a:c3:6b:
1a:48:42:fe:d7:c4:f6:48:15:f1:3f:7c:37:88:84:
92:b0:7d:a4:f1:26:57:dd:5a:0d:96:6b:12:3c:88:
62:ce:26:26:09:0e:ee:3b:65:60:31:42:f9:bc:4b:
10:e3:d3:d4:59:a0:51:58:f6:ff:2f:9b:bd:d7:e1:
8f:59:20:1c:db:fd:d6:ee:bb:50:98:87:1a:97:86:
b0:7c:4e:56:7a:5a:38:68:a6:57:eb:51:fa:06:e8:
02:29:61:19:54:ee:f8:97:69:55:32:89:5f:da:f4:
53:ca:66:1b:ac:92:3e:45:6d:1b:87:5f:45:fb:00:
84:1b:75:32:3a:0c:88:fe:03:a2:a3:d2:01:46:48:
c8:37:9e:49:bf:65:ad:5a:74:56:05:42:b4:68:8b:
a3:67:b4:51:67:3d:b4:82:08:71:95:2c:84:d3:fe:
b6:25:12:0c:f0:26:ee:9d:a1:b9:24:cf:a2:0d:45:
3c:cc:b4:de:00:ca:30:c8:16:11:a2:30:e3:4e:28:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:97:CA:B8:5D:85:4F:13:AE:BE:AB:3B:79:BF:28:3D:00:20:0A
X509v3 Authority Key Identifier:
keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:dd:93:81:19:36:b3:12:26:0d:fe:26:d5:ac:a2:46:ce:
3b:ff:f6:fe:70:ae:68:94:ff:71:18:9f:c7:20:e7:2e:61:08:
2d:61:4b:61:f2:9e:6c:d3:9b:fc:c9:7a:6e:9c:32:97:9f:8a:
d1:bc:4a:08:c2:ff:f0:7b:45:27:0b:3b:16:8b:a5:84:a4:7c:
42:80:24:68:52:82:72:7b:b4:10:d2:50:17:ef:6b:7c:39:38:
6b:af:f9:e0:55:15:a8:1e:28:92:f8:15:db:cb:65:7f:8e:c2:
da:62:97:c4:3a:f8:e1:6a:27:5c:83:96:fb:9a:7c:c2:35:63:
b9:70:f6:30:72:f1:c0:05:3e:fe:57:d1:eb:bc:5b:85:29:70:
dd:d6:e1:a3:95:4f:0e:d5:ef:da:36:a6:50:c3:86:25:84:18:
21:c3:07:29:8a:58:64:2c:8b:21:76:cd:af:0f:55:f5:6b:c2:
24:08:f9:14:94:60:20:99:f2:51:3e:2c:e9:9b:9a:d1:b1:04:
3e:42:5c:52:72:b8:87:a2:16:55:2a:4c:c8:ca:29:47:15:a0:
44:4b:27:5b:fd:ff:55:36:d6:05:e5:41:39:e4:95:4c:f1:ed:
41:78:35:17:60:46:1e:f0:fe:06:df:b4:c6:d0:8c:59:45:0e:
06:bc:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:02 2025 by rpki-client