Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier: MwutqFr6quVXGuZWfa5VLOS0d1dJDGM+ml69638cM5Y=
Subject key identifier: 83:F0:6A:DB:BD:9F:58:EF:63:77:E6:42:0E:7A:04:7A:37:77:BC:5B
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number: 0625
Signing time: Thu 30 Jan 2025 23:59:22 +0000
Manifest this update: Thu 30 Jan 2025 23:59:22 +0000
Manifest next update: Thu 06 Feb 2025 23:59:22 +0000
Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: 1twcU24hT4N77xyzmx/brKEKYq2x/ri0JHcvZ9iBRuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Validity
Not Before: Jan 30 23:59:22 2025 GMT
Not After : Feb 6 23:59:22 2025 GMT
Subject: CN=679c125a-b3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:6f:c7:1e:dd:7d:b8:3b:9b:0a:db:7a:ae:
81:bd:b9:7c:c8:81:87:7c:a8:d9:0a:bc:79:4c:f8:
27:02:da:9c:66:91:0a:d4:f5:d0:e3:3f:2d:62:c7:
b4:1c:ce:69:ba:a7:2b:ab:c0:81:75:a0:6b:73:53:
9e:c3:23:92:95:85:c6:d1:ee:7b:c2:ed:c0:e7:81:
33:96:fb:a8:e6:d3:09:28:c4:43:f0:ef:f0:3b:39:
c9:14:4b:7e:dc:1c:84:4f:82:02:e2:46:99:ae:15:
b2:ce:1a:59:de:4a:20:61:21:dc:e9:11:36:b5:66:
08:49:f8:dd:61:4d:03:2d:3d:c7:66:9e:1b:7f:5d:
15:13:c9:31:7c:bd:1f:6e:55:a7:44:f7:e9:da:b3:
2d:b5:0e:c1:28:51:9a:56:87:92:a6:4c:59:bb:b3:
dd:39:c2:e0:2f:d6:ed:6f:3f:aa:c4:e6:9a:93:66:
2c:6c:52:44:e1:33:24:93:e2:a9:9a:3a:1e:2f:ad:
58:f5:33:a3:e0:54:bd:d0:d0:de:bc:5c:bd:bb:3c:
25:f4:e2:cf:94:69:9e:0a:47:fb:35:84:c8:a1:5b:
f8:7b:cc:aa:ef:a3:b1:34:60:e0:34:c0:d7:b9:fd:
b3:b1:40:b9:fe:a4:39:40:7c:d6:57:37:fa:23:6d:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:6A:DB:BD:9F:58:EF:63:77:E6:42:0E:7A:04:7A:37:77:BC:5B
X509v3 Authority Key Identifier:
keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ad:e8:67:03:a5:d9:53:10:7c:52:64:f8:7f:2b:a9:a4:08:
89:5d:3e:f8:f9:ac:c6:5b:91:a4:31:4f:a1:25:c1:b5:0a:42:
6c:7c:63:8e:e3:44:b7:78:aa:a8:84:26:4c:2b:e3:e6:93:e1:
2b:9d:df:1a:07:af:a6:55:f8:af:3c:01:fb:6a:6c:9f:52:ac:
f9:81:d7:93:1e:52:09:69:17:20:93:05:cf:bb:c2:32:fc:57:
8c:05:9f:c6:39:a3:cc:8b:1a:1f:82:e9:51:e0:86:e4:4a:8c:
e8:f4:41:53:0e:e3:9f:3b:5c:19:57:00:15:d9:55:8e:ac:53:
ad:0f:3a:1f:70:b1:37:af:b2:5d:12:a5:4a:e9:03:19:f5:68:
a8:15:ee:a4:63:ab:d3:cb:c5:88:aa:70:92:59:01:69:6b:15:
7f:c5:a9:3c:6e:d1:31:22:50:2c:59:5e:04:3d:5b:cc:a4:6b:
68:a9:e3:da:97:0f:f9:f5:b3:dd:b1:11:e4:1e:07:66:b6:8a:
35:06:0f:19:c3:f8:19:6b:a2:84:21:b1:03:39:07:1e:02:5c:
e5:f7:61:4a:1e:60:96:cf:2c:38:40:28:70:12:2d:f5:69:3a:
c0:3b:ee:d8:ec:96:16:8e:22:17:63:ae:9f:4f:af:b8:7f:7e:
08:c7:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:46 2025 by rpki-client