Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json)
Hash identifier: IkveCgi/t+mnfY22Vmef2rROlwfKoOV86+BX59VV1y0=
Subject key identifier: C0:03:97:74:43:06:BC:11:6A:9B:F3:B5:0F:A5:36:BA:2F:F0:70:53
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
Manifest number: 024B
Signing time: Fri 31 Jan 2025 01:53:44 +0000
Manifest this update: Fri 31 Jan 2025 01:53:43 +0000
Manifest next update: Fri 07 Feb 2025 01:53:43 +0000
Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: QvQW4zLHL0eLZWeWHgAClgYxr4LOhhLBJpTlafdIbnE=)
2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: B23DJLnAzZgh7nzdSdjLo0fLxBwNcdmZ5yMaCdKP/mk=)
3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: jVg82OUaVePNyDCOCMIUFjDkj+15X58I4cwm4Uj+6+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Validity
Not Before: Jan 31 01:53:43 2025 GMT
Not After : Feb 7 01:53:43 2025 GMT
Subject: CN=679c2d28-c716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:4b:d6:bb:eb:2a:1f:cb:e2:b6:77:2f:0d:
b6:36:ab:a1:6a:86:4c:5d:6e:b8:ef:56:85:f4:f4:
3a:97:73:61:8c:e7:23:d1:65:9b:9a:77:f3:6a:db:
15:ab:c8:1e:4c:a4:be:fc:bf:d9:7b:21:ed:c6:13:
83:1b:49:7c:f5:2f:d6:40:0e:5a:a5:a7:1c:b9:c1:
c7:86:be:e7:03:fd:84:f0:53:63:b9:25:62:02:1a:
db:7c:a3:e4:ce:5c:8d:37:0d:1d:53:36:2a:7a:1a:
6a:7e:a6:20:5d:98:ea:d4:6b:69:16:5a:35:26:73:
c7:8a:fc:1e:11:5a:c8:0d:fb:e6:4c:48:b5:5f:44:
d6:68:34:45:cb:80:98:57:a0:13:14:93:10:17:5e:
f7:6f:ca:99:24:ee:77:26:aa:fb:15:ec:0d:89:4e:
a2:59:d4:c2:40:b5:80:46:63:07:9c:3c:17:ba:e5:
18:03:d7:80:1d:49:f0:24:5d:07:9f:c6:5d:4a:18:
3f:5f:bf:96:fc:f8:dd:15:47:4c:04:8a:b0:41:c7:
2c:d0:23:c6:df:98:78:70:c9:2e:d4:db:bf:f6:e1:
8f:49:cf:a8:59:31:62:ef:05:5d:10:2a:ae:6a:b5:
7f:44:b1:3a:52:9d:23:9b:dd:6c:b5:39:92:b1:38:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:97:74:43:06:BC:11:6A:9B:F3:B5:0F:A5:36:BA:2F:F0:70:53
X509v3 Authority Key Identifier:
keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:19:bd:fc:62:42:62:ff:88:60:50:01:b4:d1:13:1a:0e:
89:2f:e2:c9:6e:88:fb:f5:2f:93:3a:3d:d0:1e:7c:81:18:ad:
03:f5:12:69:7a:11:b4:52:58:30:aa:89:54:16:1f:fa:74:90:
be:2e:83:4c:24:74:ee:dc:84:64:8b:86:9c:37:45:79:42:e0:
4b:a6:ea:58:62:ab:5f:2a:f3:8c:91:63:41:e8:99:bb:d9:88:
fa:21:43:e4:88:42:fe:28:d0:81:20:7c:61:f6:15:56:e4:a6:
87:87:65:a7:b6:ba:fc:a5:f1:7c:b9:f7:9d:b9:36:32:09:80:
a0:63:62:8d:76:c5:78:33:ea:6e:5d:36:a7:3b:9a:51:03:0b:
e5:e7:6a:50:29:1a:c8:4f:63:bb:ea:e1:01:55:5a:e7:03:fd:
e2:e6:7e:c0:39:58:fa:e8:70:fa:21:fd:67:eb:77:55:0d:c3:
23:c7:af:8c:bc:de:fd:1b:18:df:f8:e8:22:5f:df:62:67:16:
7d:38:69:85:01:54:b8:b1:20:3c:24:c8:18:78:ed:e4:51:ee:
bf:e6:96:4a:48:82:5e:58:39:02:89:fa:99:52:c9:59:44:79:
31:b7:5e:85:07:b3:3c:08:c0:58:ac:56:d7:1c:59:47:36:99:
3c:14:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:11 2025 by rpki-client