Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json)
Hash identifier: H8D8P1VzQjx4oSWXZto9gJlDURETmcqqc9Ay2l9Rawg=
Subject key identifier: C7:92:BB:CD:80:D3:A0:C7:17:95:A0:BD:E3:B2:0B:FE:25:6E:19:90
Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
Manifest number: 0213
Signing time: Fri 31 Jan 2025 02:08:45 +0000
Manifest this update: Fri 31 Jan 2025 02:08:45 +0000
Manifest next update: Fri 07 Feb 2025 02:08:45 +0000
Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: pkkRcIw3Uy7Da57umo6jGO1O2hIqwx9zdyH4jV47lmo=)
2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: KNUSUG9icP8Pvhz1F1p7tJVMNn5LFGkVNJkPaQqPTVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Validity
Not Before: Jan 31 02:08:45 2025 GMT
Not After : Feb 7 02:08:45 2025 GMT
Subject: CN=679c30ad-60fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:aa:9b:fc:e1:68:03:40:8f:4a:95:ec:ab:
cd:8a:b4:e1:e0:79:d9:63:b2:33:69:37:11:f4:5b:
30:c1:53:be:86:31:8f:a6:2b:d2:ba:eb:1b:c3:f3:
2e:93:b6:ce:1e:d2:5e:fa:90:db:c3:f6:fc:ed:4b:
db:ac:5d:eb:bf:1e:cc:4b:0d:72:1e:97:4a:68:09:
26:b5:35:28:99:ce:48:34:47:58:8a:71:9a:7a:0f:
0c:88:8e:49:4d:ed:82:cd:d0:eb:e8:f8:58:d9:76:
2c:64:4a:e1:99:10:4f:b9:36:5f:96:80:ed:fb:e3:
5b:b4:0d:af:0f:66:3a:7f:55:3a:79:7d:df:38:cf:
a7:63:c7:51:b6:ac:7b:b7:08:ac:d5:c7:59:eb:6c:
4a:ff:99:fd:d7:b5:07:de:83:74:b2:b2:bc:39:01:
16:6d:36:96:1e:e6:fb:3f:56:56:b8:37:db:0d:8f:
8c:d4:c8:f0:92:71:46:4e:9c:f1:dd:15:82:70:bb:
22:23:40:a8:73:b2:9f:14:62:f1:69:dc:32:55:12:
5d:0d:19:12:f2:5f:68:b0:c5:95:78:20:b3:4c:94:
cf:7a:39:1d:f5:2a:15:2f:be:30:8d:96:0e:41:3e:
d2:4a:bc:0f:b4:53:a3:07:55:d8:08:8a:f4:ed:a8:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:BB:CD:80:D3:A0:C7:17:95:A0:BD:E3:B2:0B:FE:25:6E:19:90
X509v3 Authority Key Identifier:
keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:98:58:ac:1e:06:b9:dc:06:81:e8:7b:11:6c:2a:fc:fc:
a4:c4:2d:fd:b8:e2:7a:70:c5:71:1d:e6:90:d5:92:e0:e8:20:
b8:82:83:25:39:10:af:43:7d:db:e7:ec:6f:1d:ab:61:92:ff:
84:68:0d:7c:0e:42:82:b2:0c:7d:8b:35:72:5c:1c:57:ed:56:
78:a0:f8:0e:1a:21:2c:c7:a8:a7:ef:ab:26:8f:f2:11:d7:95:
51:3f:23:fa:51:ce:6c:1f:c4:8e:db:f7:a7:26:10:ee:9a:3d:
2b:8e:89:57:0f:df:7f:b4:50:94:27:82:05:ea:d6:5f:d1:e9:
12:46:50:3c:a2:ae:19:e9:6d:a7:7c:9e:db:f3:a7:d4:14:0c:
10:06:10:20:50:4b:00:2d:a7:e6:78:be:1a:12:13:b0:77:23:
45:7b:e1:e8:90:84:d0:2d:7f:33:61:a1:77:71:6f:ec:2f:28:
dd:f3:c4:eb:fc:bd:7a:14:0f:c7:42:97:79:8e:23:16:28:e5:
91:b2:83:84:3e:3d:69:94:4c:c9:16:7f:de:91:62:0d:a0:07:
74:ac:62:da:4c:3c:e9:07:e2:9d:8d:bb:28:8f:b9:f5:24:5c:
70:a4:0d:10:f5:50:31:87:8f:17:83:e7:b3:e7:56:67:ff:6f:
41:a9:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:31 2025 by rpki-client