Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier: UtLGVYnNX87ybhNk9AV43AHMR4wWSYgo9NrrjojnHe4=
Subject key identifier: A6:05:1C:A3:5F:48:7D:0A:59:6A:28:00:8D:BB:B1:32:D5:2E:48:B0
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number: 036C
Signing time: Fri 31 Jan 2025 01:09:36 +0000
Manifest this update: Fri 31 Jan 2025 01:09:35 +0000
Manifest next update: Fri 07 Feb 2025 01:09:35 +0000
Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: pT4xzyEe6v6gbcqIllQH4640pYekjqcHRQPqrl1xqVI=)
2: F23B6474DCCB11EFA04C156DC4F9AE02.roa (hash: 8CP+soQ8V1MqPicKDXfIlfLOoa+kVRyCORkx4Rr2qj4=)
3: B250F522DCCB11EFB54CD16CC4F9AE02.roa (hash: rwa7KCX9itOMHcH4U2EV1YtaU4sGAP6iXjp2VE332xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Validity
Not Before: Jan 31 01:09:35 2025 GMT
Not After : Feb 7 01:09:35 2025 GMT
Subject: CN=679c22cf-aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:7e:68:65:cd:28:55:7b:da:43:9f:ee:73:
29:f7:fb:50:ab:36:31:31:94:4f:77:19:cd:d1:ed:
99:09:be:09:e9:4a:6e:ec:7b:fb:d9:d1:8f:7a:18:
da:7a:96:4a:38:0b:19:90:82:5a:35:05:8e:57:7d:
e2:24:3d:28:56:62:9a:07:f2:96:9b:22:66:97:76:
1e:b8:cd:c2:38:ca:0d:7d:3f:a0:ee:5c:82:b5:78:
1b:2e:cd:83:ef:89:73:8a:89:90:49:ca:72:a4:46:
7b:b8:90:23:ea:d7:f4:5a:fd:6e:03:9d:a0:bd:88:
b7:d8:2f:2d:b7:50:8a:68:fd:ec:41:0f:9b:3f:0e:
94:c8:f6:5a:df:7a:ad:b5:00:63:57:dd:09:b5:0c:
27:fa:8a:7a:83:ce:43:48:c6:32:53:2e:c3:c9:96:
80:79:1c:85:b8:c1:ed:5f:83:aa:c9:71:e1:a6:67:
25:f0:58:85:9c:71:36:0e:11:f9:db:5e:05:d6:ce:
aa:d5:8b:40:54:32:fa:f6:a6:d6:97:1b:dd:17:ea:
e7:3f:d2:5d:22:45:bd:85:64:eb:85:5c:cc:59:8d:
7c:79:7f:4b:a8:34:f3:0b:dd:e8:f6:37:0f:12:b3:
d9:74:ce:ac:b0:5e:0f:88:2a:de:26:d3:3f:8e:cf:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:1C:A3:5F:48:7D:0A:59:6A:28:00:8D:BB:B1:32:D5:2E:48:B0
X509v3 Authority Key Identifier:
keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:73:9e:1a:c9:0a:36:f2:fb:32:5c:86:2c:e0:d3:14:da:
df:3f:67:29:8f:d7:4e:49:81:03:37:da:d8:0f:eb:ad:df:95:
c9:30:13:65:72:30:03:ce:7d:23:82:2f:da:17:00:9f:a6:1e:
1f:17:db:9d:fb:c5:6b:9c:84:b1:c9:41:9f:87:75:14:d5:7f:
6f:18:af:99:7c:00:c3:a1:ec:4c:47:c2:0f:39:b8:d0:1c:b2:
9d:9d:65:e2:d9:d7:b9:45:15:b9:39:5e:93:c2:4a:f2:ce:a0:
5f:fa:66:7b:65:e2:96:d4:b1:7f:4f:58:19:d7:7a:22:a1:de:
8f:4d:04:b7:47:0a:bf:7e:5f:f5:ac:f0:08:f6:d2:83:59:24:
e8:3e:e3:8c:03:fd:87:7b:06:37:2b:e4:7c:e2:1c:84:d8:92:
94:c7:ff:5e:b8:5d:6b:f3:39:fb:ca:34:ea:1f:56:12:51:48:
25:1f:eb:08:0b:ff:3e:e0:4e:02:ba:a2:dc:61:7b:07:dd:0f:
4f:43:e0:04:8c:f7:90:a1:5c:00:8f:e7:f6:ca:11:43:7e:ab:
9f:6a:5c:60:4e:57:99:b7:95:dd:b0:71:87:91:24:8c:6c:90:
48:6d:f2:02:21:5f:48:5c:56:d8:bf:bf:eb:39:e4:49:9d:3a:
60:5e:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:28 2025 by rpki-client