Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier: JB3CpNHeF0a4iB+nN4W0aNvZ/K0ucvIVH+hB6MFJQec=
Subject key identifier: 8E:A8:1D:DF:54:9F:1D:72:FC:4F:88:F2:7F:37:53:E5:FE:17:4C:87
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial: 0391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number: 038E
Signing time: Fri 31 Jan 2025 00:53:04 +0000
Manifest this update: Fri 31 Jan 2025 00:53:03 +0000
Manifest next update: Fri 07 Feb 2025 00:53:03 +0000
Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: Wdbr5DZYYg7R7y1Ldt1BFpPk4fcYfuIRH3JdypXLXtw=)
2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: ZhHVqRfjUTG6IoZU0e/IjUfz93SIgyKZrFjBx0NRxRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Validity
Not Before: Jan 31 00:53:03 2025 GMT
Not After : Feb 7 00:53:03 2025 GMT
Subject: CN=679c1eef-7e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:89:f0:e3:cd:8d:0a:0b:79:14:b9:b0:c9:
1a:e9:6e:e7:b9:45:d5:c9:66:fa:a4:bd:75:53:72:
fb:21:1a:3c:d8:17:43:57:c1:c4:79:68:e2:43:f8:
c2:84:e9:8b:f0:3c:18:ba:49:34:ae:3f:67:30:97:
72:06:de:ba:8a:01:11:ed:41:90:6b:f2:80:06:75:
15:41:fb:14:50:d3:47:97:20:84:67:44:67:9b:34:
fa:e0:b5:0b:96:77:aa:9e:f7:5c:0e:04:56:94:ff:
b6:92:6c:7b:ac:98:0a:06:16:94:3e:5c:53:bd:23:
f4:b6:af:d2:64:1f:cc:34:c0:6e:23:8c:53:8b:9f:
25:bf:26:3f:18:75:c8:f6:be:5d:07:14:53:fd:fa:
ae:64:62:57:78:39:b7:bd:d4:10:57:1a:cd:cc:dd:
62:1f:46:23:2e:a6:bd:5d:46:86:45:44:8f:74:7c:
a1:63:65:a5:e7:b3:e7:cb:86:ee:78:ba:d1:d1:d8:
ac:d8:46:da:cd:31:ff:bb:f1:85:82:7e:12:72:4a:
3b:07:12:46:ac:eb:83:ca:c5:61:65:92:ed:fa:5e:
b4:14:8e:1a:d9:af:bd:f6:1e:00:4e:74:2b:84:b1:
1f:06:48:87:7a:15:f1:bb:9f:e7:0e:c1:6c:b1:dc:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:1D:DF:54:9F:1D:72:FC:4F:88:F2:7F:37:53:E5:FE:17:4C:87
X509v3 Authority Key Identifier:
keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:6c:e0:fd:96:a9:1f:21:70:50:2f:80:d0:f1:bd:7b:dd:25:
ad:e2:6d:18:89:f1:76:cd:7b:b0:6d:08:e7:b7:90:95:7f:3b:
e0:b8:88:e4:2e:61:0b:4f:1d:f9:d3:fb:97:87:46:94:cf:7f:
9b:cc:b8:a7:18:0a:a1:79:ae:b5:a1:03:9e:ac:de:93:06:69:
47:fd:fa:bc:e8:15:c4:02:4a:21:e9:1a:8b:37:63:80:21:23:
f4:d0:3a:78:8e:34:fb:ff:5e:47:b1:59:a4:05:2e:80:e1:fb:
02:df:d2:04:8a:b5:4d:b8:a2:7c:24:6d:19:9e:2e:b8:22:1a:
25:d4:c2:43:a9:e9:70:be:78:8d:dc:bb:01:22:72:a5:d3:fd:
dc:4a:c7:fb:46:38:17:72:ca:d8:6d:47:ed:06:54:57:ae:60:
6e:98:74:f0:bf:87:51:db:70:f3:7c:ca:36:61:8a:9b:aa:1c:
4b:50:4c:94:e4:0e:80:01:34:83:9f:6e:ed:a7:f3:4c:5b:64:
68:65:23:f8:89:4b:af:93:61:c5:9a:fd:12:ad:61:35:43:8a:
65:cd:58:75:50:9b:ac:d5:d9:13:0f:6f:c7:19:23:23:33:fd:
03:b9:72:a3:d8:22:4d:56:12:0d:f0:7f:94:c5:21:1b:c4:45:
2a:18:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:10 2025 by rpki-client