Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: sWRCX5I20LzQjDPjEVWULp9EX5S95ibMjs1mbgScDqw=
Subject key identifier: 72:CA:67:E0:9A:A8:51:3E:7E:61:71:A4:30:9D:AE:52:D7:92:29:8F
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0A86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0A80
Signing time: Thu 30 Jan 2025 19:41:02 +0000
Manifest this update: Thu 30 Jan 2025 19:41:01 +0000
Manifest next update: Thu 06 Feb 2025 19:41:01 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: CVNL4nureLtOmCpikKEvDojxKwglqJ8SIBjyjdomqqg=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: AxteJTYQfKhzHJcNDMSvPfiq/UKu+BhiRHq6hallwyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Jan 30 19:41:01 2025 GMT
Not After : Feb 6 19:41:01 2025 GMT
Subject: CN=679bd5cd-669b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:6e:82:1c:f2:4b:aa:36:06:10:3a:85:88:
16:ef:53:9f:26:6d:9f:78:42:05:78:01:9e:41:9f:
6d:d9:40:b0:83:de:1b:2a:68:4e:f0:28:a3:92:e5:
34:f6:50:55:76:52:d3:09:5f:6f:53:28:40:12:94:
ca:d8:97:c6:91:d2:b6:db:af:90:d2:69:99:9d:78:
21:2e:3e:0e:d4:02:cf:f8:19:94:a1:c6:97:4b:8a:
23:6f:89:a0:49:c8:55:41:5f:82:7d:36:3f:08:7c:
5c:37:c2:9a:ec:88:dd:41:75:03:b7:26:32:78:aa:
c1:93:ab:7d:2d:86:a3:4a:67:97:db:51:65:b2:ca:
30:9b:92:9f:ae:00:6c:fd:43:23:e8:ff:9a:a3:45:
6e:50:e8:98:f0:1f:30:af:40:2b:17:de:f9:04:ed:
ff:8e:93:4e:a3:21:53:a7:28:65:a4:0c:26:51:05:
d1:fd:08:48:72:db:64:41:74:81:bc:a5:6d:2c:08:
fa:65:0c:90:47:57:09:da:17:74:9e:05:06:9b:35:
d8:9c:e9:b9:30:d5:d3:bb:b9:e4:48:a2:30:d1:81:
de:a5:a4:d7:db:28:ba:b5:fd:98:de:b0:e3:68:af:
52:26:dc:8e:41:00:8d:b6:7a:b4:d4:75:c5:04:9c:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:67:E0:9A:A8:51:3E:7E:61:71:A4:30:9D:AE:52:D7:92:29:8F
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9a:63:41:40:a0:26:f6:c6:0d:9f:0b:ca:30:49:68:b0:6b:
20:f0:48:e0:d2:e4:73:f7:d0:70:58:09:b9:18:27:66:40:97:
fb:a0:31:ac:38:78:46:46:4f:33:95:d2:73:b0:48:77:a8:82:
f8:84:83:91:bb:ea:c0:4d:3e:3b:49:77:83:d7:dd:8a:41:de:
4a:23:00:17:25:b1:c4:83:89:7a:22:72:c6:4b:55:82:2e:04:
d2:bb:8f:d2:46:6c:1f:3e:3c:db:80:3b:53:ae:a0:93:11:c4:
52:9f:80:cb:fa:6c:ed:f2:0c:5e:9d:e4:ce:51:24:a5:d3:4e:
a4:95:28:57:0f:8a:f5:68:cf:a1:7c:ce:7e:f8:29:d2:30:40:
35:df:cc:7e:4d:b5:9c:cc:36:3f:fe:47:2e:03:93:52:02:2f:
33:cc:02:7c:5e:32:bc:56:c2:3d:cf:fb:8a:be:05:0a:f4:67:
e8:9c:fd:95:69:2c:1d:9e:b9:2d:a1:6e:c3:8e:a4:05:87:70:
30:73:cb:77:45:79:b4:7f:a3:0b:24:b3:a8:42:12:af:6d:9a:
51:2a:5e:66:e7:68:5d:b3:76:5c:9f:6f:8a:9a:c2:15:82:1f:
1e:bd:c7:de:d7:82:d4:96:9b:c1:33:59:04:45:38:f1:d4:a7:
43:65:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:26 2025 by rpki-client