Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier: Gihcvl3AXVpCY0ORAlNdBowrf+k8kI9kNnH+6HBnYko=
Subject key identifier: 17:21:1D:B3:D9:7C:E2:04:4A:D2:5A:DC:45:C7:3C:6A:CF:E8:17:FD
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial: 0B15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number: 0B0C
Signing time: Thu 30 Jan 2025 19:17:37 +0000
Manifest this update: Thu 30 Jan 2025 19:17:36 +0000
Manifest next update: Thu 06 Feb 2025 19:17:36 +0000
Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: Q4sI9L1D9Sa4Kl5IfLblrFTYMg0wk6QjU7bNBHsVbm8=)
2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Validity
Not Before: Jan 30 19:17:36 2025 GMT
Not After : Feb 6 19:17:36 2025 GMT
Subject: CN=679bd050-3c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:30:51:e4:0b:00:05:2f:15:f4:a5:17:14:
81:2c:e0:85:06:27:f1:64:41:79:fc:55:f9:27:4e:
a2:68:b9:f9:8f:24:f2:21:37:b9:bb:9f:61:21:ea:
be:08:36:9a:f7:8a:09:6d:bd:2b:38:b5:df:fb:9e:
78:21:77:3e:e1:bf:ff:08:c3:44:2f:71:a6:27:01:
43:8b:df:54:58:a8:56:a8:86:39:11:79:fe:4f:52:
2a:7b:b4:2b:29:54:2c:2a:c6:8c:f4:5b:86:83:52:
04:17:ba:0f:38:cf:ae:e9:be:5e:34:c7:9b:ba:cb:
af:c7:cf:3b:55:72:83:cc:70:0d:25:c6:c6:2d:38:
62:4c:97:39:9e:21:ae:f0:85:da:81:19:9b:27:34:
43:9f:7d:b2:e4:77:6d:6f:b3:0e:d3:6b:be:09:cf:
0e:2e:31:20:39:0f:28:b5:15:95:8f:8b:dc:8b:7d:
32:6d:9c:c3:8e:55:84:7f:79:ca:b5:28:1c:7f:8e:
e4:33:52:b1:61:9c:3e:e6:68:52:6c:3f:62:11:a4:
e9:0c:4d:ce:d4:37:8c:a4:f1:1c:39:cc:e0:ec:19:
1a:57:1d:b2:d1:92:92:aa:c8:6c:0c:85:46:90:d5:
5e:b5:73:b4:2b:c1:1a:a1:df:c7:90:66:16:da:2c:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:1D:B3:D9:7C:E2:04:4A:D2:5A:DC:45:C7:3C:6A:CF:E8:17:FD
X509v3 Authority Key Identifier:
keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1e:91:de:e8:ba:65:85:a7:7d:f0:ea:7b:83:30:5d:3f:6b:
57:d5:99:15:4b:55:e8:1a:83:db:12:d0:7e:f5:3a:81:2b:f2:
09:26:1b:58:50:27:51:88:66:9f:65:15:d3:80:15:89:56:cd:
83:51:75:50:76:bb:00:16:6a:66:c4:da:f9:8f:7e:49:ae:a8:
ea:92:81:38:4a:59:c4:91:bd:9a:a5:87:4a:ce:93:b2:a2:30:
8b:df:07:60:eb:a8:5b:f8:73:3f:94:95:32:ed:12:16:87:1e:
6d:ba:07:d0:54:8a:3f:82:4e:f4:07:ba:d3:b8:d1:ef:e5:61:
3f:8e:a3:92:43:67:bb:35:b7:4c:f4:03:b4:85:c6:e6:db:72:
98:9a:fc:f1:6b:d7:e4:9b:44:79:87:24:ce:f8:1e:62:f6:4e:
e6:94:ef:b1:b2:c3:88:98:75:03:3f:4c:14:53:51:d6:1d:11:
08:3b:a2:a6:06:f8:37:63:6e:5d:2c:f0:32:ea:d4:ed:eb:f7:
de:99:e1:a7:16:c4:57:08:2c:2d:e9:af:6b:74:8e:e3:cc:a4:
b0:8f:d9:ca:a4:6b:01:fb:98:fa:24:75:df:1f:a5:06:a1:18:
a9:4e:7b:a0:05:a9:46:8b:42:88:cd:c4:f3:13:8b:9f:b9:d4:
b7:ef:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:01 2025 by rpki-client