Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: 4QDsfed3+H/35ri2gyXexVFgCReK2X16x3uj7qydryg=
Subject key identifier: A5:74:46:01:25:31:D7:36:E3:0E:EB:D6:E4:72:A1:39:D4:E2:84:ED
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: A6
Signing time: Fri 31 Jan 2025 05:22:16 +0000
Manifest this update: Fri 31 Jan 2025 05:22:16 +0000
Manifest next update: Fri 07 Feb 2025 05:22:16 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: hgVhGYO2E9zpwkjuriCBK1jPeXgL4Iy3GmnCCK1aOeY=)
2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=)
3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Jan 31 05:22:16 2025 GMT
Not After : Feb 7 05:22:16 2025 GMT
Subject: CN=679c5e08-9109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:5a:11:11:48:99:ee:30:ba:29:f8:b2:f9:
d8:36:af:9e:8c:73:cf:83:96:c3:5a:23:eb:84:4c:
a0:39:f0:9f:44:88:78:e0:b6:63:14:3c:cf:cf:c1:
cc:58:30:e0:b0:e7:76:16:92:55:14:f3:d3:fd:13:
14:be:5f:c2:93:3d:f4:14:a4:fe:2b:51:c3:a6:6b:
73:e9:9e:26:ca:bc:c6:c6:1b:42:66:9b:2e:06:56:
dc:8f:95:92:da:37:a3:7b:4e:97:30:45:30:f7:cb:
ba:4b:88:64:61:01:59:1b:d1:bd:da:ec:12:5c:7b:
ec:0e:2b:06:2b:79:ff:71:b0:c6:7d:bc:64:31:cc:
1b:8b:7f:7d:b8:ea:c1:a3:b5:22:ca:a7:3f:59:9e:
5f:34:b2:5b:83:3a:47:e9:d3:d0:59:0f:52:1c:16:
f0:11:f6:27:91:a9:66:16:bc:5e:87:b9:ac:66:e7:
1f:01:82:58:99:65:0a:f1:00:24:dd:ab:b4:06:7e:
06:83:0b:76:a6:06:e1:71:bb:b7:c6:f4:a7:ae:c6:
b2:98:a9:7e:ea:33:e6:e1:ff:56:48:ff:6a:91:4e:
36:ff:8b:c0:a7:d3:b3:78:f3:4d:a8:3d:bb:9e:9d:
ed:dc:7b:9d:89:04:cb:58:f0:a7:9e:5c:ca:20:64:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:46:01:25:31:D7:36:E3:0E:EB:D6:E4:72:A1:39:D4:E2:84:ED
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:a0:7f:80:fa:50:16:a9:3a:51:e5:fc:cf:bb:99:9d:ab:
7a:05:6f:7a:1c:1f:e6:f0:27:15:8a:a6:09:23:19:b7:6c:7d:
3b:18:9d:98:93:1e:ee:0d:00:e9:47:81:94:be:03:79:9d:49:
48:59:bd:00:02:b8:f1:e4:59:c4:f7:7b:a8:98:84:b4:02:24:
55:25:52:65:58:35:70:4d:2e:8f:c9:f2:28:81:47:52:e3:6d:
57:03:52:57:62:f2:c7:30:be:1a:7f:74:4c:01:52:4e:70:ae:
40:8c:f0:5d:5d:5e:fe:55:2e:15:05:ed:7b:d5:fe:49:aa:89:
f0:0c:d5:ea:14:f1:04:57:2c:79:d1:3a:00:0c:05:16:6a:c2:
96:75:46:8b:e2:76:c4:a8:a5:e1:2e:65:ac:54:cf:2d:ae:aa:
25:c1:63:0d:13:95:39:cd:70:23:16:b6:58:b1:d4:6e:c5:d8:
af:a6:ea:a6:9b:9b:8d:cc:ba:d0:19:40:42:2d:4d:84:1e:f8:
bf:ee:f0:94:1f:b5:f2:39:d4:a8:f1:31:ce:6a:4e:25:82:94:
be:f0:96:2e:e0:8e:ad:5b:dc:b7:cb:3c:17:c0:71:bb:f1:fb:
55:13:ba:fe:41:ec:bd:8b:d3:c9:14:21:84:b3:0a:7d:d5:43:
3d:33:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:08 2025 by rpki-client