Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: 16v28QGAert5RbgPXHXYF1+RXrFoUEZnHc84R4yuJn4=
Subject key identifier: 89:BB:E8:F9:59:50:C7:23:25:86:45:81:9F:62:04:27:4D:F1:C0:C4
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 0507
Signing time: Thu 30 Jan 2025 23:40:45 +0000
Manifest this update: Thu 30 Jan 2025 23:40:44 +0000
Manifest next update: Thu 06 Feb 2025 23:40:44 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: FG49c26pFNQWkwLy56VzNwU1Z0dZVuDtqwdWzRGu6jg=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: jezgNWeangYgvRMm1Nco5WCrmwhWUzw/oL8A7ZNwlsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: Jan 30 23:40:44 2025 GMT
Not After : Feb 6 23:40:44 2025 GMT
Subject: CN=679c0dfd-c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:1c:01:09:b1:3c:c8:e9:2f:db:4e:f3:8a:
b9:66:a5:6a:7a:f7:88:5c:c1:14:62:96:a8:d2:19:
0b:a7:bc:22:5f:d5:64:08:05:64:60:2b:1e:44:d9:
30:68:8b:7d:31:44:81:70:2c:11:51:0d:bd:3a:c1:
de:d7:c1:43:2e:66:4a:a1:c7:f2:da:ea:00:98:6b:
ca:3f:07:90:4f:5f:8b:96:38:cf:74:ba:b3:6b:15:
14:70:01:a2:67:96:6a:c5:7d:ff:83:20:f9:62:e9:
a6:91:8c:96:25:70:0c:dc:a7:71:fd:06:35:e4:6f:
64:00:1f:8c:5c:66:ed:f7:ff:39:e0:29:1e:1d:fd:
b4:18:00:91:5f:b8:b6:9c:05:fb:66:cd:b6:db:cd:
5a:ec:f1:c0:83:57:c5:6b:1f:59:21:61:7c:3e:e4:
38:a5:f4:a3:7e:f2:a3:1a:a4:ca:a6:65:74:9b:80:
5b:19:09:12:22:c8:bf:a9:c1:2b:f0:bd:f3:2c:29:
4b:ef:39:bd:a4:d7:92:92:d7:2f:85:77:c3:4b:1e:
27:b0:af:9b:6b:67:7f:9c:6e:5f:a8:da:e0:08:b2:
11:49:9b:77:54:db:78:57:e1:69:95:36:f6:b6:84:
80:ff:5a:11:f5:35:14:d1:7f:bc:a3:c4:ce:55:40:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:E8:F9:59:50:C7:23:25:86:45:81:9F:62:04:27:4D:F1:C0:C4
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:85:ba:4a:fb:72:2c:bd:44:95:2c:d5:40:46:ed:0d:e0:b4:
eb:7c:e9:86:f3:97:dd:63:aa:e1:0a:df:a9:c7:fa:4e:e5:ef:
ac:40:2d:6f:78:bf:62:66:c1:4a:b1:79:49:bb:0d:1b:6f:ee:
2b:cf:53:7c:8b:58:e6:cb:7d:8b:ee:37:52:f6:46:fa:35:de:
53:a9:e3:98:b6:6f:55:92:5d:8a:78:fe:af:3a:c8:c6:f7:88:
6a:30:96:db:cf:35:b3:c3:9a:16:5f:c0:7a:be:d6:35:4e:71:
c9:2f:a1:cc:1c:75:8c:72:79:fc:e5:ee:02:bd:a8:e0:85:f7:
87:81:cc:c3:dc:40:e0:a3:62:6f:7a:e5:c0:55:89:39:35:ea:
bc:c6:18:4e:c1:e9:08:5d:ae:8a:ee:05:08:a6:af:99:7e:6e:
c8:8d:41:69:80:60:c4:27:0e:b1:da:90:9b:6c:19:1d:54:c5:
85:99:8c:e9:04:73:c4:a2:cd:f9:64:e1:b8:21:27:30:21:72:
d9:20:f5:a0:ad:3b:e1:d3:00:c8:02:f1:6a:de:27:4e:29:a9:
39:99:2b:22:06:88:d5:e5:34:1f:81:17:8b:39:60:80:6a:46:
82:c0:51:5f:d6:88:e6:9e:30:3c:92:31:bd:84:ab:93:70:06:
07:44:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:03 2025 by rpki-client