Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: ZwnfmpCh3AjbE7TA4TGH98KishNXdO8/FABoxZN9XCE=
Subject key identifier: E5:25:69:E8:91:D5:F5:81:9A:86:6B:C7:34:39:E1:53:A3:FA:72:FB
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 01:16:21 +0000
Manifest this update: Fri 31 Jan 2025 01:16:21 +0000
Manifest next update: Fri 07 Feb 2025 01:16:21 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: ccQBLhRIMdgx691XSkCBp04O4OxXdPs/TZXkQx8GS8M=)
2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=)
3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Jan 31 01:16:21 2025 GMT
Not After : Feb 7 01:16:21 2025 GMT
Subject: CN=679c2465-b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:dc:8b:9e:3d:b7:7e:e2:ee:5a:6e:33:5e:
54:91:18:9f:d3:6e:7c:3a:78:84:23:63:ec:80:9e:
6d:b0:5d:1f:1a:fd:62:36:85:80:8c:ee:e2:81:f4:
70:9f:0e:5f:24:59:0e:df:e1:7a:60:ca:bd:2b:72:
aa:d7:5a:7f:ff:d3:dd:1c:ea:e4:7f:35:7d:04:18:
be:ef:e4:df:4b:4b:e6:3e:ab:bd:52:fa:5f:e7:96:
e3:f6:9d:24:ab:8f:e8:c6:89:2d:32:64:c3:e2:b9:
ab:66:46:2b:b8:8d:d7:11:db:01:79:bb:e5:e9:68:
d4:e3:37:c1:38:22:6c:1f:15:79:0c:5b:7c:9d:3e:
6a:92:d8:20:c1:08:e2:c1:26:16:e6:98:87:fa:20:
ab:bd:fc:2d:4d:12:56:6e:49:fd:1d:b7:eb:fd:a1:
83:fd:24:ec:77:43:de:e5:b2:07:7c:85:e6:61:9b:
5f:5b:4d:c0:c0:3d:5a:df:2e:93:7b:1d:99:1f:95:
b3:58:c8:3d:3f:f8:56:95:cd:31:e1:e0:27:49:ca:
7c:b7:2f:fe:0a:8d:90:1f:8f:cf:ca:21:85:b3:39:
00:9d:b2:9f:fe:ba:8c:97:7e:30:2f:ec:de:d2:b1:
ff:a8:30:61:7a:94:a2:f6:67:5c:a6:d9:96:a6:9e:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:69:E8:91:D5:F5:81:9A:86:6B:C7:34:39:E1:53:A3:FA:72:FB
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:4e:4d:0c:42:67:29:98:bd:e8:5e:ed:05:b2:f6:a6:68:
9f:3e:4a:4a:14:0d:b1:65:2d:2d:dc:b2:ac:f4:65:e9:49:0e:
a3:65:c9:83:9e:90:a3:a5:94:f1:25:24:7f:d4:c9:12:98:2c:
f2:84:fd:d9:83:d3:ab:24:58:77:e9:a8:33:81:b4:77:16:7d:
c6:f2:be:2a:0f:de:c3:97:b0:04:e2:c7:3e:45:8e:f0:73:1a:
29:9d:82:8a:d1:1a:15:04:13:98:ad:1c:ae:1c:fa:bd:57:d0:
35:9a:9c:7e:3b:1e:39:79:db:0a:1d:73:17:c0:37:8b:df:16:
99:72:23:12:c9:6d:d7:da:ad:74:46:a1:b8:ec:cf:21:71:ec:
23:02:82:9b:a5:6f:31:22:eb:b7:43:5d:37:ac:be:57:c0:1f:
62:54:42:f8:8e:6d:9e:2d:c1:83:a9:51:cd:31:bb:bd:a6:5a:
41:a6:d1:72:0f:0a:23:ca:68:49:06:07:3d:24:79:ff:11:3c:
d5:05:b3:7b:40:6e:80:ab:c4:d0:99:71:be:60:65:8e:3c:8e:
96:5e:c0:ed:68:3f:e3:d0:bb:36:15:a8:f8:ef:14:e6:ae:b2:
20:81:a2:5f:36:30:69:04:32:6c:07:ff:f9:dc:cf:7d:24:29:
75:90:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:15 2025 by rpki-client