Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: XVjnTdbpL02ksXgoj2+8UtwGl3Z5eY83d5MpS3hi7mU=
Subject key identifier: CF:62:93:0D:D9:25:FF:72:17:53:E5:7C:12:F3:C8:12:2A:7C:27:71
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 3075
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 3071
Signing time: Fri 31 Jan 2025 15:28:32 +0000
Manifest this update: Fri 31 Jan 2025 15:28:32 +0000
Manifest next update: Fri 07 Feb 2025 15:28:32 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: 2pJkw1G7WeL7BDy9QMXRB4QEpdXDUy6+YHLjRvqF1lI=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: QijzfOAskdpqspHv2hl6DWJmVGpVIoUXprNfU2Pxi8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12405 (0x3075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Jan 31 15:28:32 2025 GMT
Not After : Feb 7 15:28:32 2025 GMT
Subject: CN=679cec20-a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:ad:d1:a7:97:a7:38:a4:81:2d:23:d6:16:
7f:c1:55:2c:be:a1:d8:1c:c7:6c:26:55:97:d3:1d:
26:d5:e3:60:8e:6e:a5:4f:35:c9:3b:1c:40:81:b6:
da:db:88:88:5e:e8:b9:db:0b:3a:00:4f:1f:40:d6:
55:de:29:2e:d7:69:fc:0b:f2:c7:6d:ad:c4:a8:22:
66:b0:81:4d:2f:19:02:75:64:a7:d2:e6:e5:38:42:
39:c3:e5:7f:8c:cd:80:be:73:12:fd:95:da:3a:51:
50:2d:8b:dd:b6:5d:ce:ee:0c:d3:30:98:32:46:92:
ad:44:8e:99:ed:df:b6:4d:6c:79:64:a5:87:b1:af:
e0:a4:ce:97:3d:e0:b0:ca:ac:b0:3d:37:85:95:2b:
8a:eb:72:90:8b:16:ee:31:82:4e:a5:0e:83:df:38:
c4:47:22:24:4a:ae:2a:8c:4e:12:e3:bf:c8:3d:1b:
dd:95:48:39:d5:76:1b:5b:ee:25:1c:fd:60:cb:7c:
c4:cd:77:ae:b3:d6:0c:e0:a0:fa:19:97:12:72:d4:
3b:01:ca:f3:6a:dc:32:0e:0e:71:7b:c3:ae:99:3b:
b4:24:7b:8f:82:e8:f8:9c:23:b8:4c:c1:0d:c3:33:
10:eb:1e:c7:fc:e2:b4:d6:9d:4b:6f:ed:28:2f:8f:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:93:0D:D9:25:FF:72:17:53:E5:7C:12:F3:C8:12:2A:7C:27:71
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:aa:17:30:f4:d4:9d:75:55:2e:f3:b1:8f:33:c2:bb:86:
59:c4:9d:44:75:15:a1:5c:fb:e8:91:f1:03:a4:37:07:a2:b4:
f2:93:d9:44:64:b6:f7:f0:0e:2d:ee:03:4d:f7:4d:9b:97:68:
9a:89:b5:be:ce:9a:ee:e2:30:24:4a:b4:70:4e:ee:c3:0a:0e:
a7:9b:d3:85:3f:ec:bb:b0:d2:c7:c2:73:bd:76:e1:a1:2a:02:
bd:d4:b3:32:8a:ca:9b:ca:80:60:7d:6c:c2:db:e9:04:5d:75:
47:cf:63:fd:70:98:cf:98:33:e7:f3:48:80:69:c9:6b:50:2c:
f5:76:cf:1d:c6:29:de:94:5e:65:9f:e1:1c:90:eb:39:0b:ce:
50:2e:39:bc:2c:ec:7d:07:bc:aa:48:f9:d3:a9:bc:8a:c0:b0:
ff:f5:f9:73:50:cd:49:ad:86:fe:4c:ae:11:16:c5:eb:73:eb:
46:1f:36:bf:a7:bb:f0:7c:fe:bb:b6:66:38:68:46:6f:91:af:
5c:47:ae:1e:37:5b:83:15:5d:2a:81:e9:3f:35:e6:66:20:7d:
8a:27:3d:3d:34:c7:18:61:6b:c0:ed:b4:15:f8:65:7c:20:bb:
2f:20:90:41:85:7e:69:9d:77:d3:91:d5:bd:01:32:20:f4:6e:
32:be:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:37 2025 by rpki-client