Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier: 4gxQLLcxIKHDJupP4lxHjSJZl7idvnoR0V7KPIVYJlE=
Subject key identifier: 19:32:1F:96:4E:23:2A:75:7F:70:00:0E:16:45:E9:53:5A:E8:A8:4B
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 1083
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number: 1032
Signing time: Fri 31 Jan 2025 17:27:24 +0000
Manifest this update: Fri 31 Jan 2025 17:27:23 +0000
Manifest next update: Fri 07 Feb 2025 17:27:23 +0000
Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: Y+HG/rQcqDYvXDeKGaqF1Q7LCVN1I9Xf7HACkrv8jwQ=)
2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: SY3EjEV5Ly32k7Ap+oIj43eO7WXxXD4LqvGCw8NHcTE=)
3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Jan 31 17:27:23 2025 GMT
Not After : Feb 7 17:27:23 2025 GMT
Subject: CN=679d07fc-7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:04:f9:02:be:0f:54:64:1a:e5:28:40:20:
14:55:4a:3b:2c:6b:59:c8:d4:a5:6d:d4:71:7c:f6:
ce:2a:83:d3:3e:ad:6c:a6:a7:22:87:30:58:b4:b4:
b7:56:9a:ff:fb:24:ff:ae:d4:97:8c:8a:68:fe:01:
93:3f:28:45:c0:fe:18:38:70:ea:73:db:48:91:0c:
65:3e:ac:d0:05:29:dd:55:d9:e8:d9:62:57:b8:a8:
63:be:27:e2:e2:36:bc:96:cf:d5:19:81:6e:42:73:
9f:6a:78:8e:8d:54:2c:dd:a7:34:e3:5a:61:d1:2d:
08:e5:19:8d:1f:2e:35:ea:42:23:70:9b:87:4d:d6:
a2:74:02:47:1f:9d:d5:9e:2d:5d:07:9c:97:f0:0a:
6c:82:9f:9d:05:d0:de:5b:ca:6c:f9:7b:93:74:c2:
bd:20:91:2d:a5:bd:4b:85:c5:b2:22:ec:8a:fd:56:
8e:4e:59:ea:a2:25:8f:90:35:af:ce:dc:48:4e:0d:
fc:6c:18:37:4b:33:18:51:ca:0f:c4:ff:c0:a5:76:
1c:98:4b:92:37:83:bb:65:49:b3:56:f3:34:dd:35:
38:16:f5:e1:f9:b6:c0:83:d6:d4:f3:44:c5:0e:7a:
44:92:13:80:cc:4d:21:4a:5b:8a:eb:93:52:d8:54:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:1F:96:4E:23:2A:75:7F:70:00:0E:16:45:E9:53:5A:E8:A8:4B
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:4f:95:77:14:36:26:b9:86:ae:ac:6d:fa:2b:51:04:10:
b4:d8:d2:9a:26:a3:c4:53:f4:48:ed:ac:1d:1d:47:64:47:c0:
19:90:21:e2:3e:0e:3c:30:a6:a8:fa:de:be:a4:4e:d7:7c:fe:
b1:43:13:94:7e:7b:38:54:e4:65:1d:67:7e:a6:ee:03:fe:38:
ef:72:1b:80:05:2a:20:b6:43:cc:b8:0e:0d:6b:ff:bb:e2:46:
ed:3a:51:2f:98:d7:23:75:7d:f2:96:e4:b2:64:45:36:a7:7c:
df:dc:e1:f1:cd:ba:58:84:53:11:1d:bd:20:f2:cd:ec:e2:81:
7c:8d:6c:8e:d0:0d:53:25:33:fb:09:d4:6c:d7:25:7e:d6:f4:
ac:46:27:cc:a6:e7:b4:d6:c8:53:87:54:ca:98:b4:21:ce:f0:
75:9a:e1:28:30:5c:d7:38:3a:0c:4c:db:49:8f:2a:8a:28:4d:
5e:cf:3f:bf:d8:b2:9f:0d:7f:bf:5b:9e:89:6b:72:2e:92:62:
da:c1:af:93:3d:ad:a9:34:1e:d2:5f:31:1d:51:c5:e0:58:bf:
26:89:3c:95:cc:44:5e:9a:e4:af:ec:c4:1f:bd:c2:0e:fc:89:
75:cf:92:78:08:16:27:22:49:01:13:df:60:a8:59:9f:7b:72:
c3:e0:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:21 2025 by rpki-client