Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier: CgoyKiTc0gArT+JGrg0io0O/zWJXQ/drw0AgSErJmmg=
Subject key identifier: 53:6A:4D:AA:EB:72:04:86:E5:C5:7F:D2:6B:6C:69:3A:3B:5D:7C:CA
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number: 028D
Signing time: Fri 31 Jan 2025 01:39:27 +0000
Manifest this update: Fri 31 Jan 2025 01:39:26 +0000
Manifest next update: Fri 07 Feb 2025 01:39:26 +0000
Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: 2ZNtG1xiaoKGJST+RACWZdbXMXOEoEGcrjQ7dM0pR9A=)
2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: rj+UC+zA9sE5Q8EazPPN8LHfCTVfMALfkukIKXKN97M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Validity
Not Before: Jan 31 01:39:26 2025 GMT
Not After : Feb 7 01:39:26 2025 GMT
Subject: CN=679c29cf-9d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:86:95:dc:46:65:c2:58:6f:4a:40:1f:04:
d9:6f:89:53:7b:09:15:5f:08:80:1b:c7:3f:b4:6c:
69:1c:f8:bf:b1:5d:fc:cf:9a:e7:27:fd:15:65:86:
a0:ca:89:1e:d8:20:55:93:11:08:53:0b:ad:33:a8:
d0:4d:87:0c:20:a7:f7:03:95:54:30:62:c5:c9:f8:
81:13:2e:d1:63:86:c9:b9:05:26:12:91:d5:3c:e0:
03:c4:cc:15:9f:e5:73:a3:be:ef:15:be:92:75:e8:
0f:79:df:e5:f5:70:49:e4:79:61:60:20:88:f4:62:
63:37:9d:29:75:7e:14:19:79:73:a2:e3:d1:ba:01:
35:39:80:c0:1a:f2:1a:fd:e3:e7:ed:ef:4c:23:fc:
ee:fc:d4:4a:ca:e0:bd:a4:af:58:e7:8c:83:95:2e:
ff:ca:26:65:0b:45:42:00:36:4a:a8:1f:f7:40:4a:
0c:8b:67:cb:a3:86:e5:81:3a:e3:cf:e8:5d:83:ad:
32:a1:ee:79:aa:fe:25:ab:e4:99:cc:06:53:39:22:
6a:24:5e:f3:3f:44:fd:7a:df:19:f9:e3:0e:40:f1:
54:31:03:c7:8c:4b:6a:e1:c8:76:24:e9:a1:f8:63:
09:1c:dd:85:1c:9f:14:48:87:48:13:a7:ce:b0:00:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:4D:AA:EB:72:04:86:E5:C5:7F:D2:6B:6C:69:3A:3B:5D:7C:CA
X509v3 Authority Key Identifier:
keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:25:41:66:28:a0:3a:64:d8:47:de:22:b2:b7:f3:fa:03:ec:
68:d9:23:2b:d1:a8:60:15:b7:14:28:40:ae:65:a7:a6:93:25:
cb:4c:8a:aa:12:da:63:fe:f8:ef:dc:68:6d:a8:bf:46:a0:1d:
bf:49:45:74:c2:89:32:ef:ea:9f:39:0f:e8:56:2b:ab:9f:3c:
a6:ac:3c:aa:35:eb:83:25:b9:03:03:63:57:78:0a:1b:5a:de:
38:a4:10:e5:cf:4c:bb:7c:f0:2b:25:b6:b2:b0:f4:8a:5e:41:
2c:7b:c8:63:74:7f:eb:63:95:33:55:8b:c9:93:71:81:62:e8:
82:f2:f8:e0:d4:2c:a4:f5:87:cf:2c:41:57:8d:af:da:67:09:
cc:23:49:33:c5:c2:c2:83:c9:fd:e6:00:a6:3e:86:17:ed:70:
ad:36:cc:10:d6:5b:f6:4e:24:03:60:3b:d1:da:fd:d1:e6:23:
fa:d3:d8:b5:75:0c:f3:eb:90:66:3e:f5:ce:be:22:60:ec:7b:
cb:96:af:ae:02:ae:90:e3:6f:84:74:47:e0:0f:18:9c:76:6c:
75:6a:23:87:21:65:3b:72:89:f8:d4:1c:30:b3:41:88:22:6a:
b2:ab:39:42:01:0f:a1:69:24:2f:b8:10:cc:cb:75:e6:43:b7:
32:0d:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:39:24 2025 by rpki-client