Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json)
Hash identifier: LzbSv8CELpAadQCdDS/2bOXS/7m3DptdqMDnvyR/5RM=
Subject key identifier: 60:7F:41:71:DE:4E:FA:C5:FA:12:2D:75:76:91:75:B7:31:EF:9B:C8
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
Manifest number: 7A
Signing time: Fri 31 Jan 2025 05:48:04 +0000
Manifest this update: Fri 31 Jan 2025 05:48:04 +0000
Manifest next update: Fri 07 Feb 2025 05:48:04 +0000
Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: Fk1Xsuk1Poh3JrpyyWmDiA1FiRKfKAEDz8M3cBE4U+k=)
2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Validity
Not Before: Jan 31 05:48:04 2025 GMT
Not After : Feb 7 05:48:04 2025 GMT
Subject: CN=679c6414-4fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:07:5b:19:56:4b:b3:7a:19:48:e2:5f:1d:
01:52:0f:1b:cf:c4:32:e7:0b:b4:a0:05:99:b5:0f:
92:dc:81:45:18:fc:b6:4a:14:62:b2:6d:a5:20:a0:
dc:ad:87:fb:13:2a:c1:8b:35:b1:d4:32:7d:30:e0:
15:ba:e9:ed:a9:f9:57:bc:a7:d4:76:0e:6f:0f:13:
94:f0:8d:eb:f4:94:d5:9e:4c:9c:3d:18:e7:b9:fe:
a5:44:ce:b3:dd:71:73:fe:55:27:5f:14:ef:99:39:
f6:db:09:0f:58:42:8a:39:ad:73:34:3e:92:fd:54:
cb:1e:20:08:b5:74:b7:5f:60:de:a8:30:b5:49:86:
60:7a:dd:80:f4:98:3b:73:2c:2a:9e:10:d0:5b:ee:
30:01:7a:6a:80:bd:93:f3:88:b7:14:ab:1e:ac:b4:
93:7a:79:1f:53:5b:a1:04:be:25:ec:8f:22:df:2b:
01:bc:81:6c:dc:d6:dd:b4:9f:5c:bc:51:c2:44:90:
4a:9d:36:23:17:9a:c4:cf:80:f5:02:c9:05:d3:22:
28:2d:1d:db:b3:26:43:9f:7f:41:ca:bb:1c:48:1d:
82:47:45:19:e7:a5:dc:15:12:05:d1:30:42:bd:38:
9f:9c:37:f4:3c:08:bb:ac:96:d8:05:e5:6c:43:c6:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:41:71:DE:4E:FA:C5:FA:12:2D:75:76:91:75:B7:31:EF:9B:C8
X509v3 Authority Key Identifier:
keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:1b:fb:7a:b5:f0:8b:40:ae:c7:0c:7a:ff:36:7c:a2:c4:89:
76:35:4a:fa:5d:24:32:6c:be:da:79:a5:5d:fc:4c:0c:7a:66:
a5:50:38:3a:f4:6b:cc:99:e2:50:e6:85:08:14:07:28:09:85:
f4:5e:04:ae:0e:2a:f0:c4:83:34:54:df:78:5a:91:c9:02:8d:
5b:ef:16:14:65:d3:70:72:66:34:9a:6c:ad:a8:b3:1f:35:9f:
21:02:0f:97:98:21:68:e9:12:48:33:6d:36:3e:20:d3:c2:29:
c5:69:2e:72:73:25:a8:16:00:34:14:a1:d0:2a:bf:74:89:9a:
fb:3b:e1:64:d8:c6:dc:b5:7b:3c:2f:8a:99:86:0f:8b:dc:02:
ef:ff:a6:7e:57:05:21:6c:ad:3a:30:47:a8:37:6d:64:94:e9:
38:2d:90:99:47:c8:a3:c6:ce:bc:36:a6:e4:bd:b6:7f:7f:d2:
1b:15:be:53:12:ed:dc:bc:71:a2:7d:51:e7:b2:19:c8:b3:b0:
95:a9:7b:db:91:a4:12:74:0c:ed:46:71:75:41:b6:9b:a1:36:
ba:0d:f9:ec:8a:dc:86:f5:fc:e1:15:91:c2:1f:40:c3:4b:d5:
cd:94:75:22:6a:71:ef:35:d3:77:ab:9d:8e:42:05:4c:16:2d:
0f:c3:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:53 2025 by rpki-client