Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier: B6vBTOuuJmVU6sMdHl1EysyGoERAsbEsOI7yWdu1N/0=
Subject key identifier: 01:72:0A:99:F6:2B:E8:56:CB:4C:47:F3:96:8D:0D:6D:CF:FB:C0:FC
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 07F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number: 07EF
Signing time: Thu 30 Jan 2025 20:57:05 +0000
Manifest this update: Thu 30 Jan 2025 20:57:04 +0000
Manifest next update: Thu 06 Feb 2025 20:57:04 +0000
Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: 9fMoA/sAI6L0w3F3zQhIgo3R3nzYCteTF6Roteju3p4=)
2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: HLJ4E+O4+cyS3vrwMtki5z6A2KFnmKhIcHCO2Ezqz2E=)
3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: I3TylIitR1gs3qeVyLm/iGnBJAcsnmMydwLVLUYv63M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Jan 30 20:57:04 2025 GMT
Not After : Feb 6 20:57:04 2025 GMT
Subject: CN=679be7a1-b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:e4:f3:29:68:2d:e1:9b:75:96:46:ba:75:
b0:b8:21:2d:84:92:44:56:42:da:ec:82:58:54:35:
0b:e9:d4:3a:c6:b7:57:18:fc:62:b0:80:f1:b5:91:
0e:67:fc:f2:6b:f9:f2:1d:a9:93:d2:24:60:c3:eb:
6a:04:9d:01:f1:bb:9c:61:9e:63:92:77:dd:c8:8d:
ca:bf:5c:a4:d8:dc:0d:61:6b:08:7b:f9:64:12:67:
d2:4c:69:4f:3a:8b:f9:11:db:23:7a:5e:33:75:13:
96:fd:2a:84:2f:8f:5b:56:35:75:3d:66:a7:85:bc:
62:9d:90:68:32:fe:00:ee:1b:09:0c:08:ed:1b:39:
66:49:e7:17:70:31:27:1d:d5:45:b7:8f:d1:4b:c3:
32:c6:b0:16:87:e5:1a:3a:c6:a5:36:41:c8:12:7b:
2d:fd:7d:9a:b8:21:40:c8:65:2d:18:b5:a8:b1:d3:
4a:8e:5f:40:a6:91:5c:56:66:9b:35:b9:3e:c9:2f:
b8:c2:61:59:7f:74:dd:9e:43:68:85:f5:fd:d1:17:
55:cc:5c:f5:cb:29:3f:dc:2b:43:c6:1a:d8:93:e1:
dd:f6:0b:96:d8:5e:8f:7a:2a:94:a7:09:23:6f:07:
d8:ff:c3:45:ca:57:97:9c:a2:20:86:e6:6b:1b:6f:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:0A:99:F6:2B:E8:56:CB:4C:47:F3:96:8D:0D:6D:CF:FB:C0:FC
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:81:33:73:d7:64:14:4b:88:09:a1:68:d0:15:a9:71:76:bf:
0a:a0:7e:a5:bb:b3:d8:e3:ba:28:62:57:d9:01:ca:66:47:eb:
cb:c9:af:7d:05:98:a0:b2:93:e9:09:38:00:3e:8e:44:ff:e1:
0a:3c:83:16:b5:be:bb:29:3c:7c:3e:dd:5b:97:64:61:93:c5:
39:27:ad:e5:4c:1e:17:c8:6c:1d:6e:cc:f4:6b:ff:93:84:14:
e9:07:b1:a0:e1:04:eb:ec:80:6f:8d:6b:10:a2:c2:d5:c3:72:
b4:4c:bd:8e:15:31:05:2c:4b:fc:4a:dd:ae:d1:8b:22:4c:ff:
d7:de:5b:62:4a:b0:5b:96:d8:d5:24:db:64:71:71:5d:e7:dc:
0a:14:07:64:f3:3b:c0:08:24:fb:63:9e:9a:e4:07:84:86:58:
cc:f5:b7:5b:82:fd:1b:fd:82:1c:a8:0f:e9:22:93:99:57:1c:
47:da:ee:07:49:64:8f:a0:ff:e4:9b:82:04:fd:79:dc:0d:83:
08:c8:4e:2c:4d:cd:d6:84:51:be:cd:8f:bf:07:69:5e:2c:b5:
b1:6e:cc:c0:e5:63:67:c5:5e:6d:fa:94:6f:27:45:c0:75:17:
f9:83:dd:1a:bd:2a:ad:16:0a:b1:ef:75:17:8d:fa:83:55:88:
d4:12:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:27 2025 by rpki-client