Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier: 7hnbaUmhyETHKXCZIiC7XKpa7ECrIh55z+ntS4PjVys=
Subject key identifier: E4:A4:F9:2B:7C:67:A3:EF:9C:2A:8B:34:7D:F3:4C:F4:6A:27:16:74
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 0411
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number: 0404
Signing time: Fri 31 Jan 2025 00:33:18 +0000
Manifest this update: Fri 31 Jan 2025 00:33:18 +0000
Manifest next update: Fri 07 Feb 2025 00:33:18 +0000
Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: miJ7P6G0zOprapvqPLpq5sJ/XbRCLPEsmI9dreOxrsE=)
2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: xcaFZU4KRRtbojr7EwLnsO9uos4lmB9PWeK2yDny72M=)
3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: 0CFQQuPkMniES7kUDG2th2dFf+/z6LBmnQCmAMjCLSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Jan 31 00:33:18 2025 GMT
Not After : Feb 7 00:33:18 2025 GMT
Subject: CN=679c1a4e-16ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:5d:c6:53:89:01:66:e4:87:70:65:3f:a9:
c8:15:3d:5a:9f:e9:db:ca:25:04:a8:87:4a:49:f6:
37:81:d4:5d:2b:52:5c:2f:87:79:59:67:22:af:f0:
cf:01:04:ba:dc:86:6b:06:a6:38:2d:fc:d9:a0:d5:
0d:ff:5b:4e:9c:85:69:1e:29:81:ba:e6:1d:c1:e3:
f6:a1:af:27:9e:7d:18:33:8c:b6:59:5e:e8:b0:fa:
b0:0a:d5:b3:0a:f2:b3:07:57:a8:63:89:69:8d:95:
9e:79:fb:e3:85:d7:f8:9b:6a:bd:4a:64:1d:a9:a4:
61:e5:20:72:94:74:df:07:e2:00:c2:f0:c5:d2:fb:
36:47:86:44:0d:fd:76:6f:da:b4:73:d9:b9:ce:77:
c8:c4:e6:1b:91:1a:74:af:0f:2e:6a:bb:b5:f4:56:
ec:46:a2:d1:9e:e9:50:74:28:e1:b0:f1:67:f1:e8:
cf:68:9e:7b:40:08:81:93:2c:f4:d7:50:1b:4a:73:
88:f3:bb:aa:16:9e:28:b5:47:17:da:43:02:e4:52:
e9:80:eb:5f:49:c1:3c:1d:be:a5:6f:17:ae:31:fc:
21:99:09:72:c9:09:3e:df:05:74:19:a0:7b:64:bb:
e4:53:0f:4a:b4:11:18:86:62:75:e5:b9:6b:c2:51:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:F9:2B:7C:67:A3:EF:9C:2A:8B:34:7D:F3:4C:F4:6A:27:16:74
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:8a:08:a3:5f:d5:a1:61:42:f1:37:8e:48:62:89:52:5e:
0a:33:8f:ce:86:2b:39:6b:4c:c7:a4:29:6a:27:ef:94:79:63:
a6:32:90:7d:7a:2e:4e:f3:fd:ea:ea:60:4e:16:db:48:7b:44:
8c:e6:92:fb:10:c0:46:4b:fc:22:35:8c:01:dc:5b:b2:11:94:
4f:46:43:b7:26:34:e6:81:36:2a:95:e5:81:43:12:2a:fb:10:
91:06:cd:e1:c0:29:7a:64:81:0c:ea:1c:c2:64:f8:b1:db:c8:
12:da:f5:e1:b9:76:df:bc:30:76:41:59:bb:55:2d:57:67:b9:
7f:3a:a3:5a:74:27:63:c6:1c:c2:95:3f:23:62:88:bb:bc:ab:
05:83:a4:00:48:e6:17:71:a8:fa:64:3f:15:3d:96:e1:70:a0:
ea:4a:71:54:f4:98:3a:51:f4:e2:89:e6:ff:b3:3c:a8:38:b4:
06:7d:a4:10:63:fa:f3:43:14:56:85:17:52:fc:85:08:f2:3d:
40:df:d9:6b:50:06:8e:fb:b4:63:44:7d:80:83:e4:6d:29:c7:
aa:00:b8:c1:c7:fb:01:9e:8c:c0:d3:4e:46:68:3f:0e:4c:37:
36:c8:ca:75:2e:1d:08:68:a7:1e:85:42:e0:05:6a:75:01:9b:
c1:32:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:29 2025 by rpki-client