Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json)
Hash identifier: Dzy0zTd70dszNto13jYDDfHDFMmaIagv9K8tvqxsZgE=
Subject key identifier: BB:2D:8C:9B:94:20:CB:37:69:3D:3D:4B:67:4A:96:E6:EF:AF:9C:AC
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
Manifest number: 01F8
Signing time: Fri 31 Jan 2025 02:13:22 +0000
Manifest this update: Fri 31 Jan 2025 02:13:21 +0000
Manifest next update: Fri 07 Feb 2025 02:13:21 +0000
Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: iRHNIuX9FJUrHcYodBky7MpiszuYpCRbaScOWtpDsiM=)
2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=)
3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=)
4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: Jan 31 02:13:21 2025 GMT
Not After : Feb 7 02:13:21 2025 GMT
Subject: CN=679c31c1-5141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:94:52:0d:05:ac:9a:33:27:5b:40:1f:22:
5d:5c:13:6d:36:46:18:47:8c:64:da:1e:51:ae:4a:
d0:be:b4:5d:e7:5c:68:98:dd:7b:2c:99:50:26:77:
fb:62:f8:79:2d:37:fd:5b:f1:3b:94:2f:38:c0:c8:
49:51:f2:a7:e9:5b:6b:1d:91:7a:aa:91:95:cc:70:
6c:be:df:22:49:2c:ab:d6:f9:f7:d3:35:48:51:7c:
2e:6f:d3:c3:c9:59:6a:08:1f:5f:a3:87:eb:83:f8:
34:6b:6e:d9:2a:2f:9a:16:9f:a9:8e:1c:7f:a5:86:
40:74:73:4c:b4:91:db:76:51:e7:35:d6:67:9d:d5:
40:01:2f:57:60:88:5e:9b:20:c1:44:66:cd:07:d8:
49:1e:96:95:5d:ec:46:e5:be:e1:b1:f9:7d:23:e5:
26:c4:19:8f:f6:15:8b:ca:20:52:11:cd:d5:62:10:
27:23:84:38:7c:d4:e7:42:7e:a5:47:29:54:1b:a1:
0b:e1:4e:38:be:fd:49:32:95:1c:ff:1b:3e:c2:65:
94:82:03:07:dd:84:bd:49:4c:2c:62:cf:0f:4a:20:
da:31:0b:dc:56:1b:ec:27:4a:3f:f6:12:e9:ad:0d:
a7:ad:4f:a9:eb:39:dc:6f:cb:32:4e:01:34:43:ed:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:8C:9B:94:20:CB:37:69:3D:3D:4B:67:4A:96:E6:EF:AF:9C:AC
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:18:d5:14:8f:4c:db:3d:33:d1:50:3f:f7:91:9b:18:88:02:
36:fe:e0:fc:4c:b6:7a:15:be:db:32:fd:7e:8f:ad:2e:cf:d1:
1e:ca:bb:f2:6b:e6:7e:6d:33:fb:f4:1b:7f:64:dd:d2:d0:29:
76:ca:5f:d4:f8:f5:d6:96:09:36:90:b7:41:1f:ec:0c:f0:c2:
3f:a5:25:77:f7:03:4e:c5:95:ac:1a:93:bc:b9:c6:2e:f4:23:
1b:b3:e0:24:e4:0d:f3:bf:be:6a:61:9c:7d:4a:58:16:22:d1:
17:58:93:6c:8a:62:e2:18:26:f7:92:ee:4a:ca:ec:39:0e:10:
9b:5d:30:42:ad:f9:08:bb:71:77:57:47:17:ea:ec:22:53:e8:
08:ad:f8:12:ae:15:f5:5f:b6:19:16:58:4a:67:1a:ad:13:34:
65:f4:d9:e2:7b:9f:68:e9:f9:7f:37:07:57:66:eb:87:55:4d:
40:3f:56:0e:c2:9c:06:5d:ec:d4:b6:5d:56:2c:0d:91:5d:47:
a8:44:21:72:9e:69:48:3f:33:a3:a7:c1:92:25:d4:a2:23:0a:
1a:a4:88:54:9a:34:e2:1a:39:04:e4:b1:84:d3:78:7e:f3:1d:
3b:56:27:2c:fd:b1:58:d8:5e:0c:26:32:de:e3:05:cf:1c:36:
f9:db:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:58 2025 by rpki-client