Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier: ys/F3qVntI900y+sBMsYjtrUSeWJI1fgEp6MbUoMv6I=
Subject key identifier: 4B:E3:17:B5:F1:1C:87:E9:C0:A7:82:69:5B:82:BF:60:FD:74:9E:6E
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial: 0AFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number: 0AFA
Signing time: Thu 30 Jan 2025 19:19:59 +0000
Manifest this update: Thu 30 Jan 2025 19:19:58 +0000
Manifest next update: Thu 06 Feb 2025 19:19:58 +0000
Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: qzWIMxOAmix2GL+u2AQU21aZFfUv6fliXLT4znUwZFM=)
2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: ztloz+dHdgosHz2X9DnF4KKOUlzK5tHYHr9IDgICbBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Validity
Not Before: Jan 30 19:19:58 2025 GMT
Not After : Feb 6 19:19:58 2025 GMT
Subject: CN=679bd0de-116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:49:d7:35:36:de:b7:0f:3e:eb:2d:fb:23:
4c:c2:4c:68:11:ee:b9:d2:19:89:38:0a:92:84:cf:
c3:51:51:2e:99:66:f8:ff:39:d5:f0:ae:ce:4d:7e:
de:42:be:49:39:12:d6:2a:cb:97:be:45:b0:0a:be:
f4:bc:bc:47:b9:87:aa:ee:72:57:df:be:d6:f0:e0:
85:ef:86:80:42:80:a9:ad:cd:f0:e7:08:e1:a3:6c:
bd:7e:86:cb:af:dc:d7:d1:64:1e:0b:ef:26:06:4d:
c3:1b:4b:2d:1a:ff:30:96:e0:4e:6c:f0:e0:e7:e1:
ee:4d:4a:1d:00:17:e6:63:ee:fa:c8:04:0f:97:ab:
77:8a:7b:3e:11:ad:65:8a:d2:c1:b5:74:8b:3a:6a:
c4:6c:99:de:c1:c8:9d:5e:b2:09:37:52:60:64:2a:
3c:f2:7e:67:85:2c:f9:39:68:b7:80:e9:66:c1:a2:
94:7d:02:4a:23:a1:f4:fc:aa:62:75:5a:a3:d9:35:
47:26:a8:de:ed:2c:3a:ee:f8:d6:d5:2a:47:19:5b:
16:31:bd:bd:81:46:67:2a:ab:a6:f3:3e:c2:ed:a6:
bc:9e:17:e7:7f:1d:0e:c9:1c:f3:ce:8f:7e:15:6f:
9e:2f:03:e0:b1:26:f7:15:45:3e:67:96:fa:cf:8a:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:17:B5:F1:1C:87:E9:C0:A7:82:69:5B:82:BF:60:FD:74:9E:6E
X509v3 Authority Key Identifier:
keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:b4:e2:b7:15:84:3c:23:9d:06:54:ed:db:bd:d1:96:d5:
c2:12:b7:01:aa:2c:30:d7:b6:20:9e:2e:cb:1d:6c:c7:3d:d6:
b5:eb:71:30:fe:ba:50:74:8b:01:59:da:0b:c8:bc:df:c2:00:
42:03:ed:37:76:46:04:72:4b:71:e4:1b:74:83:fd:ce:66:f8:
69:ca:f8:8b:f3:30:bf:07:27:7a:fc:09:1d:58:b1:d5:95:da:
c7:ef:dc:8b:67:eb:ba:56:9a:53:0c:0a:f6:81:98:01:46:53:
7d:50:6c:7d:5c:fb:39:4a:0f:bb:7b:07:d5:b4:41:63:56:9f:
3f:b3:02:3c:52:65:e0:34:67:75:7d:9b:db:e4:9d:1f:e2:ff:
9b:b4:77:2a:03:38:b1:e3:76:44:b4:9f:6e:68:8d:95:26:d4:
8d:10:8a:1e:2f:4e:c7:5a:58:5e:94:59:d8:c2:3b:5f:1f:5c:
72:93:b1:9b:1e:5d:f7:63:48:9d:a2:b3:79:8d:08:46:64:fa:
63:ee:12:e5:be:2a:d8:ba:67:fc:a9:d1:d5:45:df:b0:3a:fc:
6b:a2:e5:b7:aa:c4:55:e4:73:d9:b4:f4:d5:d6:90:e0:d7:0b:
ce:3b:99:8e:3f:61:8e:e4:a0:5e:b8:82:03:b2:6b:c3:47:d0:
90:2e:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:21:44 2025 by rpki-client