Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier: lpPpOSD7+YmQBXNx5LtN1v60ggQKfdIoSYwc8147tCo=
Subject key identifier: 3D:41:05:8E:A4:FA:C9:3A:F4:B7:FA:9C:3F:2B:17:02:43:B8:91:DF
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number: 01BD
Signing time: Fri 31 Jan 2025 02:20:50 +0000
Manifest this update: Fri 31 Jan 2025 02:20:49 +0000
Manifest next update: Fri 07 Feb 2025 02:20:49 +0000
Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: 0kva7998/Ia2LOD6QPaSm8Hwm30Sea5zkxInRA1mcqg=)
2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Validity
Not Before: Jan 31 02:20:49 2025 GMT
Not After : Feb 7 02:20:49 2025 GMT
Subject: CN=679c3382-d4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:c0:9d:cb:07:12:85:63:97:e6:66:0d:48:
ff:77:9c:3b:a0:91:92:71:3a:d1:fd:ba:2c:12:d8:
70:08:f1:58:d4:90:e2:79:a0:0d:79:88:30:bd:b6:
e2:f0:a3:9c:c9:10:cd:6b:d0:37:10:c2:6b:97:c9:
97:54:ba:64:b9:d3:a4:13:f9:af:c7:98:71:85:05:
3c:bb:bb:3f:b9:cc:e3:fd:50:9a:74:19:ae:be:d4:
03:fd:f7:40:19:83:b3:64:d2:99:04:8c:8d:9c:e9:
1f:f3:ba:4d:c4:51:ae:ae:29:ba:3c:80:70:6a:4d:
88:84:7e:be:75:fb:c9:9d:71:49:72:7c:59:e0:91:
f6:02:c0:fe:6e:a8:2b:f9:f2:7a:b3:ca:80:5f:c8:
27:0d:26:5b:aa:80:2b:80:fe:14:18:8b:0f:1b:34:
2c:70:f0:eb:7d:44:13:ea:c7:22:69:e0:a7:ee:47:
cb:ae:f0:f6:71:19:0d:ad:0d:c2:de:9f:38:43:bb:
ce:64:d2:a9:34:cd:47:44:63:49:8d:74:9b:e1:67:
dc:d3:95:3a:ff:fe:5e:62:d9:9c:bd:0c:8f:b9:6b:
62:da:53:6b:c2:35:78:63:cb:47:f2:10:41:f9:e8:
e2:21:fe:11:44:50:c3:a3:c1:f4:d2:d3:fe:47:14:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:05:8E:A4:FA:C9:3A:F4:B7:FA:9C:3F:2B:17:02:43:B8:91:DF
X509v3 Authority Key Identifier:
keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:94:38:3c:cc:7a:1e:fc:2b:a6:e5:e3:f4:68:05:63:4d:0a:
55:ec:39:61:79:78:5e:13:4c:0e:b4:76:fc:a3:3f:9e:c5:3a:
e8:f1:69:5e:63:9a:31:59:9c:b9:8d:4a:79:59:ed:77:b3:36:
a3:b6:c5:f9:20:68:ae:58:5d:57:dc:38:ab:ab:69:ee:6c:a8:
ae:37:1a:40:97:e9:9f:d0:a1:fa:03:fd:38:6e:ae:40:26:c9:
91:e9:be:1a:67:f0:d5:fc:41:2b:f0:c6:fe:70:01:d7:ac:02:
95:56:a2:1f:29:ce:3e:65:35:56:bd:1c:0a:8e:40:99:7d:e0:
94:69:de:29:2c:44:e4:01:37:73:cb:ca:36:7e:56:75:1d:0b:
65:65:9d:75:47:dc:b1:79:20:0a:5b:56:f4:bd:6c:bb:27:32:
10:69:cf:a2:a6:00:85:ea:5d:a9:df:b8:fc:4c:28:3e:13:13:
92:31:83:40:a6:1f:8d:b3:c2:4c:71:b0:91:bd:9c:55:a3:eb:
bc:34:6a:1a:4a:6c:8c:be:ea:0f:3d:9f:4b:a1:ec:87:43:42:
74:4b:5b:90:22:31:4c:ae:9c:e9:c8:2e:85:96:4c:d1:13:70:
04:f5:4f:40:04:99:c8:47:43:65:39:7c:d9:fd:1c:16:03:b8:
76:ba:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:49:42 2025 by rpki-client