Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier: tmRITxaEc8w/DBRIk4K/V+C+wWts/4N6gGgVPsqjkMg=
Subject key identifier: 00:6A:C8:5E:95:76:81:47:DC:99:FF:B5:EB:BB:87:E0:FF:76:E9:5B
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number: F9
Signing time: Fri 31 Jan 2025 04:22:30 +0000
Manifest this update: Fri 31 Jan 2025 04:22:30 +0000
Manifest next update: Fri 07 Feb 2025 04:22:30 +0000
Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: MPcRBfD8nkWbW5QndGIo1OMoYWTziLNQoLEr3Jk8+NM=)
2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=)
3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Validity
Not Before: Jan 31 04:22:30 2025 GMT
Not After : Feb 7 04:22:30 2025 GMT
Subject: CN=679c5006-be28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:e1:b5:ee:6d:fe:0e:b3:52:fd:2f:15:40:
2c:63:0c:f9:2e:49:1e:33:d7:fa:7a:ba:38:c2:1e:
a7:e0:4f:6a:72:fa:1a:16:94:be:e8:19:7a:af:3a:
70:52:e5:54:d3:1c:a8:1c:84:8e:94:a6:2d:52:53:
74:59:79:93:28:39:65:78:99:3f:22:68:bb:64:96:
50:0c:f3:f2:56:ed:63:28:95:7b:06:a0:8c:b7:26:
20:0f:9c:55:8d:46:2d:d8:4e:68:27:56:ba:25:80:
0f:b7:1a:78:f4:d3:3a:0f:b0:20:92:8d:cd:cf:26:
7b:64:5d:52:07:b2:12:df:60:4c:1a:25:f8:15:51:
31:82:fb:0c:e6:5b:b7:7f:72:73:6a:46:fc:1a:f3:
29:98:e1:76:d4:c2:f4:e9:05:7e:7a:ab:f3:9f:98:
4e:f5:b7:4a:83:d4:11:ea:e8:d3:50:01:2f:18:16:
55:48:40:3e:d0:4e:54:39:06:53:2f:aa:74:22:44:
04:53:15:07:f2:a6:4c:62:f6:a0:ce:06:d6:e0:b3:
33:96:29:f8:fe:af:9c:e0:11:67:06:aa:69:d7:53:
35:61:6d:a9:b3:08:3b:af:f7:ed:48:47:64:71:c9:
40:2c:5d:e5:96:0f:4e:9e:00:e2:ee:53:ec:70:5f:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:C8:5E:95:76:81:47:DC:99:FF:B5:EB:BB:87:E0:FF:76:E9:5B
X509v3 Authority Key Identifier:
keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:74:74:61:a6:90:e9:5e:13:e4:0f:33:e4:8c:8c:58:d4:
9e:d7:12:ec:06:3d:0a:a8:1c:e0:f5:3a:e9:59:47:fd:19:e5:
d3:67:3b:33:a0:a4:c4:8b:c9:04:ef:67:89:1c:b9:c5:ae:65:
3c:28:60:38:99:40:84:7f:95:d6:88:3c:d1:cd:a0:7e:bd:41:
20:86:e0:20:f5:7d:5a:c2:50:5d:e6:c5:5e:5e:dc:ac:07:c1:
00:06:85:11:e7:13:aa:3b:01:c7:8b:15:a0:2b:e1:a3:b8:6a:
5a:02:21:c0:41:37:e4:2c:86:56:4e:4b:e8:f7:a6:86:67:1c:
48:69:6c:70:6c:92:18:5d:91:cf:55:69:0b:07:23:1a:b0:86:
d5:53:7e:b0:f0:3a:a9:1d:fc:5e:d6:92:65:b7:64:c0:9f:60:
13:98:da:13:34:64:54:4d:c6:1f:be:55:5c:5a:2a:a6:80:31:
26:90:36:60:12:3d:25:ff:c2:f0:d3:b6:6b:98:c6:06:a9:c7:
45:e4:f0:f8:86:f9:af:b7:93:2f:18:33:c5:93:c6:7f:67:fb:
58:bc:ab:32:5c:61:6a:1a:9f:1f:0c:51:2f:b2:60:4c:08:bc:
f9:06:45:ee:e6:5e:dd:12:06:6d:f2:23:c0:87:3b:bc:a7:d6:
d1:97:23:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2
N0FBM0NERjMwHhcNMjUwMTMxMDQyMjMwWhcNMjUwMjA3MDQyMjMwWjAYMRYwFAYD
VQQDEw02NzljNTAwNi1iZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+Lhte5t/g6zUv0vFUAsYwz5LkkeM9f6ero4wh6n4E9qcvoaFpS+6Bl6rzpw
UuVU0xyoHISOlKYtUlN0WXmTKDlleJk/Imi7ZJZQDPPyVu1jKJV7BqCMtyYgD5xV
jUYt2E5oJ1a6JYAPtxp49NM6D7Agko3NzyZ7ZF1SB7IS32BMGiX4FVExgvsM5lu3
f3Jzakb8GvMpmOF21ML06QV+eqvzn5hO9bdKg9QR6ujTUAEvGBZVSEA+0E5UOQZT
L6p0IkQEUxUH8qZMYvagzgbW4LMzlin4/q+c4BFnBqpp11M1YW2pswg7r/ftSEdk
cclALF3llg9OngDi7lPscF9yUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABqyF6V
doFH3Jn/teu7h+D/dulbMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD
OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE
dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlNnR0YaaQ6V4T5A8z5IyMWNSe1xLsBj0KqBzg9TrpWUf9GeXTZzsz
oKTEi8kE72eJHLnFrmU8KGA4mUCEf5XWiDzRzaB+vUEghuAg9X1awlBd5sVeXtys
B8EABoUR5xOqOwHHixWgK+GjuGpaAiHAQTfkLIZWTkvo96aGZxxIaWxwbJIYXZHP
VWkLByMasIbVU36w8DqpHfxe1pJlt2TAn2ATmNoTNGRUTcYfvlVcWiqmgDEmkDZg
Ej0l/8Lw07ZrmMYGqcdF5PD4hvmvt5MvGDPFk8Z/Z/tYvKsyXGFqGp8fDFEvsmBM
CLz5BkXu5l7dEgZt8iPAhzu8p9bRlyOM
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:49 2025 by rpki-client