Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json)
Hash identifier: ef8UQCdOJZ1q0qb2hkXAoe0c2AF90azrasl2hCXC5J0=
Subject key identifier: BC:16:0F:F9:C3:7B:A4:31:A8:24:B0:09:B3:41:D1:88:FD:78:CD:0D
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
Manifest number: 0162
Signing time: Fri 31 Jan 2025 03:13:23 +0000
Manifest this update: Fri 31 Jan 2025 03:13:22 +0000
Manifest next update: Fri 07 Feb 2025 03:13:22 +0000
Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: n2WDxvhrOcwFaZDdv/caOQBJrpt0D8qQm6wNvxO/qmY=)
2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: /+LBjF6lBPLxhQK10OGPQmB3GU8J3/dgM8FRgJhuXxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Validity
Not Before: Jan 31 03:13:22 2025 GMT
Not After : Feb 7 03:13:22 2025 GMT
Subject: CN=679c3fd2-f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:c6:11:61:ea:e6:4b:a2:f9:a6:cc:eb:08:
24:ac:ff:2d:bb:6e:6c:0b:f0:cf:b4:8f:8a:9d:25:
d8:c5:0e:de:2a:15:22:7e:58:9f:19:74:17:d3:69:
38:95:3f:ed:76:ac:1e:d6:ab:97:a6:9f:ce:25:10:
1d:2e:e1:f7:20:39:11:e3:ea:61:c9:7b:4c:3c:42:
e0:78:8b:d8:7d:96:7c:51:ab:da:fe:30:cb:f1:2b:
a4:f6:fc:2b:94:46:17:4e:09:46:a5:61:f8:80:e8:
7c:1e:3c:2c:fd:42:30:7e:fc:06:55:f6:00:42:7c:
94:3c:6b:f0:df:cd:ae:4f:2f:22:27:1b:6a:ff:f2:
69:04:aa:1d:87:91:18:63:d5:f0:31:02:3b:48:7d:
3c:e1:86:14:ef:cb:4a:02:c7:d0:86:4b:cf:7a:12:
f7:15:64:75:43:1d:19:05:b8:3c:6f:0d:cb:8d:85:
94:6c:22:c8:9d:a9:37:7d:9e:b8:3a:ae:be:2b:58:
3f:24:6e:ff:90:c1:45:34:26:61:84:61:4a:2d:ee:
c0:80:c4:7c:8e:de:d5:7e:76:d2:ed:83:fa:95:80:
2e:e9:38:4e:1b:b5:32:a7:0e:21:33:bc:63:97:77:
8a:d0:13:23:71:04:0a:61:0f:13:bd:2e:ec:9a:c3:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:0F:F9:C3:7B:A4:31:A8:24:B0:09:B3:41:D1:88:FD:78:CD:0D
X509v3 Authority Key Identifier:
keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:1b:c0:9d:22:45:6e:c7:07:88:d0:c5:67:36:3a:da:ed:
d8:c8:f9:b5:40:df:1f:4e:0e:fa:c4:13:f0:3a:08:4d:f2:18:
99:76:2c:e5:4f:a5:76:f3:80:9c:f3:c4:e5:30:7b:a7:7c:fe:
73:36:9a:f9:4f:77:db:bb:4b:40:4f:c6:df:0b:01:e6:df:48:
ed:40:32:55:64:db:41:30:35:d1:96:00:18:1f:5a:67:2a:4d:
47:e1:ab:e1:31:07:8c:1e:c7:97:86:38:3d:f9:6b:20:2d:5d:
82:88:c8:ca:5c:d0:86:de:14:fd:2a:5e:b1:b1:72:85:eb:cb:
30:36:6b:24:aa:1d:50:fe:9f:69:2e:d8:9f:fb:dd:da:61:8e:
e6:82:f6:f2:79:b0:27:3a:17:55:f6:aa:40:0d:fc:73:2d:79:
36:88:53:73:ba:50:20:80:c5:31:e1:b4:ee:f4:06:7a:ad:40:
82:c6:bf:d7:6b:21:b0:65:f9:30:01:b6:aa:2c:0d:38:b0:9d:
31:2b:70:3b:93:5e:7e:3c:bd:26:94:e5:d5:3f:2b:71:a1:d4:
3d:60:d9:9c:ba:37:a2:81:ea:b0:9e:c5:19:61:a2:bd:96:56:
c3:42:51:eb:c5:f5:99:a3:40:35:98:91:62:a6:b0:80:af:68:
f3:3a:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:50 2025 by rpki-client