Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier: RFjWBlSVhSzd75k1nlB+CRaJbgvYELTTo2RHSxNHiG0=
Subject key identifier: 40:7B:90:B5:B5:18:08:C7:1B:B6:67:16:F0:25:48:84:A5:B6:97:59
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial: 1289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number: 1275
Signing time: Fri 31 Jan 2025 17:05:43 +0000
Manifest this update: Fri 31 Jan 2025 17:05:42 +0000
Manifest next update: Fri 07 Feb 2025 17:05:42 +0000
Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: O7NkUj0Dl2B5LUWHuW9WwOawnOWUkHcXEvF/lxtHSsw=)
2: 1341A108C14C11E888561034C4F9AE02.roa (hash: uCzrcOZ6wMggtTT6lyh83cBZPMtDpVknNnh01V6TMIg=)
3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: k8xb8lrujgkG8RL08aJsFU4NdjV1eIzGYv9lZHgCcyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4745 (0x1289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Validity
Not Before: Jan 31 17:05:42 2025 GMT
Not After : Feb 7 17:05:42 2025 GMT
Subject: CN=679d02e6-a2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:03:df:20:cd:9c:70:ec:c3:75:95:33:4d:
d4:56:55:f6:4b:0c:00:71:7e:43:99:59:0d:7c:d8:
42:cb:8a:b3:f7:60:dc:ad:3f:bf:b4:5d:0c:d0:55:
07:e8:a2:0e:ee:78:25:72:45:a1:f0:8e:a8:f2:42:
4c:5c:e6:93:ad:b2:f1:02:b1:43:44:66:01:0c:48:
4c:b3:45:ef:76:d6:73:d1:37:86:ef:60:ea:49:82:
82:ad:d8:5e:3c:63:b2:08:30:ca:2f:9c:dd:9c:08:
e9:2f:16:38:13:5c:e9:74:31:e9:33:b8:b1:2e:fa:
4c:d7:e1:68:6f:1f:5f:c2:80:d3:13:4f:73:25:b8:
a4:d2:66:a0:39:f6:44:11:85:a0:1c:ab:79:15:a5:
ac:33:5f:b3:5b:39:92:44:f2:51:de:ed:cd:a5:09:
47:6f:e9:58:fe:e4:a9:38:6e:20:f3:ee:2c:3a:aa:
16:43:f1:ea:8e:79:a0:4c:e7:06:2f:93:42:e7:0c:
4a:4b:94:78:86:35:52:81:4b:89:e0:d3:f1:3c:ff:
46:15:d9:6d:5d:75:84:f0:0a:dd:52:61:6d:41:40:
da:cc:4b:fd:90:57:23:30:98:c7:63:3b:5a:94:cf:
a1:b4:f4:c2:e6:46:1f:b4:51:35:8e:a2:28:51:cb:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7B:90:B5:B5:18:08:C7:1B:B6:67:16:F0:25:48:84:A5:B6:97:59
X509v3 Authority Key Identifier:
keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:6f:41:a3:fe:77:58:13:27:22:8f:b5:6d:aa:7e:70:9a:
3e:69:d2:7c:3a:de:19:8a:50:d7:f0:c1:c8:0a:eb:5a:de:e1:
67:05:b8:8d:f3:f0:ee:a9:42:8c:3e:dc:fd:5a:21:e2:3a:08:
35:1a:39:36:e3:86:3e:10:e4:9d:6e:9d:b8:31:e9:ff:4f:19:
84:02:23:e9:f6:77:66:6c:c5:d0:25:97:d4:ab:c4:83:03:c8:
d9:c7:fd:25:97:60:8f:30:ad:80:c6:9c:91:61:25:12:0f:90:
8f:be:be:e0:b9:72:d5:21:a4:d8:2d:bf:38:f2:07:99:cc:23:
ad:5f:eb:58:a7:7a:fa:e4:63:c7:85:a2:1f:43:51:23:eb:00:
b8:b7:67:8e:ea:a8:ea:13:10:8d:e2:e7:c8:d0:92:8b:6a:80:
66:24:62:4e:7b:52:fe:db:de:48:52:53:b2:cf:ff:52:da:1d:
9a:c9:bd:9e:53:de:bb:f6:50:37:6a:39:eb:27:35:c0:dc:cd:
a3:27:c0:f8:3a:96:bc:ef:f8:40:f6:7e:ba:0b:d5:b8:2c:b7:
60:c7:8e:01:a0:c6:dd:2a:ea:0b:90:21:15:c9:c1:bc:05:2e:
c7:4c:cb:2d:75:d3:db:e5:96:6c:d1:3e:ed:b0:94:1f:0e:8c:
0e:a3:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:23 2025 by rpki-client