Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier: PyIlNJkxqtovrMVz9ftMwTDwzBA7iyDwbcxHMeUmbBg=
Subject key identifier: E4:18:E0:FD:4E:57:40:50:C7:2C:DB:F8:52:A4:4F:F0:AE:F6:CD:8D
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial: 1B69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number: 1B57
Signing time: Fri 31 Jan 2025 16:17:46 +0000
Manifest this update: Fri 31 Jan 2025 16:17:46 +0000
Manifest next update: Fri 07 Feb 2025 16:17:46 +0000
Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: DmwN8Y+L++oVpJpGugOODBTS5h8zqsT9nwE4lOJU3kE=)
2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: wynmFUF72+WqOIzeId16MY3qAbLuhLthoUyin6hAIaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7017 (0x1b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Validity
Not Before: Jan 31 16:17:46 2025 GMT
Not After : Feb 7 16:17:46 2025 GMT
Subject: CN=679cf7aa-f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:2f:32:6b:b5:1a:99:ac:69:fc:17:50:34:
77:b9:c6:80:56:c8:1a:42:6b:f0:e1:c1:33:6b:65:
32:7a:34:59:04:f3:c8:31:9b:b4:dd:df:d5:bc:70:
33:03:f7:21:c2:04:86:fd:cc:98:5d:43:52:06:30:
a0:e4:3d:58:22:15:17:4d:37:70:4b:37:f5:28:a3:
5b:e2:a8:d4:a3:39:79:b4:b8:98:26:4e:38:3f:de:
71:70:e6:0c:9e:f9:c8:d7:d8:fa:7f:6a:49:b9:c8:
df:46:6c:7c:a0:ad:22:2b:c9:b9:a4:02:9c:95:12:
dc:cb:b1:28:f0:0f:c5:07:61:cd:b3:ed:b3:62:e3:
8d:1a:e2:63:af:18:5f:5f:3a:62:50:3d:86:3b:6d:
b7:d9:1b:6e:d9:28:8f:5b:8e:a0:7c:a6:b0:05:bf:
58:a6:3b:78:79:ee:12:d3:56:40:ba:18:a0:1e:38:
01:bb:87:5c:3e:0f:84:dd:57:9e:ab:51:d9:9c:da:
37:fa:f2:12:25:dc:b2:14:9b:cc:ef:30:f6:65:d7:
b5:80:68:73:c0:2b:f8:57:89:fe:a7:50:de:0c:6b:
f6:c6:77:84:47:62:b1:22:fe:da:88:52:e6:71:58:
a3:0e:f8:3f:ce:76:45:76:56:ce:f2:86:2b:b8:92:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:E0:FD:4E:57:40:50:C7:2C:DB:F8:52:A4:4F:F0:AE:F6:CD:8D
X509v3 Authority Key Identifier:
keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:4b:04:c1:8a:fd:7b:a0:d5:56:55:eb:c1:7b:fb:54:f9:
ce:81:d4:80:a0:24:81:3f:0e:56:fb:21:32:6b:48:ff:07:67:
1e:4a:18:f8:e0:40:a0:9c:27:59:b6:22:28:78:50:8c:8e:c2:
7b:47:e9:12:4d:9a:ca:04:43:16:0d:3a:80:11:da:31:48:6a:
da:7d:3a:52:1c:b5:b8:32:9b:36:73:26:4b:47:57:5c:a0:7f:
20:16:6c:7a:04:26:59:e8:34:82:6e:9e:d8:6a:9d:0e:8b:73:
c4:91:57:4b:a0:c6:5d:f7:89:29:dc:a4:4b:bd:1d:c9:52:09:
b9:80:25:58:1c:73:2f:02:72:0c:5e:88:c9:53:04:da:88:b2:
00:d3:e7:d2:52:e4:5c:51:81:83:98:04:02:db:b2:34:b5:fa:
0a:a6:af:99:31:14:75:a9:56:30:ac:57:7f:dc:de:7c:e9:53:
b8:76:30:7f:bc:86:e4:4e:4d:b6:da:63:90:ea:9f:58:75:7b:
73:f4:55:60:85:a3:ef:5c:45:21:e0:b5:6c:d9:dc:1c:e6:36:
7a:35:73:45:98:f3:a8:d9:af:1a:1e:f6:a4:25:8a:8e:6f:a2:
c1:18:9c:d6:77:89:99:cd:d6:be:87:7f:64:f0:c2:94:c3:cd:
b8:8f:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:34 2025 by rpki-client