Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier: GR2Ns4jT/CdXTfSZ4moqgeBrTx0lru2NpjEahzXAFwE=
Subject key identifier: 63:A3:24:E3:3C:0E:FE:10:86:8B:41:C6:4E:FA:06:CE:EC:5C:C8:D1
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial: 3452
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number: 3452
Signing time: Fri 31 Jan 2025 14:21:43 +0000
Manifest this update: Fri 31 Jan 2025 14:21:42 +0000
Manifest next update: Fri 07 Feb 2025 14:21:42 +0000
Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: U3awTa9+GdywDetzL+PzHhzChu39DEePzXzRvncCVLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Validity
Not Before: Jan 31 14:21:42 2025 GMT
Not After : Feb 7 14:21:42 2025 GMT
Subject: CN=679cdc76-8bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:50:9c:5e:5f:cb:f9:49:15:50:50:30:55:
25:1f:7a:3f:78:62:73:fb:31:a5:a8:d6:d6:58:ae:
bd:45:a4:15:87:34:bd:ee:57:77:ed:d8:0c:d9:35:
1d:6b:5e:21:ab:c3:91:b7:bc:5e:17:3c:4d:51:d5:
9d:56:1e:87:60:f7:e0:27:9f:e3:e0:9c:2d:34:62:
37:83:50:da:7d:ec:6b:b6:11:55:38:74:76:83:16:
7f:4d:21:07:ef:b2:40:c6:d0:1d:ac:52:d5:13:4a:
f3:1b:55:4e:bb:b0:2b:c7:15:1f:e3:be:55:51:3c:
9f:1c:47:9c:20:d7:bc:38:d8:53:e6:52:70:a3:0e:
33:c5:b3:b4:ab:ce:d1:44:57:e7:07:dc:da:a1:58:
47:7a:36:ce:f3:9e:bc:72:2b:d1:30:8d:bc:fe:09:
ce:ca:7b:a8:4b:60:8f:6e:9a:a7:34:44:46:a3:5c:
1c:55:35:4e:af:6b:87:cb:4d:3b:40:d7:b8:dd:75:
53:f8:6a:69:5d:a5:37:e5:87:a6:8f:b4:99:fb:ab:
fe:c8:6e:d0:05:2b:9c:41:ec:9e:2d:95:cd:dc:2e:
7b:b8:ba:df:eb:23:35:fa:4e:64:0c:25:02:90:ac:
84:56:d2:d2:19:78:de:59:30:0c:5f:28:0a:5e:2e:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:24:E3:3C:0E:FE:10:86:8B:41:C6:4E:FA:06:CE:EC:5C:C8:D1
X509v3 Authority Key Identifier:
keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7a:58:74:f3:2c:38:66:14:df:49:8e:43:50:85:0f:4a:54:
c5:ff:44:78:42:74:ad:59:a4:e7:fc:31:81:ff:cc:7d:41:1d:
86:94:db:23:50:67:b4:61:63:0f:be:6b:95:bc:d4:75:19:48:
7f:8c:a8:46:70:22:26:bd:e7:f4:d8:7f:84:5e:c7:44:77:6e:
25:54:7e:87:dc:1f:d0:8f:d7:a7:40:bd:7b:ff:80:ee:17:a5:
c0:95:8e:0a:6e:b5:d2:77:99:d5:ad:5d:20:00:8e:94:4c:86:
f7:38:fe:5d:49:61:52:e6:7d:85:05:14:5d:b5:b5:69:0a:44:
af:f7:b8:6c:f8:97:c8:cd:31:11:ac:27:6d:6e:c9:0c:66:46:
03:a1:c5:43:45:9a:0c:6e:7c:25:d0:28:5a:f0:2e:9d:d4:a7:
30:e9:bd:75:ea:a0:da:dc:64:90:87:da:50:4c:44:76:31:fb:
6b:a7:d5:36:b4:7f:2c:1f:4c:7d:82:4e:d7:af:2c:95:95:36:
e2:23:da:f8:23:b1:24:39:d5:fc:00:66:19:9b:2c:2b:3e:7b:
7f:37:8f:02:eb:31:6a:54:ea:e4:28:a8:7c:62:14:36:a4:44:
9a:17:43:9b:cb:04:c8:87:bc:6c:b1:fb:6f:fe:6d:d8:d0:cc:
68:66:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:50:17 2025 by rpki-client