Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json)
Hash identifier: JIlpl0atsg3yxEGpBXxUuFHjr9qvdKLSFxCl5dyS0oM=
Subject key identifier: 4B:2A:C1:9F:1A:83:16:B5:C9:9B:62:E8:1F:02:03:57:F3:31:66:0A
Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
Manifest number: 047A
Signing time: Fri 31 Jan 2025 00:05:50 +0000
Manifest this update: Fri 31 Jan 2025 00:05:49 +0000
Manifest next update: Fri 07 Feb 2025 00:05:49 +0000
Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: 3Nl/eY8obZ6jrLfX6evwq3uiFAAIGOo6RqTi+sT0eVU=)
2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: en/5+Is2njNPEHjZ9D4KmksDt8McYOOkdTXWUEGbh1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Validity
Not Before: Jan 31 00:05:49 2025 GMT
Not After : Feb 7 00:05:49 2025 GMT
Subject: CN=679c13de-c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:b5:0d:fc:0e:5c:2e:7d:73:2f:a0:84:b1:
af:58:b6:7d:35:3e:9b:92:4f:e5:74:51:c9:96:f3:
2e:ba:df:29:11:0d:62:a5:88:b3:6b:61:5a:64:7e:
4d:14:e5:5e:d5:56:79:3f:73:3a:18:97:f6:8a:00:
7a:8b:0a:fc:fb:96:9e:24:30:45:c0:bc:ce:93:67:
2c:4d:a5:23:36:cc:c1:3e:ae:02:32:88:54:21:37:
5a:e5:7b:3f:b2:ff:3c:2d:d2:26:07:75:c2:59:7a:
2c:51:12:e5:8e:9c:c0:9e:41:dd:9e:91:21:ee:bd:
0e:65:c2:30:07:12:81:34:1b:c3:eb:81:f5:81:81:
b5:4a:7b:90:d5:95:f1:78:66:8e:bc:4d:4d:4b:2e:
a0:f2:8d:b8:4f:79:95:0b:6e:c7:12:87:45:2b:1b:
3d:aa:29:1e:bd:01:36:0e:9a:29:3a:83:99:1b:f2:
8c:8b:c6:fa:63:26:58:c8:40:e3:f5:44:0e:23:fc:
1a:3c:60:80:fd:12:85:7a:0a:90:44:63:7d:e4:e4:
1e:20:d2:ba:c9:f7:64:ac:23:e0:08:87:2e:b3:93:
5a:31:dc:7e:8e:a0:38:37:a2:b1:85:b5:9a:cf:15:
ce:61:e4:49:b3:ab:54:c2:c0:fd:dd:64:0e:a8:1f:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:C1:9F:1A:83:16:B5:C9:9B:62:E8:1F:02:03:57:F3:31:66:0A
X509v3 Authority Key Identifier:
keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b6:7a:35:3e:2b:9a:9b:21:7e:97:34:c0:54:3c:d5:2e:4f:
cd:06:31:35:1c:8c:c9:d2:f0:aa:f2:3e:ce:f7:16:11:fc:81:
bd:09:d5:af:6f:80:d2:85:a3:aa:2e:d8:12:fe:2e:4a:d6:96:
7d:30:4e:8d:19:7b:4a:fb:b8:43:aa:10:4a:4a:55:99:bc:cc:
5b:8a:9f:6e:15:5e:2b:a6:fc:5c:61:bb:c8:a5:9a:72:5b:31:
75:12:f4:4c:8f:b8:74:5a:dc:5d:40:a1:9b:69:5f:f3:2e:d0:
2c:16:e9:5d:f3:65:74:a6:f2:c6:55:59:b9:a4:94:0d:f4:45:
73:ee:16:c2:a7:21:a3:b1:7a:e1:5a:f5:e4:6c:ee:9a:fa:3d:
3e:d3:77:6f:d0:65:9d:d0:5a:00:9c:a8:a4:67:fc:90:18:b7:
8f:11:6b:13:c9:e4:fe:6e:e6:ff:d8:03:6f:d7:dd:7c:98:d1:
ac:ff:72:4a:e6:70:f2:bc:64:f4:87:e7:23:6c:04:9c:f9:c1:
b0:30:ea:48:33:6d:be:8f:45:03:15:cf:fb:0e:74:0b:9f:7a:
ca:5a:23:11:79:b2:4d:67:4d:c5:2c:9e:84:80:ae:42:ad:c3:
cf:70:6b:1b:d5:7e:af:9c:38:1c:b2:39:cf:4b:26:11:93:8c:
02:18:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:19 2025 by rpki-client