
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier: oK+33Pzqi7+2IM3IN+HzlyU0wjrn2rV4Fy6wJ2PuJ1c=
Subject key identifier: BD:0D:7E:F1:7F:55:3C:C1:90:9C:EC:C1:83:CB:06:1B:75:16:F4:69
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number: 02F8
Signing time: Fri 31 Jan 2025 01:21:31 +0000
Manifest this update: Fri 31 Jan 2025 01:21:31 +0000
Manifest next update: Fri 07 Feb 2025 01:21:31 +0000
Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: 6IsCtBhzRFhksWIbgZpDLcolZhdku0CSR/QRU4fhi5Q=)
2: 779A1664D48511EFABA10B27C4F9AE02.roa (hash: 06v/+JgoTxLy7fFu5scIatjdz5rZKByWanFm2Be8AGY=)
3: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: Wt9pMWKxr+daOi/B9m/xRaP82vVhCrzp4mOJhmuxsCo=)
4: 2D1405C0C6CB11ECB185E43EC4F9AE02.roa (hash: XecBqqisXSKLGQ9HAXEQoFYf4wembyQPpbTzSWQ2As0=)
5: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: 1FKfaiAJeg1yycd3T4a6djGkQtCSWEzT9oC8tI8DGPI=)
6: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: wAinW3EzbrBxNVmPBx/cE+ByR4TusgaQNiUtZIMngpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Validity
Not Before: Jan 31 01:21:31 2025 GMT
Not After : Feb 7 01:21:31 2025 GMT
Subject: CN=679c259b-cb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:9c:b1:f1:20:22:f9:ba:21:df:03:f8:c0:
fa:b5:1c:2e:0f:3c:7a:5a:e8:85:d1:f3:cd:f7:30:
98:ba:f9:21:f4:41:9c:0e:0e:04:26:72:a2:dc:49:
20:59:c2:85:aa:cd:d3:bd:1c:c0:a2:41:03:36:ba:
e7:bd:de:61:23:d6:68:f2:93:27:e3:98:dd:13:c1:
19:29:a7:32:45:70:8d:6c:a2:ef:51:09:9d:73:99:
c6:b7:b6:d0:af:e5:07:6f:eb:ee:4f:0c:f2:f9:63:
ab:ec:cb:1e:1e:98:79:ad:49:d9:fc:3f:f4:c3:1d:
34:27:a1:1e:b1:be:93:4a:e4:13:d7:4a:84:d8:eb:
8c:8f:6d:75:1a:32:78:1b:eb:bd:e6:aa:3b:41:7f:
ca:55:76:de:58:43:8e:79:eb:02:3c:06:d3:61:5b:
39:e2:40:74:9e:41:76:68:94:42:4e:3f:88:aa:76:
54:82:c0:f5:40:99:8a:f6:ca:d2:d9:2b:cf:8d:06:
03:f2:3c:d4:ea:9f:37:d4:99:1c:9a:09:66:7a:68:
3f:14:0c:0c:32:2f:8f:a3:dd:7f:3a:ed:3a:71:ae:
6b:12:53:d1:52:76:80:5f:4a:73:97:d8:ab:f4:6a:
bc:22:fc:ea:1e:8c:e9:db:79:38:6e:eb:41:45:7a:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:7E:F1:7F:55:3C:C1:90:9C:EC:C1:83:CB:06:1B:75:16:F4:69
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:fe:2e:5d:6f:36:b5:3d:cc:06:3b:19:46:68:40:e3:e1:
92:28:a1:84:28:a4:71:ad:6c:b9:83:57:19:27:25:f6:59:7a:
81:62:e4:c3:9a:f3:f3:af:ef:09:6d:e1:92:64:2f:6b:15:30:
5e:c2:5a:7d:c2:51:9a:34:38:b4:8c:b7:1b:00:c1:c3:8b:c6:
9f:1b:21:81:08:9d:e6:8d:73:0f:d1:05:e0:c3:c8:f3:eb:22:
94:a4:06:76:77:7d:df:69:99:08:e7:e6:a0:b9:e5:a6:47:57:
10:d5:7d:62:15:1f:eb:2e:cb:d9:ac:a1:68:17:8a:9b:75:77:
58:a7:9d:ac:58:07:88:3c:23:cf:f3:df:a1:7c:c0:67:50:5a:
b8:43:7a:0e:af:ee:01:cc:b6:c9:e3:10:0d:54:d3:38:52:f3:
b4:79:71:49:50:1b:2f:49:f9:90:85:8c:f8:b2:2a:38:66:56:
77:91:5f:4f:a3:cd:3d:61:17:7d:f9:fc:f8:e7:0d:26:04:92:
ba:2f:bc:d8:85:2c:f5:f7:84:a6:e2:20:26:4a:85:f5:8c:6a:
c7:17:01:50:e1:dd:82:47:ed:55:59:81:de:23:11:4a:ee:09:
63:c0:83:2b:bf:3c:40:7d:8e:8b:c1:9a:48:a3:27:94:df:1c:
94:09:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:12 2025 by rpki-client