Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json)
Hash identifier: tbC73GXWihJ0mr2+dQMpg8NrAcPAuq6fUo+37acu5es=
Subject key identifier: BD:56:4F:7E:50:15:67:07:F6:77:D6:59:E1:78:46:B3:D5:3E:BD:A7
Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
Manifest number: 0230
Signing time: Fri 31 Jan 2025 02:01:25 +0000
Manifest this update: Fri 31 Jan 2025 02:01:25 +0000
Manifest next update: Fri 07 Feb 2025 02:01:25 +0000
Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: 0e0fRpAGON/QoyuJgskbL+Se13WYOGBFQm0rs6SrUj0=)
2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: /RoBHSg+ngqFh2UJ3g0lpB7Yit0McfV7uuriZB6CNaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Validity
Not Before: Jan 31 02:01:25 2025 GMT
Not After : Feb 7 02:01:25 2025 GMT
Subject: CN=679c2ef5-d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:2e:59:fa:3a:c5:75:f2:79:c7:0f:94:9a:
2e:38:b4:f4:06:ad:14:a4:ee:f3:47:0f:89:cf:67:
7f:db:6c:21:63:b3:7c:f0:b4:a3:df:93:38:2e:23:
92:14:14:1d:28:d9:2a:9a:fb:4a:a3:c8:21:08:5c:
47:b0:3e:de:99:6a:fc:7e:59:17:9c:65:d5:03:de:
d4:03:c3:f2:09:03:52:5e:13:a9:9a:53:e8:a1:e8:
4d:70:bb:23:06:98:07:df:79:03:af:f4:f1:cf:0e:
d3:32:5b:c7:d9:21:c7:66:05:82:72:12:e3:27:20:
66:f9:82:b9:79:bd:cd:0b:85:72:24:a6:f0:95:fb:
dd:09:96:bd:a9:6e:68:cd:a7:9a:50:6d:fc:fa:81:
a4:d1:85:52:9a:3a:73:cf:91:32:05:ef:54:62:29:
c1:1c:54:9a:a3:ea:78:ee:37:ff:cd:55:35:bf:a5:
b7:48:78:75:91:d1:a4:48:28:3d:03:7d:b2:44:b1:
07:f0:13:60:c4:94:3c:49:d7:32:da:1a:ce:91:95:
71:f4:04:58:c4:37:0c:15:60:7d:7e:b3:ab:90:06:
71:75:30:c7:c5:a5:35:43:7d:b1:b3:ef:f7:f8:a1:
09:59:10:50:66:52:53:f3:c9:cf:cf:92:a7:f9:10:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:4F:7E:50:15:67:07:F6:77:D6:59:E1:78:46:B3:D5:3E:BD:A7
X509v3 Authority Key Identifier:
keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:f4:d3:14:d6:5c:cc:6e:37:29:97:b8:e7:fb:37:e3:a5:
10:39:17:df:18:a8:3b:eb:14:7a:56:90:d3:40:3d:cf:32:c5:
4c:6b:ac:90:46:b5:19:30:46:53:6a:92:ef:a1:86:b0:ed:b9:
c7:16:d9:bd:59:b9:85:ec:51:34:25:35:e3:55:71:54:7c:5b:
fe:8e:6a:5e:49:eb:f9:cd:78:a8:99:f7:6e:e5:4a:23:6f:6a:
ba:f2:ce:ad:cc:3f:67:df:4a:52:30:82:0e:15:4c:a6:c4:ee:
1f:45:09:97:19:75:9e:c8:c8:59:de:a7:f1:d5:38:e0:86:89:
43:f0:dd:b9:6d:8a:ed:95:aa:6c:d5:ef:67:fd:97:24:61:be:
49:07:81:7e:ae:50:da:23:4c:2e:8b:e3:c7:bd:65:31:26:db:
14:36:93:c1:34:a5:5d:e1:c2:a6:01:65:9e:fe:6b:1b:01:63:
ee:8d:0a:c4:eb:86:99:de:b3:f6:73:99:0b:70:97:6d:a3:dd:
be:ed:5d:ac:d4:25:ff:f6:d9:2d:b3:d8:2f:e9:30:e6:81:21:
03:b8:b6:9b:c5:23:fe:17:57:35:66:64:d5:21:2b:69:e8:92:
de:47:94:59:0e:bd:bf:53:d9:e7:00:b0:f1:5a:e9:66:e2:36:
e6:da:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:39 2025 by rpki-client