Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier: iLOqHCa82OKB494tFsQsVIg/qgJFk0r1OKsAw+fJzS8=
Subject key identifier: 38:7B:F4:A1:FF:6B:98:CD:D3:39:68:3C:FB:9C:59:52:77:7A:89:7E
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial: 05DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number: 05D6
Signing time: Thu 30 Jan 2025 23:02:03 +0000
Manifest this update: Thu 30 Jan 2025 23:02:02 +0000
Manifest next update: Thu 06 Feb 2025 23:02:02 +0000
Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: 3v3U3OKGkIPV+wbTuWHziecZPraG6exENp2ZWuHqe2Q=)
2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: IMdjByBIYJm1pushgtHVRf7baWnF2aGGxcZRsZb6Kqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Validity
Not Before: Jan 30 23:02:02 2025 GMT
Not After : Feb 6 23:02:02 2025 GMT
Subject: CN=679c04ea-725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:b8:9a:51:8e:90:5c:e9:a0:52:da:44:7d:
ab:ed:7f:a8:61:0a:5c:fd:fa:03:90:35:e5:41:cc:
27:be:36:b8:c3:bf:a3:4e:9f:8a:9e:ec:8f:89:2d:
1b:40:98:87:1e:83:67:23:3a:e0:8a:71:4f:a5:9f:
82:00:74:8d:96:89:cc:65:46:14:36:7c:f2:c2:61:
6c:47:35:bd:fe:bc:fb:62:aa:e0:e0:01:2e:e7:17:
84:85:7c:0b:e3:de:eb:c9:0b:79:a2:00:a5:cc:b5:
d3:7b:5d:f8:5a:4f:ec:5c:3f:4b:4e:5f:09:2c:fd:
ae:d9:0f:bd:62:e9:95:40:5e:80:15:a1:27:25:46:
86:4c:7c:d9:91:35:6d:9b:5c:6d:12:28:a7:ab:ac:
7c:44:cc:4f:0e:e8:af:66:de:36:6d:78:78:e9:f9:
78:f9:fc:1a:10:c4:e6:e2:b4:38:a4:45:7c:6c:56:
03:27:68:49:0c:e9:ec:99:08:de:9c:37:03:de:4b:
5f:b4:a1:2b:51:22:2e:ec:53:83:86:44:b7:d4:66:
8d:54:9b:4a:c3:d3:12:42:16:f5:de:88:9a:72:77:
e8:78:47:0a:bb:01:10:bb:8e:d6:28:90:a6:ff:3b:
86:a0:92:bd:71:16:6f:48:3b:7e:4b:5c:18:93:54:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:F4:A1:FF:6B:98:CD:D3:39:68:3C:FB:9C:59:52:77:7A:89:7E
X509v3 Authority Key Identifier:
keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:74:17:99:a3:ea:09:41:28:f4:89:68:f3:68:c1:44:f1:
a4:04:01:42:24:a2:c2:db:95:22:40:a2:68:68:bc:7b:eb:c7:
4d:d0:6b:05:74:0c:dc:08:b3:65:cd:70:2c:50:6b:ff:ad:9e:
e0:96:0a:b3:df:d0:45:b3:75:7e:bf:45:ff:2f:72:78:36:c1:
e2:1e:5e:93:c5:93:c6:64:3f:bd:a9:6f:92:cf:87:cc:d6:89:
e4:1f:68:c2:df:4c:98:7d:a9:2a:af:18:52:3a:62:80:e2:cb:
e3:55:06:05:be:20:29:d9:c9:dd:da:33:5d:71:61:dd:37:54:
43:68:b5:9e:62:34:4e:00:a9:bc:d3:ce:1d:78:6d:97:6e:84:
b0:86:42:c0:89:75:24:7d:58:0c:a7:85:95:da:af:96:c5:36:
6d:6a:e6:8c:07:36:28:9c:07:7d:d8:c7:43:bf:43:d2:9f:e9:
68:2c:ec:cb:b5:68:7e:55:2d:cf:99:f1:0c:87:a3:ed:5f:a6:
2f:57:83:fc:77:35:87:fd:19:c9:43:f5:5a:c2:b1:70:19:2c:
70:2c:92:8f:35:c5:a7:f2:80:8c:d6:e1:c5:cb:f4:d8:4d:91:
fa:8b:05:dd:19:e8:81:96:69:f7:05:c6:c7:b1:e1:a5:12:0b:
0d:10:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:56 2025 by rpki-client