Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier: N8CDJ8ueZs6Y0DOOWg20PBbIg7zWheNH3SzC4zcuDps=
Subject key identifier: 0F:D2:07:03:4F:B3:81:2B:59:C7:04:CD:64:48:CD:EA:7E:FC:BB:43
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial: 1DD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number: 1DCA
Signing time: Fri 31 Jan 2025 16:06:24 +0000
Manifest this update: Fri 31 Jan 2025 16:06:24 +0000
Manifest next update: Fri 07 Feb 2025 16:06:24 +0000
Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: lv6R4jJvt/6iVb9KyXkpqghWnI7uc1fk5VQPU9ibFhk=)
2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: aU2YJVr1JgNSnSBDLACjKPXwpUH3eD6D3PqoxsGGeXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7638 (0x1dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Validity
Not Before: Jan 31 16:06:24 2025 GMT
Not After : Feb 7 16:06:24 2025 GMT
Subject: CN=679cf500-32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:b7:c7:4c:5d:fc:1b:0d:cc:f3:48:04:23:
85:4b:2f:3d:bd:6e:85:c3:9a:e3:47:75:ad:86:b4:
96:78:b5:fa:94:8c:59:6b:5f:e6:ff:9e:4d:da:2f:
df:16:8a:86:ce:16:11:ea:0f:d1:32:89:c3:5d:66:
17:6b:45:28:24:86:fc:00:d7:b7:60:91:3f:c2:5c:
2d:6f:02:13:6f:c0:9c:d1:5c:63:33:4f:25:b9:86:
99:1e:b7:83:47:c9:2f:38:2a:d9:74:b9:cc:b3:49:
23:19:23:e2:34:d0:94:b9:d9:f1:af:5b:db:92:a5:
83:3e:7a:ea:5f:6b:f0:02:4d:54:4b:ab:03:ec:84:
ce:47:fa:7f:0e:87:5b:9a:86:4e:7b:29:24:f2:da:
67:01:73:cb:54:23:91:42:02:76:c3:4f:b3:31:e8:
fe:ca:80:95:16:94:38:26:fe:ed:a9:c9:b8:39:51:
fb:38:23:92:eb:eb:3d:4b:a3:7f:49:1c:89:34:d7:
42:7c:a1:87:e5:d7:82:ee:36:30:2b:09:de:2d:c6:
14:0d:ac:87:87:6d:2b:f6:c0:f7:54:60:76:6b:a5:
72:38:38:cd:1d:d7:33:91:9b:94:b1:04:ed:7c:f8:
7f:15:e5:80:d5:b8:6d:47:4d:8f:f5:6e:1f:21:40:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:07:03:4F:B3:81:2B:59:C7:04:CD:64:48:CD:EA:7E:FC:BB:43
X509v3 Authority Key Identifier:
keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:3c:2f:22:e4:f6:82:d8:bb:ac:4b:e3:6a:5c:b4:0a:27:
76:3c:8b:45:a2:5c:1f:ee:2f:a9:fa:06:d5:d6:9e:7c:5c:78:
74:5c:1e:57:f6:b3:b0:bf:0c:aa:0e:2f:ba:85:6f:08:c5:9e:
3e:41:7c:13:b1:ba:25:af:05:ad:6c:5c:d3:10:b2:e2:51:2d:
26:b8:ef:ee:d0:5d:23:45:9b:34:17:c8:bf:e5:db:c3:9f:b9:
f3:00:3d:9d:b9:5a:5d:28:a4:1b:d6:6e:91:bd:15:64:e9:c5:
22:cf:4e:ef:89:ef:e6:66:8c:d9:ae:b9:01:7e:85:e2:3c:5c:
67:31:b2:05:37:1d:1c:97:a3:63:51:8f:ef:29:f2:13:18:b3:
cd:4d:c4:8b:39:79:c9:90:9c:53:e2:3a:28:45:c2:fa:5d:8b:
70:e8:1c:ea:3a:f6:32:29:85:5d:cf:0c:0b:24:e0:f2:27:bc:
48:74:b5:64:12:22:75:73:6f:d4:f6:90:2c:69:09:f6:bc:b4:
43:db:69:c3:c5:6b:b6:2f:b8:3d:b9:ce:1c:38:52:1c:25:17:
01:44:cb:fc:7c:9d:db:f7:ad:d8:57:32:1f:78:e1:8f:49:9a:
0b:a6:c2:d3:7f:51:4c:66:d4:24:88:f8:e6:9a:51:d9:17:c5:
66:a8:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:26 2025 by rpki-client