Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier: c2cQHVlPPtTCYgrH40kS9mOJpCA53fg3JeUTUwDSRvE=
Subject key identifier: 31:3B:D7:2B:77:C1:B9:7F:13:ED:11:09:63:F2:95:A4:F1:45:8B:59
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number: 023A
Signing time: Fri 31 Jan 2025 01:59:19 +0000
Manifest this update: Fri 31 Jan 2025 01:59:19 +0000
Manifest next update: Fri 07 Feb 2025 01:59:19 +0000
Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: PgnGinG4xlrY/hmrNz5aBAlHfiCwBk9fH3xKszc2iLU=)
2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: iNGLEhZ74V/teXh5s40LgFHohuZJ0yOem+a3lr8uSKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Validity
Not Before: Jan 31 01:59:19 2025 GMT
Not After : Feb 7 01:59:19 2025 GMT
Subject: CN=679c2e77-ff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:cb:57:db:c2:01:03:b2:cd:ea:19:68:87:
67:f9:1a:d3:d0:6b:ec:a6:ee:3e:f6:38:1a:71:cd:
70:7e:78:01:ea:ea:5d:86:27:e1:84:98:68:2b:6a:
97:71:cf:3e:6a:11:9c:f2:bb:e9:3c:f2:86:f2:53:
d4:4a:bf:5c:37:01:f0:2a:c3:78:9f:c4:6a:b3:b2:
4e:2c:e0:89:61:63:5a:a7:eb:85:b7:12:2e:2f:d9:
66:41:07:fb:69:0f:38:fa:d4:e5:5d:b2:c9:ba:7c:
1c:76:e2:46:07:c9:d1:23:62:eb:be:2b:49:b7:da:
c3:13:d3:17:ac:62:75:97:6b:3c:89:d7:b5:ea:15:
cf:26:59:31:95:c3:b1:52:82:5c:af:b5:f5:93:e7:
37:b4:c9:35:92:3f:90:96:ab:30:f0:25:3f:d6:0a:
7d:92:e3:cd:43:14:7f:99:fa:1e:39:f7:06:a7:12:
8e:9c:44:91:61:48:d5:a0:bf:09:39:ff:a2:59:6c:
2f:b6:4d:ef:a9:e8:e5:9c:03:f3:59:d5:8a:5a:26:
c5:e6:cc:43:48:9d:72:2b:44:a5:10:de:93:33:7f:
c0:3b:1b:15:aa:b8:c1:80:f3:98:95:c5:ae:95:77:
37:a6:a4:9d:fb:a0:26:ee:ca:53:10:ce:42:6d:fa:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:D7:2B:77:C1:B9:7F:13:ED:11:09:63:F2:95:A4:F1:45:8B:59
X509v3 Authority Key Identifier:
keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:f5:61:78:07:95:4f:2a:7a:80:e1:da:67:41:f3:47:45:
59:4e:1a:3f:5b:a0:3c:d8:74:b6:e4:e6:5c:66:36:bc:a3:c9:
89:50:96:86:99:ec:0a:6c:9b:e4:fb:44:0d:59:ad:96:b1:4a:
f1:14:a0:53:2b:1a:d9:c9:dc:bd:97:f2:57:fc:2e:63:d3:95:
b4:44:df:68:fa:90:b8:75:a5:99:a1:86:5d:04:35:7b:7c:3c:
43:60:7e:7b:3d:f0:94:1d:73:9b:e5:5b:45:73:c9:d6:1a:00:
f7:fd:db:72:1e:11:d0:dc:be:fd:0d:92:2b:47:e0:84:cb:d8:
d1:8c:f6:e3:d4:fa:09:63:0a:8e:81:da:58:aa:67:2a:fd:70:
9a:ae:df:d9:d6:01:62:77:3c:42:25:63:1e:6a:61:61:17:71:
94:33:1b:a9:1e:ed:c3:4d:64:c2:1c:27:59:70:a5:03:65:78:
9c:e3:16:59:5a:d5:dc:20:60:9e:08:ed:f5:d3:c2:7e:b6:b8:
d1:dd:9c:fa:f6:a6:9e:a9:11:93:d0:8c:13:2a:63:d5:5e:52:
0f:68:2d:92:e1:52:28:ef:9d:c5:c9:12:02:fc:04:cf:08:5e:
db:40:26:88:f9:4d:91:e5:42:a4:c5:08:f9:d2:0c:b4:e7:28:
6d:f0:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:47:21 2025 by rpki-client