Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier: ag9IQJ5VPU+x1i2F5c+Ld4MBwtzZFEubvxNs0FzM4x8=
Subject key identifier: 3A:91:36:F4:51:F8:9F:AF:3B:EC:A4:AD:66:85:89:25:24:6F:D0:93
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial: 05EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number: 05C7
Signing time: Thu 30 Jan 2025 23:08:07 +0000
Manifest this update: Thu 30 Jan 2025 23:08:06 +0000
Manifest next update: Thu 06 Feb 2025 23:08:06 +0000
Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: tbhZ27WJtURpXFQIL9HpD9aT2Uetp29YZfz60Dari9o=)
2: A6C94076624711EC9B815772C4F9AE02.roa (hash: NA32Il3ooyRG5ZJzSaQY0C1tJ0UNwEBD0xl7vGAZUYs=)
3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: CVu1eE6uo1a4oR5jqcfO88CtMHewZGUSBjKAtdVPCIw=)
4: 899A5138691611EFBED13942C4F9AE02.roa (hash: x1ayzpnW5YFxaRN24Av9ElsmrFSke9qosmrhE25drSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Validity
Not Before: Jan 30 23:08:06 2025 GMT
Not After : Feb 6 23:08:06 2025 GMT
Subject: CN=679c0656-e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:ee:bd:08:1a:58:d3:8c:67:67:e4:e2:c7:
6a:9c:e7:2d:bf:17:58:8c:84:dc:62:f2:9e:52:e7:
dd:c2:d2:7f:1a:d7:6c:f0:31:81:48:9e:58:f6:90:
40:1f:16:92:99:b5:0c:d4:94:57:b1:47:dd:3d:1a:
cf:bb:1e:24:eb:4b:78:86:0a:a8:45:be:21:88:d7:
76:f2:95:23:19:78:57:32:7e:13:be:2c:f0:df:6c:
34:49:30:64:48:29:2b:7f:8c:55:ba:65:98:88:6e:
04:b8:c0:8f:61:b4:f9:c6:6f:1d:ef:96:02:6b:8b:
3e:9a:a4:d7:07:c2:a6:86:74:f3:ca:22:16:83:29:
2c:6d:b3:52:82:50:b9:7c:f2:8d:cb:29:b2:25:2b:
09:6e:1e:b3:f9:37:e9:35:d4:fd:23:c3:b1:eb:1e:
16:7a:c9:2d:28:f7:9f:a0:76:40:d3:14:33:d1:68:
15:ad:a4:b6:60:17:27:9e:02:d2:57:59:f2:a6:e4:
e1:b0:09:8c:62:30:23:5e:33:3f:8f:02:cb:45:3d:
35:b4:25:6f:77:50:30:8b:33:52:d5:9e:7f:30:2b:
f0:33:cc:df:46:98:e1:af:02:31:be:9b:41:75:3c:
58:06:69:13:2c:34:77:ac:db:8c:f0:04:76:72:e1:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:36:F4:51:F8:9F:AF:3B:EC:A4:AD:66:85:89:25:24:6F:D0:93
X509v3 Authority Key Identifier:
keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:ea:52:e7:99:fd:9a:2d:91:55:5f:86:4e:26:5f:8f:f8:
e4:d3:33:03:72:83:8e:4c:31:c6:da:97:06:ec:a2:bc:f0:87:
c4:74:90:ea:d6:57:b1:f7:c5:50:e2:ea:78:67:f7:39:af:3d:
52:16:b8:9d:d1:c1:a4:98:40:f4:7c:4a:19:65:1f:ed:f1:b2:
d3:5f:10:64:ff:b1:2e:92:da:73:07:4c:34:25:8b:e9:ce:fb:
51:74:a8:b4:72:3a:b6:8f:92:24:c1:d1:45:f1:ed:e0:75:02:
11:e8:ad:f6:cf:97:ab:2e:85:de:54:69:48:81:c4:b7:60:a0:
61:b5:9d:a8:ad:b5:99:7b:0c:41:75:0b:b8:7c:9a:52:3c:d9:
df:c0:c4:14:a3:49:e3:da:c4:5c:54:e6:b9:fb:86:7a:37:6a:
69:21:c3:a3:59:f4:cd:e0:c8:dc:03:5c:14:ad:de:46:ac:e8:
15:65:39:71:56:ef:24:03:c9:18:6b:22:96:5b:27:24:9c:f2:
68:4c:67:ce:a7:5b:2b:40:2c:a3:56:72:ac:66:6a:fd:f4:12:
38:98:ad:d8:de:af:a6:76:f2:db:85:f5:6a:f3:91:40:17:7c:
7c:95:48:ea:30:41:87:ab:41:86:a5:1f:9c:ea:9e:7b:18:fa:
97:3a:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:48 2025 by rpki-client