Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier: fEz+dqA+e1+U6J9nbbuYvdqOeelqIqt5lDIsNIliYPU=
Subject key identifier: 06:C9:41:84:F6:BE:68:28:85:B0:F8:1E:89:A6:41:92:6D:18:86:3F
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 1200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number: 11F2
Signing time: Fri 31 Jan 2025 17:09:36 +0000
Manifest this update: Fri 31 Jan 2025 17:09:36 +0000
Manifest next update: Fri 07 Feb 2025 17:09:36 +0000
Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: hkr2yQM+b9fF2c7heMKcqjE2y5DCR9+mERDBb2p3Jd4=)
2: 98281C68C74D11EFBDEB795AC4F9AE02.roa (hash: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=)
3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: X4hHa40ZZCMFGclLrNNhBeu3iaLFdaY3QcG/fAUp5DM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4608 (0x1200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Validity
Not Before: Jan 31 17:09:36 2025 GMT
Not After : Feb 7 17:09:36 2025 GMT
Subject: CN=679d03d0-3df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:45:3c:a1:ed:36:d4:3e:56:a4:65:0e:6b:
ee:ff:f5:6b:9a:2f:65:4f:5c:bc:c9:dd:b5:ce:da:
01:df:11:38:6b:80:75:cd:de:9f:4d:be:4d:85:ff:
18:b7:18:11:49:99:ec:9f:a2:3d:85:8d:08:77:a3:
7c:2a:83:5a:f8:b1:2b:54:5d:fd:70:89:7c:9d:fe:
5b:0f:af:d7:53:97:20:79:0b:9c:35:b5:af:04:3e:
aa:6b:7f:a9:e1:8b:51:78:79:ce:3d:76:51:ce:90:
a1:c2:46:93:e3:1b:bf:74:7a:39:44:4c:d7:ca:94:
b8:8f:85:6d:1d:83:6c:4b:f7:ea:31:c7:8c:12:8b:
e4:59:9f:18:8f:15:a2:28:d6:5d:e9:f1:ea:22:64:
4d:60:3b:2c:0b:fd:99:2a:c4:8a:c0:f4:81:8d:32:
0b:03:62:e1:0c:83:4d:42:0b:ea:ac:38:53:14:22:
42:b2:9c:70:03:37:0c:59:a1:88:10:3b:fd:41:19:
7d:4a:56:ec:1f:23:a2:ca:f9:81:24:48:05:82:24:
f2:ae:99:b7:83:b7:61:c4:18:f0:f7:7a:36:78:7b:
a4:db:63:24:38:04:31:25:94:14:b0:d8:d1:18:ce:
74:ce:2e:c6:96:cb:57:09:83:0b:91:31:2f:ea:d4:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:41:84:F6:BE:68:28:85:B0:F8:1E:89:A6:41:92:6D:18:86:3F
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:18:e5:3b:2f:da:fb:51:59:f3:f8:de:0e:2c:5a:a0:d7:
f2:f4:11:72:fa:51:38:81:0d:8d:98:33:1f:5c:7a:be:bb:8c:
62:21:be:c4:4b:09:bc:b9:3e:55:c4:93:2f:ef:b9:29:ef:58:
e3:d7:85:56:95:96:04:fe:8b:7b:dc:2a:30:2a:37:3e:a8:95:
6a:b7:c7:e6:8c:c3:70:4d:14:c9:13:45:c0:08:b9:4a:cf:87:
9d:11:6b:8f:c4:ef:fa:e6:09:10:e2:c2:e0:e1:ba:3a:18:9b:
10:f5:05:fb:f7:60:c4:e7:1f:e9:57:5b:f7:aa:d7:8b:9f:de:
68:06:88:b2:77:c7:1b:5d:44:e3:68:da:7b:89:4b:c8:71:28:
cd:7b:83:cf:a8:83:c9:15:30:e9:68:14:4f:85:5f:e1:44:13:
4c:1a:5d:43:a4:82:0d:73:17:38:ae:05:6e:96:0a:23:f0:6f:
fe:09:3b:9e:3c:a3:73:6f:75:a2:43:3c:0d:75:85:7b:3b:bc:
38:e7:06:eb:23:a9:03:06:83:7d:d4:60:ff:24:26:32:c4:97:
a8:e3:f9:71:40:5b:76:8b:d4:da:82:7b:96:99:10:55:cb:de:
87:7c:7b:bc:aa:ae:62:ac:9d:dd:66:18:12:fa:85:6a:b0:c2:
ad:c4:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:14 2025 by rpki-client