Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier: kJqzX1p0XyafZd81iy6h+1IBpNKPb7gIpy6J1Z2+dvA=
Subject key identifier: 67:B4:31:BD:1C:28:DF:84:DD:A6:0C:04:B2:7A:CF:00:1B:58:51:5E
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial: 0375
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number: 0370
Signing time: Fri 31 Jan 2025 00:57:08 +0000
Manifest this update: Fri 31 Jan 2025 00:57:07 +0000
Manifest next update: Fri 07 Feb 2025 00:57:07 +0000
Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: VyffqyCOCaENj053S0NdDDPK6gVKM0zBjq5Qj8bUM+M=)
2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: lfHIywQz4YgqCkW/d8PSzpBeHa1aTAqSamGmUbb/c3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Validity
Not Before: Jan 31 00:57:07 2025 GMT
Not After : Feb 7 00:57:07 2025 GMT
Subject: CN=679c1fe4-b89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:b8:40:8f:be:3f:68:cd:52:12:90:6a:09:
f1:00:d4:20:15:60:df:d0:8e:41:68:39:f2:10:ee:
91:dd:75:f8:78:45:49:e6:3b:d6:31:fd:b6:ba:7e:
07:24:2c:12:12:29:08:d3:c4:16:93:d0:ef:d9:a2:
b8:f5:1a:8b:f1:ba:8c:74:2c:58:98:c4:cf:88:04:
16:1d:7b:43:bf:ad:48:a7:b0:74:16:b0:60:66:81:
5a:51:c4:34:ca:84:d2:dd:53:63:65:b4:f4:b9:e9:
f8:84:9e:9a:e2:5c:41:87:46:56:4e:3e:e9:16:f0:
ab:9b:e0:36:70:dc:28:59:02:e0:3e:4d:7c:38:fd:
df:28:04:10:d2:5b:f5:c9:66:fd:da:c6:6e:2e:42:
bf:ea:20:ef:c6:f4:15:75:25:6d:96:04:bb:08:41:
a7:87:04:59:e1:18:90:08:0b:d2:a8:13:6e:d9:08:
68:bd:d2:ea:af:0c:56:a2:ed:51:c5:08:78:d3:97:
ea:7d:fb:b6:48:1b:aa:9e:49:30:76:99:54:77:32:
f5:bf:95:c2:8e:01:c8:7d:76:c6:77:15:d0:e2:c7:
d4:d0:a3:ae:41:2e:bc:5b:92:e5:9a:e5:97:8c:fd:
0a:8d:bb:0f:d3:0d:4e:8e:ff:e2:e8:5e:95:02:d7:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B4:31:BD:1C:28:DF:84:DD:A6:0C:04:B2:7A:CF:00:1B:58:51:5E
X509v3 Authority Key Identifier:
keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:84:19:72:18:33:31:ce:57:1a:c7:c6:52:cb:81:17:5f:40:
11:d5:e4:ad:f3:48:23:00:b9:bb:fd:77:15:6f:c9:13:20:0e:
a6:90:b2:b4:85:a4:46:e6:ef:1e:bf:04:28:ea:45:b0:66:03:
3a:6d:b2:a8:ed:0b:67:82:e5:6a:5b:b0:96:34:8d:93:73:89:
d2:ef:14:34:9d:34:ba:c1:9f:13:54:ee:21:14:bc:fb:62:d3:
8f:55:41:0a:c1:6c:00:ff:9f:9f:e6:a7:53:3b:01:c3:c3:bb:
e4:21:08:df:e3:0b:ef:9b:75:a9:5b:c5:0d:21:7b:ca:0f:20:
17:70:21:e0:ad:46:50:1f:6f:cb:d7:9e:b2:2a:5e:d8:20:a4:
c3:4e:5c:10:07:af:16:99:b5:4d:4e:7b:a2:19:a1:ba:f4:5b:
79:75:0b:f0:3d:39:f6:47:c7:62:0d:1d:46:fd:fa:07:fc:7f:
a3:1b:02:d2:af:2f:eb:60:7e:2d:38:68:4d:6f:9f:04:72:b0:
f4:8e:87:d6:b7:e3:74:94:cb:97:bb:aa:14:f0:36:f1:c0:65:
33:22:6b:ff:d8:da:c3:a9:c9:a1:63:32:ef:d0:be:22:04:da:
8d:a9:50:43:2c:e4:32:11:c6:e5:3e:39:57:ea:ee:62:33:31:
3d:06:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:45 2025 by rpki-client