Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier: U3MICUr/MsR2j3d/5/hhEpBvmOdTgqDprew9fI1eUpU=
Subject key identifier: 0B:22:81:5C:26:14:4B:8C:FA:EB:A2:F4:08:DE:20:0B:6B:34:77:A9
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number: 72
Signing time: Fri 31 Jan 2025 05:50:59 +0000
Manifest this update: Fri 31 Jan 2025 05:50:59 +0000
Manifest next update: Fri 07 Feb 2025 05:50:59 +0000
Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: 6DQ0nXDfgPoYc8JpWhj7/vlgUhZek4PyGsPlXgLtaKQ=)
2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Validity
Not Before: Jan 31 05:50:59 2025 GMT
Not After : Feb 7 05:50:59 2025 GMT
Subject: CN=679c64c3-a2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:6c:55:ba:66:31:64:6f:77:e2:55:d0:22:
59:dc:34:f3:f8:21:38:69:bf:92:ef:33:7f:7a:5e:
aa:c2:8c:44:4f:46:0e:6b:ed:d3:99:ec:b9:b1:22:
2b:f6:94:dd:0b:4c:7f:5c:a9:4d:0d:63:26:68:be:
7d:0d:3f:5d:97:6e:47:52:54:3d:26:96:9b:f6:75:
a2:e8:b5:27:38:a0:a3:e5:c9:77:0d:8f:53:19:6b:
fa:56:d6:64:6a:77:a2:4b:c5:58:c6:17:09:5e:0c:
2d:01:b4:5b:e6:14:47:4b:a8:75:41:fa:fa:9a:8c:
fd:ff:b9:cb:a3:ef:37:20:96:5a:b6:86:a4:b2:30:
9d:5b:6a:05:5e:58:9a:4f:7a:31:8f:f9:43:7f:6a:
7c:58:3e:59:a3:74:ab:4c:6b:23:ee:23:b6:9c:82:
85:58:c0:a8:fd:72:4d:6f:9b:14:68:58:46:76:dd:
59:6f:5f:68:c8:17:4e:cd:6e:b9:7a:e7:69:aa:05:
53:d7:d0:07:7f:b0:25:76:ce:00:e6:08:df:16:6a:
64:c6:ee:9e:da:f1:6d:6c:ce:45:f1:59:0e:a2:99:
82:40:e1:d9:11:58:f9:75:80:08:63:f7:7b:4d:43:
58:2d:94:27:c8:14:de:23:8d:34:94:46:9c:b4:30:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:81:5C:26:14:4B:8C:FA:EB:A2:F4:08:DE:20:0B:6B:34:77:A9
X509v3 Authority Key Identifier:
keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:84:49:fb:2c:61:d8:c2:b5:40:6e:f8:69:0a:f1:27:54:e5:
ab:16:a3:fd:20:d3:5f:3e:5f:42:f3:15:83:ed:74:ef:b5:c5:
66:9f:d4:23:43:c6:5f:73:d7:7b:e9:78:99:19:1a:0e:fc:a9:
ee:84:90:3d:5f:53:e8:9c:d1:52:7b:f6:1d:71:be:0e:db:5a:
7e:66:0b:21:7e:97:41:c1:6d:0a:b1:26:c5:1f:13:22:66:92:
04:0a:ef:43:10:11:34:e4:e7:67:d8:c7:c9:87:80:98:cb:45:
53:99:6b:1d:43:a1:2b:07:e7:d1:32:0d:ea:b9:0b:d9:e7:2e:
d2:7f:04:90:2a:78:b2:60:f1:87:2e:b4:ec:6b:3d:3a:2d:51:
10:50:c3:f9:60:af:a6:7c:eb:7b:e1:a7:f5:56:99:23:9b:4a:
ec:f4:b9:ef:4e:53:28:3b:cd:d9:06:8a:ae:02:45:28:3b:8f:
22:c5:cf:85:fd:1f:57:94:33:dd:23:78:5e:cd:41:f2:71:94:
86:49:0f:ae:e2:b5:57:70:3b:38:23:71:69:25:8e:aa:7f:bb:
b5:d4:11:dd:8a:ab:3c:2b:78:29:7b:3d:f3:73:31:2a:3b:d9:
fa:e2:26:7e:34:c9:b4:27:d2:a2:2b:7e:7f:0d:7a:18:97:c8:
4c:84:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:48 2025 by rpki-client