Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: tecqzc9ji9fnCoBQ1zzaGozqsCVCW9zoKmu9fbs03XI=
Subject key identifier: A1:24:69:E1:FF:1C:82:77:36:43:59:8A:F3:16:47:BD:B4:B1:B2:7E
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 04:07:20 +0000
Manifest this update: Fri 31 Jan 2025 04:07:20 +0000
Manifest next update: Fri 07 Feb 2025 04:07:19 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: qaec4+jjVA1GX5tLfnulq3rLCRz7M0AR52FeQmeuh7Q=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Validity
Not Before: Jan 31 04:07:20 2025 GMT
Not After : Feb 7 04:07:19 2025 GMT
Subject: CN=679c4c78-240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:b2:47:08:c2:d6:b2:25:6e:2d:41:c1:29:
bf:ba:03:6e:a7:c2:9f:4d:bd:ef:72:7e:f6:f1:f6:
0e:2e:aa:12:c9:8a:6d:ec:b4:f2:93:5f:06:7e:7e:
62:2f:fa:f1:0f:30:29:a7:06:e0:b9:1f:d3:78:18:
b8:01:73:3b:2c:59:e7:3b:eb:9f:44:44:74:65:a0:
11:d5:93:78:a3:eb:23:22:f8:38:99:28:44:21:6b:
c6:a1:28:c8:6e:f4:2b:6e:c6:a2:b7:7b:49:76:b4:
cc:4b:29:8e:88:6c:68:e3:3f:46:5d:8d:ce:93:c8:
74:22:7c:3e:2a:bf:f5:0a:45:e6:a7:2e:c2:a9:82:
1c:33:59:cb:cf:a7:64:f9:1d:5d:6f:a9:10:a7:54:
00:b7:e8:ca:87:e1:55:08:24:e4:43:b4:1a:f0:bc:
70:ec:d5:80:2d:b3:2b:a3:2c:49:b5:bf:22:3f:5c:
44:31:fa:a0:18:4e:e0:ee:4e:c8:72:37:fe:d7:30:
b0:e7:5e:5f:43:c5:b6:38:12:15:01:79:e5:c7:46:
91:59:4e:7a:c3:f5:52:26:eb:87:dd:fb:bd:5b:95:
43:84:58:50:d6:0f:f8:5c:f8:8e:90:7f:91:db:6b:
1f:5c:11:c8:30:96:b9:ea:20:fd:74:21:7d:f0:88:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:69:E1:FF:1C:82:77:36:43:59:8A:F3:16:47:BD:B4:B1:B2:7E
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:54:f7:18:64:89:aa:36:e5:ab:9a:b8:68:f8:09:31:95:
68:69:40:0a:cb:79:29:9d:08:f5:e2:5a:4e:0d:a1:31:cd:c9:
7e:4b:35:6f:b7:b6:cc:9e:09:11:fa:9f:16:87:74:5e:79:ad:
bf:ba:e9:76:08:fb:70:16:44:f2:10:2c:67:a6:f5:70:6a:b0:
3c:14:75:6e:05:93:ab:6f:9f:c2:64:ee:bd:35:14:c3:e3:c7:
bd:c1:54:05:22:06:a5:7c:5d:5e:b7:1b:42:43:84:49:d2:de:
19:ca:c9:87:95:fa:6b:e3:f8:2c:88:2f:ea:31:74:65:47:42:
3c:88:8d:99:f7:dc:8d:81:5d:ef:0f:bd:a6:15:f8:2b:af:e0:
47:d1:fa:9a:d4:d1:dd:07:78:14:4c:23:37:74:ee:2d:f9:3c:
b6:b5:fa:30:ef:0d:3e:2d:d2:ab:be:97:51:ec:2e:79:d2:e3:
82:0a:b0:26:71:02:53:9b:77:5d:1d:8e:de:db:f0:ca:1b:2b:
3e:ff:ca:fb:86:ea:43:1b:bc:12:fc:1f:a6:a1:39:48:67:38:
c6:02:1a:10:31:d3:7f:3d:22:ec:aa:cd:0c:e8:a5:d4:3d:d2:
6c:85:9a:3e:80:22:dd:8a:e3:d2:2c:8e:54:62:0a:69:d6:2d:
8b:68:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:09 2025 by rpki-client