Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json)
Hash identifier: N9Ajfwp/vaQc1Ty4B0TVcJiXkpviptKsz+ApDv1Qf58=
Subject key identifier: FD:FE:6B:62:98:9A:15:A7:67:44:9A:A3:EC:A8:0A:C8:74:0B:62:3F
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
Manifest number: 075E
Signing time: Thu 30 Jan 2025 21:26:33 +0000
Manifest this update: Thu 30 Jan 2025 21:26:33 +0000
Manifest next update: Thu 06 Feb 2025 21:26:33 +0000
Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: pfWnpRzMykZTkQIXDaGSXVix+/kiXtwBFKUQOmGgK5g=)
2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Validity
Not Before: Jan 30 21:26:33 2025 GMT
Not After : Feb 6 21:26:33 2025 GMT
Subject: CN=679bee89-6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:18:b7:01:5f:48:2a:de:73:2e:eb:83:50:
45:44:4f:06:c7:08:fa:53:08:81:40:bf:a6:e0:85:
4a:42:87:67:8c:d8:f7:ed:52:8f:d8:bf:7c:83:5f:
39:ed:57:0e:4d:f9:b7:35:d0:c9:4d:de:65:c9:82:
c7:12:1d:85:cb:ce:42:6d:97:33:31:f1:65:e2:54:
24:21:5c:84:d9:ca:7c:be:19:33:bd:d9:3d:c9:af:
ea:c1:49:4e:6f:97:60:8d:51:a6:b9:6b:1d:18:4e:
38:3e:92:ac:4f:f6:b6:8c:a4:8c:39:46:30:a9:de:
82:74:92:3a:6c:04:84:72:84:17:59:b1:d2:1b:b4:
93:f0:9e:7b:f6:c8:d2:96:78:8a:25:d3:8c:cc:fc:
23:72:3b:ad:3c:d4:78:25:50:26:ff:c0:4d:ef:d7:
97:f6:e4:70:d8:6a:88:cd:95:9b:0c:de:cc:15:74:
6f:42:3d:f6:d1:bf:44:40:70:8f:3e:d4:70:28:4a:
7e:f2:74:6b:98:4c:f4:2c:30:bc:bc:fa:69:d7:59:
e4:41:29:19:63:5b:fc:4e:23:f2:5f:3c:13:25:6d:
3d:fb:b9:b0:95:2b:ea:69:c8:de:86:25:39:46:a5:
77:df:cd:b6:77:41:a4:bf:11:db:47:d2:94:c1:8b:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:6B:62:98:9A:15:A7:67:44:9A:A3:EC:A8:0A:C8:74:0B:62:3F
X509v3 Authority Key Identifier:
keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:a4:e2:cb:79:e2:9b:f2:70:87:0a:c2:9d:8a:51:ef:63:
33:d7:51:54:c8:4b:a0:8d:57:55:ab:4a:a2:46:a9:2e:ec:95:
79:0c:8e:ef:ff:a4:af:71:e0:9d:69:09:a7:4e:b5:dc:9a:d6:
79:01:75:43:32:47:eb:28:9d:c3:87:9f:38:af:3b:4b:72:6b:
e8:74:1c:8a:21:28:80:20:b6:4e:fd:f1:e0:7c:77:b6:f1:64:
5b:d2:3b:49:a1:b0:38:4a:06:5f:3c:8c:3e:1d:f8:af:11:3c:
81:42:2e:7c:cf:91:01:0b:fb:25:70:a6:40:87:06:bf:f3:97:
72:ba:f6:1c:5b:97:e6:f9:89:63:64:b4:68:24:e0:47:3b:28:
92:9f:1f:ba:79:52:47:0e:4f:8b:a1:82:07:e3:d3:a3:34:4d:
7e:34:bb:ed:47:4e:0a:28:54:0f:53:36:9c:0a:f6:b0:c6:9a:
61:d7:21:43:65:07:ca:e9:03:a1:c1:d2:1d:5d:3b:0e:75:d6:
05:78:04:a7:f9:0c:14:36:e7:43:11:90:0b:26:9c:be:53:fe:
aa:88:4f:c4:a3:c4:11:78:52:d6:14:06:af:06:c9:32:93:9b:
60:ff:d7:72:fb:5c:8f:fc:07:da:29:c1:33:36:e7:cd:0a:ad:
7e:7d:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:19 2025 by rpki-client