Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier: U6U8VHmNigRYC0d72DKQr9NtdQ5/ydakCENgj2aJadU=
Subject key identifier: 0D:8B:15:58:BE:9D:01:E1:2B:16:B0:FA:EA:7F:C9:D8:DC:DF:4D:DE
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 0500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number: 04F4
Signing time: Thu 30 Jan 2025 23:47:19 +0000
Manifest this update: Thu 30 Jan 2025 23:47:19 +0000
Manifest next update: Thu 06 Feb 2025 23:47:19 +0000
Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: rNpyoDeHhVZ6xYlTJnI3sXmSjnwIrEem0g1xN4oHeZI=)
2: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: qkH2tgtItXAMLVzBegmHlsCSZQIwAcDk4bjO6eyiVsA=)
3: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: tCsPFlQbHjPtdKo2By1Yv1A/CwgH+Wy/z7j32R4zxhU=)
4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: Wg0ycCOoKuAHP5nQShBntZqgFSfdv38dgCrRwUlSjDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: Jan 30 23:47:19 2025 GMT
Not After : Feb 6 23:47:19 2025 GMT
Subject: CN=679c0f87-0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:1a:78:20:22:b8:bb:de:5b:f5:99:36:21:
f1:e7:9e:3c:c7:4f:f9:9d:53:07:4a:ab:4d:42:d5:
8a:68:83:3d:10:f5:94:8d:e7:b1:77:12:28:40:43:
e7:60:2e:c8:eb:b1:41:87:69:b1:98:70:75:a5:87:
a8:19:f3:27:a7:6f:2e:41:a9:fd:a6:ea:33:69:9c:
37:1e:db:03:10:1d:44:6b:8f:c1:21:10:0f:94:35:
cc:73:ac:8e:df:de:25:77:fb:30:51:5e:4e:02:53:
2c:be:1f:59:41:6e:36:a6:e6:3a:d4:1a:c9:32:47:
6f:03:c1:23:6c:67:34:48:d9:31:41:74:d8:33:ca:
3e:90:e0:89:6b:b0:98:fd:81:ff:9e:d5:e0:f7:8f:
62:69:ea:82:4c:63:5f:03:eb:c3:60:2c:db:c5:61:
ab:b9:07:0d:ca:49:6a:dc:20:fb:35:60:09:d4:38:
96:5b:22:f7:c7:6d:4d:77:cf:1c:cc:f4:6c:25:5a:
29:3d:14:9f:97:45:af:83:7d:51:1f:0e:0c:a5:e0:
bc:cd:72:ef:43:f8:8a:99:c7:43:37:c2:f5:e4:07:
73:8e:e1:73:6e:29:02:f5:fd:ac:ac:21:0a:7a:a7:
dc:09:c5:cb:b7:1b:bd:c7:4e:64:bd:7f:68:65:2c:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:15:58:BE:9D:01:E1:2B:16:B0:FA:EA:7F:C9:D8:DC:DF:4D:DE
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:41:7f:0e:e4:52:e3:ec:63:3e:78:4d:81:23:25:a6:2f:55:
f4:78:1b:09:8c:b6:8d:32:6e:cd:eb:88:c0:fe:29:ef:c5:c1:
40:00:35:79:fa:19:4a:85:b7:5c:50:52:e3:68:4c:f8:f9:d9:
10:31:27:0a:98:3e:d4:88:0f:a8:18:51:08:9b:2c:35:0a:c9:
f2:f0:4a:06:93:0c:f2:97:f2:29:05:fc:02:8b:ce:98:07:41:
7d:84:3b:d3:cf:42:6e:94:c5:ff:e7:e5:25:f9:7b:6a:f3:17:
7e:0d:d5:ef:81:2a:c3:a4:f6:e1:01:46:46:e8:04:12:4e:60:
58:f8:f8:30:e9:c4:c6:29:d5:2d:b1:7c:ac:fb:ce:12:fb:e4:
0b:26:23:59:fc:9c:af:df:a6:0f:bf:1c:d0:b7:68:13:18:dd:
c6:fb:41:2b:70:5c:47:84:67:d9:09:90:ef:5f:8c:25:4b:e5:
d5:8f:29:34:4d:a5:ea:25:46:ae:13:cb:b8:98:24:56:d0:9a:
97:bb:0e:c6:72:19:80:a6:f6:cb:52:4f:1c:b0:8d:0c:59:bd:
20:08:30:76:b8:be:38:b5:57:45:69:6c:8a:12:12:2e:8b:32:
61:80:20:43:a7:e3:0b:ea:6e:b6:86:55:1d:5c:74:75:69:67:
e1:23:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:01 2025 by rpki-client