Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: uO6f+BcpD3ljBZCS8aTnDWy7uwylk8KnCKc9YkTe7xU=
Subject key identifier: 0F:8F:9B:51:C3:4D:83:F3:B3:B7:D3:9C:38:D6:F4:A5:63:1B:11:D6
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0146
Signing time: Fri 31 Jan 2025 03:33:43 +0000
Manifest this update: Fri 31 Jan 2025 03:33:42 +0000
Manifest next update: Fri 07 Feb 2025 03:33:42 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: NxPb56BWEi3Ux9KYs8F0NsRwEZcPcA2M5yUPJLSWnwI=)
2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: F7gDTN0o2wOD506HIpMLfgl8UeSu5eT6/M2YdzZQ6qI=)
3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Jan 31 03:33:42 2025 GMT
Not After : Feb 7 03:33:42 2025 GMT
Subject: CN=679c4496-1a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:67:2b:6c:4e:97:8d:d4:cb:52:54:fc:7e:
4a:a8:a6:5b:f9:43:ce:44:c5:b3:43:f5:8b:2a:2d:
1d:ab:4e:86:e4:0f:4f:47:c9:04:62:b2:c6:87:fa:
58:8d:a4:38:b7:66:a2:39:71:bb:bc:a0:93:89:83:
ac:d9:84:5a:8f:9d:eb:db:27:b9:27:d7:a5:6f:a6:
7c:95:e6:01:18:1a:38:39:c7:ca:4f:d6:73:cb:d7:
2e:11:63:3e:31:fe:fd:bf:4d:05:fd:40:34:ad:19:
d2:ab:f2:6b:f0:d5:5d:13:2e:db:dd:d8:d2:1e:69:
6a:81:1f:a5:ee:3d:6a:41:6b:b6:54:be:a6:a7:22:
f9:be:b7:fd:13:a2:68:82:e1:5e:0d:e9:80:4e:52:
fd:c1:25:46:8d:9e:67:3c:9b:f3:e0:2e:be:bd:2a:
f1:4b:e9:ca:ff:50:cc:78:00:19:4f:2d:b4:f4:b3:
f0:a4:19:52:ed:ce:6a:33:33:18:96:68:6a:a5:22:
be:bf:d7:98:7c:c1:14:69:79:15:a0:b6:86:68:56:
dc:f6:77:3f:66:86:4e:4e:2b:1c:e9:ef:19:e9:f1:
47:34:d9:f3:e4:c4:90:65:a7:58:77:39:db:94:f3:
ec:8d:48:8b:3e:87:e6:2b:c0:ff:5a:3e:ec:5a:d5:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:9B:51:C3:4D:83:F3:B3:B7:D3:9C:38:D6:F4:A5:63:1B:11:D6
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:b6:ce:dd:6a:75:90:56:a1:75:7a:5a:3d:7a:f4:8b:8a:
8d:49:ac:a4:db:70:9a:e0:ee:da:f9:6a:fb:b9:a2:67:c4:7d:
65:81:56:5f:c1:b3:2b:a1:80:bc:36:87:d7:0b:c2:93:3a:46:
f7:b0:12:32:6a:9c:8c:40:f7:f8:14:32:22:2c:ff:db:46:74:
3c:6d:4b:85:ba:c2:19:b9:d9:d4:89:a1:35:47:d9:16:93:ab:
06:b2:4a:f1:ab:25:21:6d:ae:67:86:03:ec:69:fd:64:e4:c0:
c9:69:56:57:7d:4a:16:78:ec:6d:c5:c0:5f:15:5a:cf:9e:03:
e0:07:6b:90:93:d8:73:5f:5c:bd:55:9e:36:95:b5:32:b7:5b:
32:2d:af:fe:79:79:93:b9:ed:6e:a5:1c:65:2c:de:cf:a8:68:
42:54:af:82:a7:d1:e8:c6:60:d3:3f:fb:7d:1b:6c:25:cf:05:
bf:cd:89:8a:aa:f6:90:41:0c:27:30:07:22:1c:17:0a:5d:45:
76:d9:1e:ba:d6:02:eb:07:eb:3f:15:d6:a6:b5:11:87:31:55:
b4:f5:b5:d1:0e:0c:88:50:82:f4:2a:22:89:99:78:2e:6e:13:
a1:50:38:05:45:08:5a:a6:35:21:b0:cb:88:0a:74:e0:93:4c:
39:31:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:40 2025 by rpki-client