Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier: uKa9bX9+6h8XRItpsG4M8w8lz/ZIbh6qI57VuZTYdCc=
Subject key identifier: BF:9F:DB:16:1D:C5:37:AE:2A:20:DA:06:2F:B4:BF:14:53:98:5F:55
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number: 0198
Signing time: Fri 31 Jan 2025 02:41:21 +0000
Manifest this update: Fri 31 Jan 2025 02:41:21 +0000
Manifest next update: Fri 07 Feb 2025 02:41:21 +0000
Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: QFmxB3zl3xqYhufYedOgaU8ra0AchBksfhvTLY2wqDE=)
2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Validity
Not Before: Jan 31 02:41:21 2025 GMT
Not After : Feb 7 02:41:21 2025 GMT
Subject: CN=679c3851-a710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:a3:22:53:1a:e0:91:38:5b:96:65:9a:08:
f7:f2:40:de:68:1f:94:26:60:e1:01:66:86:8c:e4:
78:69:10:b2:77:ba:50:cf:2a:23:2c:64:fc:89:7f:
cd:e5:e0:01:bc:b5:36:44:d6:d6:2f:ad:66:e7:37:
15:2c:1f:fa:22:9e:e7:ac:c1:89:a1:25:02:e2:e5:
22:3b:77:7e:cc:97:c7:eb:f7:83:0a:d0:21:50:0f:
3f:fc:87:3f:9a:52:a5:89:33:dc:9e:25:6d:0a:1b:
89:dd:39:c0:1e:eb:bf:ec:58:b7:0a:53:5d:3c:0a:
94:6e:f3:15:5c:c8:2e:6e:72:ac:ec:5f:41:9e:2c:
bb:1e:e8:a3:61:d7:25:7b:0d:1f:dd:32:41:f6:af:
7c:2c:00:51:08:e2:90:c3:1f:e1:3d:05:9f:a2:89:
47:e7:b5:f7:c4:de:94:a1:58:15:d2:ce:7b:98:da:
7f:7f:11:76:dd:c0:fc:3a:68:a7:30:51:d9:d6:79:
54:43:b5:28:b8:6f:0c:44:97:20:f2:54:8d:a3:0e:
84:ac:b3:f2:43:c8:1b:e2:67:6d:3b:21:84:46:38:
89:e4:af:ce:29:bf:6c:ec:3c:bc:64:75:9e:9b:7c:
5b:58:c4:b6:7f:f3:b4:87:d8:cc:98:14:1d:c8:32:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:DB:16:1D:C5:37:AE:2A:20:DA:06:2F:B4:BF:14:53:98:5F:55
X509v3 Authority Key Identifier:
keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:be:b1:4e:76:87:22:c1:08:9c:14:24:94:2c:a4:32:75:
cd:9c:18:b2:2e:a7:95:d3:a4:3a:ab:3a:06:ad:94:36:7e:b0:
6a:45:f8:52:1a:33:d0:92:8c:67:d8:bf:ef:d7:f5:ad:1a:6d:
65:66:98:6e:b0:73:46:95:ee:b3:1a:39:99:62:70:bc:c3:f6:
25:72:5e:41:45:2b:51:b7:c3:3a:3d:5b:2b:55:21:2c:41:cb:
77:18:5e:62:60:85:96:c7:e9:4e:92:f7:3b:29:88:8e:a0:0d:
64:58:a7:cf:d4:cb:b6:44:4c:ac:0d:84:37:b3:13:c1:91:93:
bf:55:fa:7c:55:32:7f:33:8a:75:97:75:a3:f3:3b:86:c5:30:
18:52:c3:a1:ab:7b:16:b0:80:69:c7:e2:1d:8a:76:13:94:d2:
d0:9c:0e:46:21:24:2a:5f:c8:d0:03:d7:d1:da:c4:24:3c:fa:
a5:0b:d9:68:7b:b7:45:ca:37:87:79:9b:ab:df:bb:f4:f5:4e:
55:9c:3f:76:13:42:fb:92:27:97:4e:7d:e5:a0:9b:4a:a3:fa:
9c:48:ee:39:77:b7:89:ab:08:96:10:8f:f5:61:3b:3f:a8:2c:
83:76:1e:ee:79:77:62:c4:1e:cf:88:1b:eb:4b:d1:59:f4:ee:
47:ae:01:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy
QUQ4NTJBOTcwHhcNMjUwMTMxMDI0MTIxWhcNMjUwMjA3MDI0MTIxWjAYMRYwFAYD
VQQDEw02NzljMzg1MS1hNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlz6jIlMa4JE4W5Zlmgj38kDeaB+UJmDhAWaGjOR4aRCyd7pQzyojLGT8iX/N
5eABvLU2RNbWL61m5zcVLB/6Ip7nrMGJoSUC4uUiO3d+zJfH6/eDCtAhUA8//Ic/
mlKliTPcniVtChuJ3TnAHuu/7Fi3ClNdPAqUbvMVXMgubnKs7F9Bniy7HuijYdcl
ew0f3TJB9q98LABRCOKQwx/hPQWfoolH57X3xN6UoVgV0s57mNp/fxF23cD8Omin
MFHZ1nlUQ7UouG8MRJcg8lSNow6ErLPyQ8gb4mdtOyGERjiJ5K/OKb9s7Dy8ZHWe
m3xbWMS2f/O0h9jMmBQdyDKrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+f2xYd
xTeuKiDaBi+0vxRTmF9VMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG
NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw
SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO176xTnaHIsEInBQklCykMnXNnBiyLqeV06Q6qzoGrZQ2frBqRfhS
GjPQkoxn2L/v1/WtGm1lZphusHNGle6zGjmZYnC8w/Ylcl5BRStRt8M6PVsrVSEs
Qct3GF5iYIWWx+lOkvc7KYiOoA1kWKfP1Mu2REysDYQ3sxPBkZO/Vfp8VTJ/M4p1
l3Wj8zuGxTAYUsOhq3sWsIBpx+IdinYTlNLQnA5GISQqX8jQA9fR2sQkPPqlC9lo
e7dFyjeHeZur37v09U5VnD92E0L7kieXTn3loJtKo/qcSO45d7eJqwiWEI/1YTs/
qCyDdh7ueXdixB7PiBvrS9FZ9O5HrgH2
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:26 2025 by rpki-client