Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: 0BuFXFyPREMC8Te/67wAc9brhQKSXOWKj4K2YK/l/6k=
Subject key identifier: F9:14:43:27:5A:51:AE:32:95:3A:32:81:33:96:27:20:D2:14:EC:9A
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 06:48:36 +0000
Manifest this update: Fri 31 Jan 2025 06:48:35 +0000
Manifest next update: Fri 07 Feb 2025 06:48:35 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: XwTZZzDP0z6ZHFpAHPFKrNb8o9p3ZkHM1jzh09+j260=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: etgfr2FMXbKAdL4ONMDhHdEqlj7eq8Os+Vy9Aq6JfHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Jan 31 06:48:35 2025 GMT
Not After : Feb 7 06:48:35 2025 GMT
Subject: CN=679c7244-048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:94:ae:cd:32:fb:79:bf:eb:a5:7b:fd:41:
bd:3c:9a:be:68:10:52:d3:75:8f:d3:40:ae:4b:fb:
ad:a4:9b:9c:41:19:9f:f7:c2:8a:c2:b4:8c:e4:71:
60:bd:2a:87:f7:ba:d5:6b:c4:2b:72:c7:d0:bf:a4:
ed:9d:8c:99:6e:b0:84:b5:5b:f8:99:aa:75:5b:1d:
9e:f8:5f:0f:53:5f:bb:13:9c:aa:57:c5:13:77:97:
b0:18:63:86:bb:d5:15:e1:af:53:15:af:df:77:64:
4d:c8:82:0d:2f:a3:70:8e:ce:00:53:5a:50:f6:26:
2f:45:8c:e7:3a:02:16:78:45:da:2a:06:56:5e:05:
d6:2f:8c:a1:14:23:a1:7e:e2:0d:7d:88:72:46:7f:
85:8d:61:27:2f:3b:99:76:5e:d2:5c:5b:67:78:69:
1b:6f:61:92:ec:a4:9a:c5:c9:a0:00:08:2d:32:e4:
3f:66:ba:d6:77:f9:3e:a0:f7:5f:14:91:68:59:51:
41:ac:5f:df:fc:89:79:f8:50:2d:68:f6:7d:e2:6d:
f7:ad:71:88:5c:e8:90:70:59:ed:05:3b:f8:cf:70:
30:f1:0f:9c:37:7b:f8:8f:e4:16:ac:b1:06:22:55:
1f:97:a8:71:53:ec:c6:63:ea:97:71:af:e8:cc:26:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:43:27:5A:51:AE:32:95:3A:32:81:33:96:27:20:D2:14:EC:9A
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:25:15:38:22:ad:ff:4c:e4:f8:0c:de:9d:3b:0b:5e:cb:3d:
46:5f:eb:ad:6e:c0:dc:7c:c1:25:1f:38:50:9f:08:9d:0a:b9:
c2:be:01:b1:01:c3:dd:43:68:88:c3:ee:12:78:5e:dd:81:c7:
3a:db:36:f6:32:93:af:79:db:8e:e8:4c:6b:91:73:3d:fd:17:
0d:2c:91:19:5a:56:af:79:98:6c:0b:0b:6e:43:4c:93:87:81:
7b:7d:c9:ec:e8:6c:57:46:f6:df:f9:19:e7:55:69:a1:be:c1:
0c:be:2f:46:a1:d1:f5:eb:5d:99:0e:0e:10:07:2f:0a:5c:bd:
b8:d5:c3:de:a1:a8:cd:2e:b0:b5:0e:ef:a7:91:39:77:53:10:
90:3f:bd:e7:f2:18:ce:fe:f9:db:6f:9b:ec:34:68:25:35:05:
1c:d6:1e:77:11:52:a6:ba:b1:48:ba:6e:22:10:f3:67:b1:97:
bf:d2:4b:d4:e7:7b:53:82:88:d4:8e:eb:17:51:9e:b5:de:54:
ea:ed:45:f7:89:a3:1b:0a:85:53:67:c3:7a:9c:57:9d:02:33:
08:8d:e3:b1:b6:37:c8:48:fb:32:aa:a2:34:a7:5b:b6:af:c2:
98:9f:87:81:1d:26:f3:60:0c:61:4e:e7:fe:90:01:18:f8:ec:
71:0a:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:58:26 2025 by rpki-client