Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier: aXbucpUVWP+41Dq61kztKPvrDajLtNFYrqG3VvDIW4c=
Subject key identifier: D8:D9:55:1F:56:A2:BE:C8:2F:DE:A1:20:D1:37:6E:3D:FD:35:39:BD
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number: 07C3
Signing time: Thu 30 Jan 2025 21:06:11 +0000
Manifest this update: Thu 30 Jan 2025 21:06:11 +0000
Manifest next update: Thu 06 Feb 2025 21:06:11 +0000
Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: 9PlLjsoy54Q/ns4D8ft8OnKAI1uiEHMS+lps6wEnuB8=)
2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Validity
Not Before: Jan 30 21:06:11 2025 GMT
Not After : Feb 6 21:06:11 2025 GMT
Subject: CN=679be9c3-7fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:93:fb:99:e4:8e:1a:53:83:94:a2:5e:15:
26:88:98:fc:a0:3a:97:32:6d:1c:d9:55:a1:e0:eb:
14:8d:bf:4d:f4:6a:13:8a:77:81:85:25:30:00:ec:
c8:fc:d1:3f:a4:58:1d:59:44:04:85:2e:04:15:73:
76:0b:8c:63:a4:37:bd:e5:2a:4d:2c:04:ce:c5:31:
23:5b:d1:5c:1f:22:88:23:39:ee:6e:ff:a6:2f:58:
2b:a0:69:96:ca:b1:0c:8f:e8:b8:47:89:a7:45:82:
08:76:c4:21:34:40:47:78:fa:fd:12:57:29:d9:b9:
8c:ab:41:bd:b0:5f:16:97:a4:fc:f7:2f:ec:2c:1d:
d8:2b:e7:91:b0:13:e4:d4:17:f7:b5:85:f2:9c:fc:
51:26:0b:16:61:52:6e:49:ca:5c:a1:92:c0:08:26:
54:17:2d:01:72:8c:64:24:74:e7:d8:fd:84:2e:a3:
f6:d5:ad:4a:32:3f:26:41:4a:39:a4:a3:a3:6d:38:
1a:05:89:03:15:ed:b7:bc:e3:a8:74:ee:63:ba:be:
35:aa:8e:bb:1b:d6:ba:52:a8:6e:94:85:74:20:eb:
05:e4:44:88:d8:a6:20:fe:d3:a2:c1:31:6d:24:fc:
e7:07:e7:48:d5:bc:1f:ea:84:e7:66:5e:ca:3b:65:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:55:1F:56:A2:BE:C8:2F:DE:A1:20:D1:37:6E:3D:FD:35:39:BD
X509v3 Authority Key Identifier:
keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:04:86:17:0c:c0:a8:41:26:1f:a4:af:47:b9:54:51:cd:
86:9e:3e:bd:70:6a:ea:72:0d:fe:da:2c:31:66:60:06:99:73:
7c:40:59:4c:d0:8f:d1:a2:d3:af:96:8e:81:57:a9:75:e9:01:
35:42:a7:ba:5e:ab:fc:77:be:84:f8:9b:bb:d3:87:6e:63:f2:
37:57:8c:13:0b:dc:1e:a3:fa:6e:01:1e:0d:64:5b:bf:63:db:
a7:ac:96:ed:5c:e8:17:13:09:1c:6c:f0:8d:b8:94:d3:19:29:
e2:7b:a0:8a:32:11:c0:69:dd:50:dd:52:38:b3:ae:68:e0:9d:
06:20:e4:b9:db:e3:6a:de:1c:ef:9e:76:00:a5:bd:2a:41:6b:
90:2f:c3:d6:ce:0c:45:8d:fb:cf:4f:6f:df:f1:ec:39:44:57:
ce:f8:9a:bf:80:14:63:ca:4d:fc:19:46:4d:47:88:95:c4:93:
0f:b6:29:0b:7c:b2:47:93:fd:c5:16:3a:13:12:64:f4:e9:60:
c7:2c:a6:6f:83:46:9f:45:38:50:8d:1a:66:2c:02:58:57:50:
e8:13:2d:a9:5a:b3:db:bb:85:7c:68:bd:e1:50:a8:7d:fd:c6:
2f:cd:11:c8:c5:59:cd:e4:2c:0f:cd:de:53:17:d7:16:99:b3:
cd:80:0c:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE
MjRCRDI5OUEwHhcNMjUwMTMwMjEwNjExWhcNMjUwMjA2MjEwNjExWjAYMRYwFAYD
VQQDEw02NzliZTljMy03ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MqT+5nkjhpTg5SiXhUmiJj8oDqXMm0c2VWh4OsUjb9N9GoTineBhSUwAOzI
/NE/pFgdWUQEhS4EFXN2C4xjpDe95SpNLATOxTEjW9FcHyKIIznubv+mL1groGmW
yrEMj+i4R4mnRYIIdsQhNEBHePr9Elcp2bmMq0G9sF8Wl6T89y/sLB3YK+eRsBPk
1Bf3tYXynPxRJgsWYVJuScpcoZLACCZUFy0BcoxkJHTn2P2ELqP21a1KMj8mQUo5
pKOjbTgaBYkDFe23vOOodO5jur41qo67G9a6UqhulIV0IOsF5ESI2KYg/tOiwTFt
JPznB+dI1bwf6oTnZl7KO2U5uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjZVR9W
or7IL96hINE3bj39NTm9MB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0
NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz
ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCguASGFwzAqEEmH6SvR7lUUc2Gnj69cGrqcg3+2iwxZmAGmXN8QFlM
0I/RotOvlo6BV6l16QE1Qqe6Xqv8d76E+Ju704duY/I3V4wTC9weo/puAR4NZFu/
Y9unrJbtXOgXEwkcbPCNuJTTGSnie6CKMhHAad1Q3VI4s65o4J0GIOS52+Nq3hzv
nnYApb0qQWuQL8PWzgxFjfvPT2/f8ew5RFfO+Jq/gBRjyk38GUZNR4iVxJMPtikL
fLJHk/3FFjoTEmT06WDHLKZvg0afRThQjRpmLAJYV1DoEy2pWrPbu4V8aL3hUKh9
/cYvzRHIxVnN5CwPzd5TF9cWmbPNgAwM
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:22 2025 by rpki-client