Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File: GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier: 1JX/jpWnWWQPfwAOFWMfSy8T/RXvHkVxJhKo1/2l104=
Subject key identifier: 56:92:42:1C:53:33:7F:6E:C7:6B:A1:2B:0A:9B:02:79:A1:6C:24:16
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial: 0498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number: 0493
Signing time: Fri 31 Jan 2025 00:01:50 +0000
Manifest this update: Fri 31 Jan 2025 00:01:50 +0000
Manifest next update: Fri 07 Feb 2025 00:01:50 +0000
Files and hashes: 1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: pr91ziRcVu0uzMwaFzcpR5R9xwn8yi+Sk2xEuRP/hb0=)
2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Validity
Not Before: Jan 31 00:01:50 2025 GMT
Not After : Feb 7 00:01:50 2025 GMT
Subject: CN=679c12ee-59bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:11:de:dd:22:e7:af:81:6d:a4:b0:4c:98:
78:7b:2f:c7:29:8f:a7:14:e7:76:88:6f:79:0b:26:
e8:99:6a:74:91:37:81:c8:5a:07:7c:54:3e:c6:9a:
19:aa:c6:88:6c:8b:66:e2:75:5b:f1:c4:82:8b:2f:
ee:2a:df:c7:3a:21:3e:05:e6:ab:6a:ce:dd:a5:fe:
17:75:60:08:34:a9:ba:80:01:96:e3:db:b2:39:a0:
4a:bf:1d:67:33:05:79:c2:24:71:29:29:24:4c:cd:
e7:28:d0:59:e2:be:91:e9:08:2a:4a:02:d0:71:d3:
d7:65:1d:5a:0e:46:2c:b0:9b:10:37:84:f6:e6:ac:
e1:ec:7f:71:7a:15:73:16:60:8e:f0:8a:21:a1:fd:
78:f8:09:c0:97:72:9a:42:82:19:df:1e:d4:dc:41:
ea:4e:3e:a6:62:db:06:32:fd:9c:5b:34:b8:24:57:
bc:bd:48:a7:fa:3f:9c:6e:d8:8b:e6:76:25:eb:0c:
5d:d1:e1:03:1e:68:8a:d0:de:b7:2e:ca:bb:66:d5:
cc:45:29:14:ec:49:41:c5:45:db:b3:0c:35:89:f4:
b2:f0:44:0b:03:86:a8:cf:b8:8e:d5:d0:97:8f:8b:
22:02:9d:23:8b:20:1b:45:bd:b8:39:50:b9:c6:ea:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:42:1C:53:33:7F:6E:C7:6B:A1:2B:0A:9B:02:79:A1:6C:24:16
X509v3 Authority Key Identifier:
keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:aa:f4:0a:83:2a:b9:9a:da:7f:15:d9:ca:34:37:ab:0b:73:
ac:e4:12:90:5a:6b:27:af:50:6c:6e:ea:21:2b:04:65:55:27:
63:f5:da:cd:f0:32:5f:db:77:76:0b:de:fb:ee:a5:61:fe:74:
e5:53:e5:87:01:4e:6c:ca:89:3c:e2:70:79:d8:5f:6c:1a:13:
6c:f4:60:dc:76:e4:1a:77:71:4e:47:44:31:ac:bd:3e:86:73:
09:04:a7:1f:84:96:d8:08:01:de:e9:e1:99:af:1e:9a:21:ae:
16:4c:06:f4:ac:f3:e8:c7:c8:15:e2:a0:22:53:ca:cb:2a:bb:
18:d5:af:6b:cb:f0:57:f6:81:fa:01:fa:65:12:32:f9:13:7d:
60:08:7f:7f:27:9d:86:ef:08:ae:87:4a:01:7c:bd:2e:94:0d:
52:a4:45:86:a0:84:71:86:eb:cf:bd:07:4c:c8:a9:e8:79:df:
7d:2b:27:62:c4:18:19:59:06:dc:05:2a:16:f1:e1:72:11:a4:
60:c3:5c:c9:4a:88:91:c0:ec:fc:83:a8:2d:76:d0:d6:3a:fe:
d1:47:f2:19:ae:85:db:6b:f2:23:b3:29:10:22:c5:8f:8c:04:
e8:21:6e:a2:aa:da:dc:33:44:eb:5d:8d:2e:cf:9b:d5:46:ad:
64:84:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:50 2025 by rpki-client