Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: YMiefj12bwEFm+v33FPjK1qEMbFygCKfAX6yyH7SfyA=
Subject key identifier: 52:50:36:0D:23:56:A6:DB:39:E1:E3:BD:E7:1A:6B:16:1D:62:53:F1
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0AEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0AE1
Signing time: Thu 30 Jan 2025 19:24:24 +0000
Manifest this update: Thu 30 Jan 2025 19:24:23 +0000
Manifest next update: Thu 06 Feb 2025 19:24:23 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: vDEUJeYpyGYlbJJ4rXLfUFBpEpCjUu06uoEK7YwnFck=)
2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: oiK5YLleabN+NeoxXizXAp1S2T+O/v09kEtABrFayP0=)
3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: YJ76HhaPfBCtCqTNn8tqhJhNOJ+Bfaxx/ZJ3mQYsBwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Jan 30 19:24:23 2025 GMT
Not After : Feb 6 19:24:23 2025 GMT
Subject: CN=679bd1e7-f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:3f:2b:c8:f4:c8:55:9e:01:fc:d4:4a:4c:
84:3d:8c:49:8f:b7:54:26:74:ba:4a:5a:32:39:15:
ca:b1:5d:6d:ca:df:fe:04:9b:f0:d7:a3:c7:40:af:
ad:a1:35:43:74:5f:33:1d:2b:e9:d8:dd:40:1d:f3:
98:e1:a1:94:22:c0:28:26:0b:f3:fe:9b:2b:42:d7:
f7:e6:d0:f1:70:4c:2e:33:6e:92:46:4a:8b:8b:7d:
92:74:b7:af:94:c3:2c:46:3b:b7:23:f7:c2:f7:d3:
64:c4:77:2b:31:47:a8:db:54:12:a8:3e:3c:ea:81:
38:f4:c1:c2:26:00:ef:9a:9d:6c:ef:43:c8:2c:cc:
8a:62:29:31:47:74:d9:5d:3e:c2:d8:a3:c8:72:39:
a8:a2:10:10:7e:c8:3c:ba:8d:6c:dd:66:a3:37:0d:
52:e9:f6:54:48:fa:17:82:ae:fa:4a:8f:ba:80:5b:
99:72:7d:de:b0:3d:f7:17:b7:84:b9:6c:5e:82:92:
6b:63:a3:72:07:4c:7b:22:2b:4d:7c:ec:18:75:b7:
3d:8a:19:84:85:4b:ae:fa:0f:c5:49:eb:af:b7:1a:
46:f9:e9:2d:c7:4e:03:da:10:26:02:da:c4:de:90:
f2:40:6b:9b:b5:8f:42:02:1b:97:05:34:b0:14:f0:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:50:36:0D:23:56:A6:DB:39:E1:E3:BD:E7:1A:6B:16:1D:62:53:F1
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:d0:42:7a:a6:2f:66:3d:6d:71:16:70:ad:43:cb:73:78:6e:
3e:59:f5:1a:eb:d1:c3:fc:aa:bf:b4:7f:03:7e:b1:57:7f:b4:
2c:0e:75:e6:4d:3b:3c:41:f6:72:23:89:0c:eb:31:0f:db:e2:
9d:8c:be:76:5c:57:ff:32:91:04:ab:f4:df:86:e0:ed:e1:6e:
fd:ee:a4:fd:1e:e3:50:79:d0:57:fd:98:f8:aa:5c:d0:0a:1f:
37:bc:42:cf:cd:00:30:65:3b:2b:5e:3e:ef:b5:ea:3b:d1:73:
6a:a0:c2:fd:df:1b:b1:73:87:f6:9a:05:ab:bb:54:16:05:11:
95:aa:72:3f:7d:73:7e:24:26:4a:b2:b8:10:1a:90:ce:2c:97:
2d:85:ce:79:13:d8:59:24:f7:0c:8e:70:3c:ef:25:ad:6f:09:
64:3d:9a:58:3d:66:b4:a0:ee:c8:fb:7a:b2:59:4b:62:dc:0e:
53:6e:64:55:77:e9:66:0a:f4:56:8c:78:a1:a0:78:56:4f:1f:
c8:71:a6:63:e5:15:27:29:f8:c9:46:cb:50:ab:6f:06:90:4b:
bb:ee:c5:50:84:93:0b:47:45:98:93:1e:07:30:f6:74:d6:d0:
d1:eb:9e:b3:d6:ff:af:5a:8a:e8:d3:b0:c2:e8:5c:e4:77:38:
d9:8b:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:56 2025 by rpki-client