Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier: GfuMpGP95jMe9e2hk5WwogFkO+igHJi6n10H8g7eKHQ=
Subject key identifier: DF:C4:C2:BA:47:E3:65:01:B3:9B:FE:14:0A:FE:8F:D5:23:93:92:86
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number: 0405
Signing time: Fri 31 Jan 2025 00:31:22 +0000
Manifest this update: Fri 31 Jan 2025 00:31:22 +0000
Manifest next update: Fri 07 Feb 2025 00:31:22 +0000
Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: kS7ilFeiO0kLLxsAuND6ZOEq2l2289beyfUfAcruPew=)
2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: Y2D4bZVCWRU0pKNmh7gUDg+LE8MSxtojGL7g4PBL1wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Validity
Not Before: Jan 31 00:31:22 2025 GMT
Not After : Feb 7 00:31:22 2025 GMT
Subject: CN=679c19da-a5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:51:de:65:61:89:ac:eb:e3:a5:a0:ed:d8:
89:6e:b9:79:e0:30:9a:48:72:e4:7c:ed:3c:52:5b:
d6:d6:4e:ce:7e:42:55:8f:93:0f:ac:e4:bb:05:a0:
d8:5e:a9:fc:fa:7c:78:d7:94:4b:29:c2:ff:81:64:
10:28:ee:42:00:3f:08:27:03:1c:e9:ac:3c:ed:e8:
2e:ad:46:8e:6d:be:fe:f7:34:d2:fa:a2:c3:54:5a:
e2:7f:df:05:4f:cc:6f:a7:9d:de:67:e9:94:3c:b3:
13:82:5a:24:6b:c3:0e:fa:67:44:c3:87:4b:1b:db:
78:85:42:c1:dd:48:68:59:4d:01:fb:27:c1:a9:bb:
fa:22:17:df:f1:3a:68:bb:31:12:df:26:27:4f:85:
c4:46:c8:5f:9b:82:13:6c:87:94:65:77:df:67:b1:
74:fc:82:79:42:e1:93:e0:b1:d6:e1:c8:52:b7:3b:
f8:19:5c:69:ee:c8:67:4c:80:bd:f5:c2:26:b3:9e:
93:f4:ed:f8:26:32:6e:d2:28:de:58:d0:f1:99:84:
dd:fa:66:da:61:3b:71:a1:5e:a2:aa:f4:cf:fc:d5:
9c:a7:6c:e0:e7:37:fd:03:64:68:2e:19:62:90:9b:
b3:d8:85:f2:58:5b:89:2c:6b:41:d2:7b:69:da:d2:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:C2:BA:47:E3:65:01:B3:9B:FE:14:0A:FE:8F:D5:23:93:92:86
X509v3 Authority Key Identifier:
keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:df:cf:2a:3f:88:b9:78:b1:c0:0c:a0:cd:7e:64:68:12:3b:
06:04:91:5a:ef:64:bc:0a:4b:68:8b:7a:e7:2d:bc:fc:dc:9b:
18:57:b3:38:68:32:97:09:bf:fb:f5:85:74:90:5b:36:48:0e:
3a:ca:d7:0e:20:29:d5:3f:89:65:19:b2:d3:cc:dd:a8:7c:69:
e4:d1:39:ce:32:72:cd:02:aa:25:7b:cc:61:47:50:ad:5c:ff:
33:b9:76:50:4a:8d:9e:52:1a:41:8f:e3:f4:42:e7:c7:f9:9b:
c1:5a:30:f2:52:4f:f4:93:d3:ed:55:00:d3:20:b3:f8:30:ff:
e0:7d:1e:63:7c:4f:b3:0f:79:33:1d:31:f5:2c:f6:13:c9:b4:
3c:f6:f3:67:6d:4a:f2:3c:dd:e8:ff:2d:95:32:94:81:d4:38:
c7:e8:2a:08:0c:ce:50:64:94:73:05:34:af:19:49:cd:9c:89:
4b:7b:98:e1:2f:3f:3c:5b:81:37:47:d0:05:78:7b:54:5e:c0:
57:58:4a:75:af:f3:54:80:05:2d:79:b7:f1:1f:35:d7:1f:e3:
81:84:d6:ec:1a:31:d2:f7:96:61:d6:dd:fe:c9:ea:09:07:0f:
e9:6b:53:e9:06:26:b0:6b:1a:aa:84:ab:b7:9b:2f:ab:c2:14:
48:89:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:44 2025 by rpki-client