Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: kPvYvRrwRcbEbnRE8x/cThSOfIcbTLVWodloLD6qKZ4=
Subject key identifier: 62:ED:68:DC:65:7B:BC:9E:8B:5F:CF:C1:4F:CA:F3:DA:94:22:D8:9F
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0BB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0BA3
Signing time: Thu 30 Jan 2025 18:57:49 +0000
Manifest this update: Thu 30 Jan 2025 18:57:49 +0000
Manifest next update: Thu 06 Feb 2025 18:57:49 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: oOiAxsgdvFrPFh36Adxcq6pL63QUnEpzlpqXzmYUA8k=)
2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=)
3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: sv0g0tboRsfsbJ2uarFSxGBIzB+s+V9JKt78rjuG5CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Jan 30 18:57:49 2025 GMT
Not After : Feb 6 18:57:49 2025 GMT
Subject: CN=679bcbad-27dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:bb:af:06:31:a7:70:13:82:07:38:7d:32:
0a:b2:db:14:26:54:3f:ab:ae:78:90:3a:85:1a:7d:
b8:e0:e2:a2:17:82:6d:c8:b4:1c:75:11:9d:da:78:
9b:6a:87:de:dd:c0:4f:5f:06:ea:2f:84:6e:0e:e8:
4e:fb:a0:18:8f:db:5b:4e:d9:9a:32:6d:1f:50:8a:
29:a7:da:fe:28:41:0c:8e:f9:8e:18:6f:3e:d1:e3:
c2:4a:fa:5b:ee:61:68:9d:9f:20:2a:f7:56:4a:a5:
34:2e:32:5e:15:15:1f:c6:7b:1e:27:0d:a6:da:f7:
52:be:44:35:40:d5:05:a2:f5:42:37:d3:64:61:ed:
b9:84:06:ff:8a:c8:b5:35:2f:2c:f0:44:83:f4:90:
38:9e:cc:ab:23:5b:a3:c0:33:7b:b8:be:54:38:94:
73:bb:30:d4:e3:6a:19:8f:61:ef:a3:dc:24:40:6b:
27:78:a4:f3:14:3c:ee:de:5a:96:97:84:f7:ee:ee:
20:6d:b6:d1:96:21:25:ee:b1:52:4e:5b:e1:15:b6:
49:71:1c:cb:8b:37:37:7e:79:86:f6:b8:d5:99:e8:
ab:12:64:b1:35:ae:58:36:61:e0:79:e4:61:76:bd:
76:b6:54:f4:dd:c7:db:9b:6d:64:2c:3f:98:8d:77:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:68:DC:65:7B:BC:9E:8B:5F:CF:C1:4F:CA:F3:DA:94:22:D8:9F
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:53:33:9a:11:05:08:fb:00:c8:af:31:59:72:ef:6c:33:
26:89:aa:65:08:a5:19:d2:98:74:4b:96:84:06:25:d9:73:37:
ec:64:b5:5a:52:26:03:d4:2b:71:5a:b3:b8:5a:a0:c4:b1:a8:
1e:f1:bb:d8:89:d2:7a:cc:24:e5:64:80:29:64:b5:78:8c:5d:
62:d2:b9:0d:1b:5e:b4:cc:56:56:5b:26:ee:48:a7:45:18:73:
4b:55:23:a3:57:b5:66:22:ae:42:e0:b9:de:f0:6c:84:9c:1b:
40:d0:1b:13:01:80:72:b4:9e:72:e7:5a:5b:0e:a8:77:c6:72:
4a:c9:f9:94:6f:75:1f:c0:b4:79:fa:56:46:41:f1:6a:45:9e:
ab:b8:6b:8f:39:fb:4c:48:a3:ff:47:ad:87:72:da:e1:41:23:
eb:89:5a:5f:06:0e:99:41:c5:56:21:c9:da:fb:82:1c:ee:16:
21:18:4f:d0:3b:01:14:99:ec:35:33:6e:53:57:a9:96:88:53:
3b:a4:5a:1d:82:69:2a:b5:22:18:63:f8:ab:05:78:1b:cf:cd:
51:cf:c7:c1:0b:0a:2c:68:7d:8e:24:55:c0:a7:da:1b:12:3b:
d2:36:bd:35:82:fa:d6:32:3b:1e:cf:ae:02:94:6b:51:54:af:
09:b5:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:06 2025 by rpki-client