Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier: Vy19pIJFBnI7P8ZtOeU5AGR8tkPXpWzZvpd2eL8vrhU=
Subject key identifier: 79:ED:8E:D7:F8:32:96:98:F5:91:CC:02:56:C4:13:62:9B:7F:EB:3F
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number: 010C
Signing time: Fri 31 Jan 2025 04:16:15 +0000
Manifest this update: Fri 31 Jan 2025 04:16:14 +0000
Manifest next update: Fri 07 Feb 2025 04:16:14 +0000
Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: HYoOjIp9QFyBbYRClaTgZo9ETk59FXsZCq/FSeUQL2A=)
2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 7xbva2x/2mRF/+1fr2KpL4N7Zq29lf7peyPdqH7ozvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Validity
Not Before: Jan 31 04:16:14 2025 GMT
Not After : Feb 7 04:16:14 2025 GMT
Subject: CN=679c4e8f-f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:61:bb:83:a6:70:37:0b:a7:9a:29:46:3c:
96:7d:ed:4d:98:21:44:ba:88:dd:80:be:4c:13:db:
96:09:51:b2:a5:48:8a:3f:be:66:9c:ee:cc:f1:08:
18:85:66:fd:ee:ba:00:81:2b:c2:d9:bd:95:30:50:
83:80:0f:36:20:0f:4d:98:99:50:ee:71:09:26:89:
69:b1:b5:eb:b4:23:af:1a:73:40:a4:dc:a7:04:ff:
41:73:aa:dd:6e:11:f2:46:3d:a8:37:d9:08:8f:73:
77:35:b4:60:52:76:81:63:3c:34:23:9d:bc:37:35:
12:db:3b:69:09:5e:c4:82:ad:3e:1d:5d:6b:99:de:
c1:cd:67:af:ff:b5:21:da:b9:85:ef:46:ce:5d:58:
49:37:54:c6:06:8d:62:24:3c:b5:7a:34:49:97:af:
f3:6e:cc:81:9a:7e:59:49:c4:f1:b2:c4:36:3f:13:
85:b2:f2:4a:14:f8:a7:87:a2:86:5f:81:16:1b:c5:
34:31:2c:1b:e2:44:f2:36:4a:ac:da:4c:c6:c9:90:
91:46:b0:12:58:f4:4e:63:43:28:d0:b2:8c:f2:22:
1b:de:23:1d:95:89:55:5d:df:7b:15:c7:d8:73:71:
06:83:05:4e:cc:6b:f2:98:07:6d:32:4c:d6:a2:d7:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:8E:D7:F8:32:96:98:F5:91:CC:02:56:C4:13:62:9B:7F:EB:3F
X509v3 Authority Key Identifier:
keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:8f:37:cc:a6:1c:1f:9d:3d:43:14:3d:af:fb:72:2f:60:4a:
3e:6d:6a:50:00:da:5c:74:40:ae:21:37:21:3f:a7:b1:a1:d9:
58:27:50:37:ee:95:a5:d6:e4:1a:df:2a:4c:90:94:21:35:1f:
34:5f:72:9d:94:e5:3c:23:5d:38:e4:de:5a:f9:52:78:90:64:
aa:38:50:1e:fc:e6:a5:2f:82:0c:20:2d:24:4a:82:89:24:51:
05:93:d8:d3:78:cc:42:73:72:f6:9b:f8:c1:d6:cf:10:63:40:
e9:5b:ce:81:b2:a6:b9:86:f5:d8:2d:88:1f:d0:63:a4:6e:27:
b5:e9:44:64:2c:f6:55:9e:47:83:ca:b6:dc:11:f9:ad:4b:4a:
c0:7c:e1:06:88:0c:36:65:6c:d1:28:c0:6b:16:7f:e9:ef:af:
69:92:54:56:f7:5c:02:f4:71:de:6b:35:df:3b:b4:47:d2:ba:
49:50:08:23:2b:57:66:1a:a7:0d:f7:63:a4:cb:1d:2c:e4:52:
52:cf:0f:cd:5d:b7:99:4a:58:c7:12:39:a1:fa:2a:db:28:2d:
c3:96:ab:f7:de:a9:2b:51:42:6c:34:47:b9:36:8b:55:ad:7e:
7f:d1:30:2a:30:4b:6b:17:d4:cb:3e:bd:df:b5:fb:1f:53:1f:
ba:e0:dc:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE
Mzg3MjYzQjgwHhcNMjUwMTMxMDQxNjE0WhcNMjUwMjA3MDQxNjE0WjAYMRYwFAYD
VQQDEw02NzljNGU4Zi1mOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgdhu4OmcDcLp5opRjyWfe1NmCFEuojdgL5ME9uWCVGypUiKP75mnO7M8QgY
hWb97roAgSvC2b2VMFCDgA82IA9NmJlQ7nEJJolpsbXrtCOvGnNApNynBP9Bc6rd
bhHyRj2oN9kIj3N3NbRgUnaBYzw0I528NzUS2ztpCV7Egq0+HV1rmd7BzWev/7Uh
2rmF70bOXVhJN1TGBo1iJDy1ejRJl6/zbsyBmn5ZScTxssQ2PxOFsvJKFPinh6KG
X4EWG8U0MSwb4kTyNkqs2kzGyZCRRrASWPROY0Mo0LKM8iIb3iMdlYlVXd97FcfY
c3EGgwVOzGvymAdtMkzWotf7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHntjtf4
MpaY9ZHMAlbEE2Kbf+s/MB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD
NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2
NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDjzfMphwfnT1DFD2v+3IvYEo+bWpQANpcdECuITchP6exodlYJ1A3
7pWl1uQa3ypMkJQhNR80X3KdlOU8I1045N5a+VJ4kGSqOFAe/OalL4IMIC0kSoKJ
JFEFk9jTeMxCc3L2m/jB1s8QY0DpW86Bsqa5hvXYLYgf0GOkbie16URkLPZVnkeD
yrbcEfmtS0rAfOEGiAw2ZWzRKMBrFn/p769pklRW91wC9HHeazXfO7RH0rpJUAgj
K1dmGqcN92Okyx0s5FJSzw/NXbeZSljHEjmh+irbKC3Dlqv33qkrUUJsNEe5NotV
rX5/0TAqMEtrF9TLPr3ftfsfUx+64NyL
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:32 2025 by rpki-client