Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: 6c3cUrTrucnjjC1gTgL4F88E1Qc343vaEr00vzhSkas=
Subject key identifier: 38:80:70:6B:BD:11:F3:89:67:52:D2:C2:4C:CC:8A:1A:1E:6B:32:97
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0DF5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0DEB
Signing time: Fri 31 Jan 2025 17:50:10 +0000
Manifest this update: Fri 31 Jan 2025 17:50:10 +0000
Manifest next update: Fri 07 Feb 2025 17:50:10 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: wyS2Z/7jQe/znfq1S7Zxo+fwChuWQOuPtoRswd8wK28=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: XB0QLbbknxQIRTO38MXkPwNFVVbVpdhvXqbqZxANpFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Jan 31 17:50:10 2025 GMT
Not After : Feb 7 17:50:10 2025 GMT
Subject: CN=679d0d52-4628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:c7:8d:ac:50:15:09:4e:c9:41:4d:87:32:
e7:11:20:5b:28:c4:8d:5b:d1:64:82:e2:68:84:77:
97:3c:74:2f:59:f1:5a:71:12:c4:4c:90:6a:01:a5:
18:1a:90:cd:d9:e7:97:f8:e3:9d:81:5a:66:a1:25:
1c:54:be:82:0e:5d:14:ba:fa:00:45:50:fe:62:9e:
dc:56:fb:68:bd:aa:d3:6c:fd:63:c1:3f:fc:ab:b9:
6f:99:50:6e:21:4b:57:37:a6:1a:69:6c:15:50:46:
1e:53:5d:52:d8:41:02:94:4a:c7:b6:21:e7:f8:41:
df:da:d2:9e:3f:dd:8c:33:9c:6a:70:96:65:7b:30:
6d:ac:6f:e4:49:95:25:94:22:0a:82:08:b8:89:f9:
a2:6b:25:fa:2e:ff:47:12:99:44:11:84:69:41:64:
62:3a:7a:a8:00:de:fe:4a:60:d6:b8:c4:04:e2:05:
2d:5e:5f:87:30:86:38:11:95:df:34:5a:8c:02:d6:
67:01:58:35:26:71:24:61:a0:3d:12:ca:71:84:ee:
34:70:21:c1:c2:58:4a:21:08:30:4c:4d:2f:64:8e:
20:f9:a3:47:3f:38:4f:ff:99:e1:67:1f:bd:95:4b:
a2:86:60:0c:75:1c:2a:2d:bd:3a:8d:77:8f:3c:dd:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:70:6B:BD:11:F3:89:67:52:D2:C2:4C:CC:8A:1A:1E:6B:32:97
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e1:3e:63:35:4e:34:8f:fb:9b:e7:83:43:d4:e0:ad:54:e6:
b0:d7:98:08:93:3b:b7:70:f9:d0:5e:79:4c:8f:bd:ef:78:f0:
29:3c:cb:dc:4a:0d:a0:db:ae:9b:74:8f:3e:40:f5:e5:7d:28:
37:cc:7a:a5:9e:fd:6a:c2:ba:1d:8c:a6:5f:98:a4:88:53:5c:
c7:7e:14:58:ea:0b:d0:e9:8e:28:95:ec:bb:62:b8:b2:64:68:
5f:8e:7e:6c:2c:01:33:2c:3e:d1:99:65:0b:5f:fd:5d:95:3e:
7d:54:52:d4:e6:df:49:ed:79:fc:dc:bc:89:b8:17:d6:71:2d:
25:e9:a2:5a:39:39:51:89:3b:4a:68:13:d9:df:17:83:4e:32:
2d:d5:dc:b6:07:14:ea:98:0d:bb:7f:8f:81:13:f3:d6:fb:61:
98:65:6d:8b:b0:75:bc:aa:3b:6d:e4:15:e0:d0:e6:da:02:65:
46:57:37:04:0b:de:d1:4a:28:9f:c0:c9:05:51:4b:58:7f:7d:
4c:47:a7:1b:c3:cb:c4:de:51:11:d0:a4:04:02:d6:e7:82:84:
c0:1b:f0:cf:eb:4a:2f:57:e0:39:e4:5a:a1:54:9a:e0:e1:f7:
54:a7:b8:6c:13:5f:e5:eb:70:c2:d7:6f:9a:76:22:57:12:34:
45:cb:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:44:05 2025 by rpki-client