Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: C0xoAUklUy9U6OwcvvCMa5OIpuTojqsxo+vhvjRyOyg=
Subject key identifier: 93:F3:C7:6C:32:AD:B7:C5:57:17:E7:8F:17:01:C1:26:1B:DB:2A:C2
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 88
Signing time: Fri 31 Jan 2025 05:37:34 +0000
Manifest this update: Fri 31 Jan 2025 05:37:33 +0000
Manifest next update: Fri 07 Feb 2025 05:37:33 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: mLQEcRHZ1yf+Uz5EwTolEMoFkWwF+xvg8rpB0S6LKeQ=)
2: A697738410FA11EF9A068536C4F9AE02.roa (hash: Zv0ZFs3ilUsRHmjHi746Q/P+ClsZujQ8kkuNmYui824=)
3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: oCCDEtGddaMKQfOelMIcnjIu17ZvyL6EU64SchGV+9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Jan 31 05:37:33 2025 GMT
Not After : Feb 7 05:37:33 2025 GMT
Subject: CN=679c619d-a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:12:00:33:9e:19:45:52:d5:19:7c:84:1f:
b6:72:ed:ab:ba:00:78:70:f6:1f:05:b0:82:07:b5:
c7:29:f6:7a:d2:4d:4c:ab:81:c2:a8:b8:07:45:0c:
37:12:8d:cb:56:21:22:15:d6:cd:f0:6a:22:49:b5:
ee:0c:56:2f:f6:fc:37:41:9a:63:86:1a:91:5b:94:
e0:8d:bd:81:19:38:26:f8:63:db:b2:e5:77:4a:68:
ea:5b:12:75:e7:50:d6:0a:77:1c:b5:4e:fa:92:2f:
53:b4:2f:af:c8:02:71:83:7a:a5:4b:82:6a:0e:c1:
ce:21:f0:72:4c:04:61:1c:eb:d5:a4:e2:85:b8:cb:
cf:01:3f:12:31:71:ca:c9:c5:ac:29:a5:dd:e8:b8:
78:08:e9:a4:d6:47:45:21:65:b8:bc:0a:53:a4:6c:
94:eb:c7:f6:38:e3:7f:68:24:75:bb:4c:40:11:9e:
39:77:6b:cc:79:86:6d:fc:c1:73:87:0c:dc:00:2a:
cf:7c:a8:1c:b3:3d:78:3b:19:d9:6f:c5:f6:f8:07:
f8:12:d4:2b:44:7d:fc:c6:cf:12:3c:b4:da:2e:83:
a5:f7:8a:d6:09:21:bf:d6:94:ae:a0:c5:ad:02:2c:
ca:b2:40:59:46:c8:91:14:d8:bf:b5:f7:05:f8:8a:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:C7:6C:32:AD:B7:C5:57:17:E7:8F:17:01:C1:26:1B:DB:2A:C2
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5a:6a:4e:2d:89:e8:63:37:e1:6a:4b:1c:3a:e8:92:0d:0f:
ec:8e:72:5b:c9:b7:1c:34:95:6b:b3:ec:0c:96:56:4d:9c:2f:
3e:8b:a1:bb:40:e0:b6:30:5f:c0:d1:b1:4f:08:5e:4c:11:89:
de:93:a2:17:1e:c7:cf:e3:54:09:02:6a:0c:c0:d1:6a:b5:3b:
a9:56:67:76:e2:86:8c:0a:1f:01:d0:b9:3c:03:7c:7f:9c:94:
55:21:1e:76:a7:ca:d2:38:fd:8f:33:1c:83:33:e1:c4:dd:9d:
72:4d:a9:3f:aa:cb:06:ce:89:67:82:c4:0c:c2:a9:28:9f:46:
c8:4c:eb:1e:3d:ae:dd:f9:d5:4c:76:03:47:50:34:5c:43:e0:
9f:3c:f9:89:bc:fd:99:e5:76:9d:69:32:c9:a7:f3:02:84:a0:
a0:1a:fc:6d:db:99:9d:7c:09:db:5f:bf:27:a1:a5:ab:94:f9:
ee:d1:f2:a3:d3:68:06:c9:60:12:0f:f4:19:c7:1a:97:96:a0:
5c:41:e4:cd:7e:e5:bd:fc:09:e3:64:32:1d:1c:cf:22:9c:6e:
1c:d6:69:7f:73:ed:10:c5:5d:36:6a:31:cb:47:da:6d:db:07:
1b:e4:73:9e:b0:82:22:50:63:a8:6a:03:82:6a:d2:3e:a0:41:
ec:13:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:16 2025 by rpki-client