Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier: CmhAmdG97L83sFJ3WtQNNJPlgYl7Rmdy2bThS8gF2MY=
Subject key identifier: D3:3E:47:4E:ED:11:EF:50:FF:4E:BC:5F:00:43:E5:07:CA:1A:EC:FE
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 22A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number: 2260
Signing time: Fri 31 Jan 2025 15:52:57 +0000
Manifest this update: Fri 31 Jan 2025 15:52:56 +0000
Manifest next update: Fri 07 Feb 2025 15:52:56 +0000
Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: Mdwpt1mTtcJtlbJ+nIKPavk193qxlLXe93yT/iRr/nQ=)
2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: 2SAdCKQcIWqABPUcECk5L/zG6WToDQOSztNZtA6yviw=)
3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=)
4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: Kp1L9OUEsepRZk0KKmtB6S8OnLO2gE492T0DeYXHR/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8866 (0x22a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Jan 31 15:52:56 2025 GMT
Not After : Feb 7 15:52:56 2025 GMT
Subject: CN=679cf1d9-7236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:a2:e1:c6:1c:f8:ea:c1:cf:97:4c:73:81:
9f:97:fc:ec:f8:4d:61:1e:20:a5:8b:01:25:b2:38:
27:ef:58:cc:1e:01:43:c9:bc:54:26:09:52:b8:54:
ae:d0:bc:7d:ed:ce:9d:74:81:72:98:f9:84:00:32:
f6:4e:cd:41:35:ae:d6:1d:9c:72:0b:21:be:e7:76:
34:fc:71:42:bf:9a:a6:80:f4:b4:c8:06:67:15:59:
55:77:87:d1:42:5c:32:a5:b1:fe:5d:91:99:43:ab:
65:1f:97:06:ad:a4:21:eb:90:da:63:58:cd:c9:96:
cc:60:4d:99:9c:ac:c5:f2:f4:93:22:12:70:bc:e7:
3c:5c:4a:7c:e3:10:46:e5:d2:70:7e:7f:16:bb:8c:
ae:3c:82:58:53:3c:28:bd:ba:0e:27:33:a1:02:92:
8c:53:f7:68:be:a5:b6:5c:46:c6:aa:d0:40:fe:bd:
5e:22:46:09:eb:8d:78:a8:75:e5:f3:0b:d5:74:38:
a2:e8:ef:1b:b4:c1:12:6c:45:6f:d6:1b:00:37:b2:
ea:88:ee:54:d9:3e:1d:81:e0:ee:1c:fd:a8:57:5c:
02:94:4c:df:db:42:1c:84:80:63:6a:10:d1:68:da:
51:12:f3:4c:12:d4:a9:54:8b:e7:67:06:df:41:8d:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:47:4E:ED:11:EF:50:FF:4E:BC:5F:00:43:E5:07:CA:1A:EC:FE
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:0c:df:dc:1f:23:c2:4c:d9:ba:88:77:f6:40:75:e2:4d:
e0:af:b2:ae:ee:a9:14:5b:7b:1d:26:33:3b:bd:5c:78:99:b8:
11:df:6f:16:6f:03:de:43:53:ab:e3:72:d6:62:8a:7c:df:ce:
2b:2c:c3:12:b0:29:ca:eb:cf:96:0f:10:99:35:2e:52:2a:8b:
45:93:40:94:a9:01:08:d9:10:2c:80:1c:97:72:ea:ea:52:2e:
9a:0e:8a:d7:a7:41:a7:c7:82:b2:4d:a0:0a:ca:fc:e0:3d:1a:
08:6c:42:29:d5:27:1b:d1:53:2d:c5:ce:aa:67:d4:21:75:d4:
80:66:7a:90:41:fa:6e:6b:1b:41:fb:f7:df:e2:cb:01:ce:e3:
5e:dc:95:bf:53:ad:33:f9:55:0a:a6:f6:fc:ec:11:56:42:ea:
25:02:3a:c2:b7:e4:78:a3:28:28:25:39:46:d7:27:69:40:d4:
7f:37:c8:7b:90:cd:c8:ca:5d:62:da:34:61:c1:f4:8b:cd:ae:
24:c6:9f:60:df:96:79:9a:ee:f1:79:1a:a8:d7:5f:e0:d6:12:
66:3f:ba:3e:2b:bf:16:71:fc:f6:e7:ab:07:f6:05:de:e0:e6:
a4:c3:83:b1:02:57:b3:f3:ef:3c:5d:25:c4:5e:1a:d4:e3:fa:
0d:5a:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:02 2025 by rpki-client