Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File: Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier: B+UqDE8lTZzQIA4y8A0tvVweZaPEB2X1n8jHvyOIP+M=
Subject key identifier: 74:5D:B8:BF:AE:B8:2A:CF:6A:84:EE:61:62:A7:72:04:DC:BB:36:84
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer: /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 04:34:52 +0000
Manifest this update: Fri 31 Jan 2025 04:34:51 +0000
Manifest next update: Fri 07 Feb 2025 04:34:51 +0000
Files and hashes: 1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: DbHLEQ8CamePYfFfHA4fD909V4Ebhtda+n+shjPL+Tk=)
2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: uXbJ5eievhRi1JcELWkz+fcnXhb/y0aWhBNoVIZNw4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Validity
Not Before: Jan 31 04:34:51 2025 GMT
Not After : Feb 7 04:34:51 2025 GMT
Subject: CN=679c52eb-a105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:47:29:1e:01:8a:35:d3:59:5d:58:85:39:
4b:52:4c:52:8b:e9:46:70:79:96:27:b8:ad:00:28:
1e:cd:3e:0d:83:57:19:de:15:c2:9c:f6:4e:e8:b4:
a3:9a:bf:64:dc:0f:4c:2e:d8:28:60:57:0a:1e:14:
e5:f2:55:06:f9:47:0d:05:ac:d5:24:40:00:df:62:
bc:86:24:43:04:78:fa:7b:8e:39:43:a0:1c:31:3b:
ee:b2:66:56:34:1b:c5:e2:74:54:9e:25:3f:f7:fc:
aa:72:fc:d8:11:59:29:34:f9:81:43:fb:7d:30:48:
f3:89:19:ea:99:d7:9b:a2:8c:ae:e2:ab:68:db:79:
7a:29:11:1c:10:a6:7f:2a:50:07:82:83:7a:29:77:
2c:e0:5f:2a:17:4e:4a:a8:fa:ce:35:af:c0:99:26:
a7:ce:b0:f8:47:92:08:3e:b1:4f:a8:5d:3e:cd:bd:
6c:72:b8:17:ce:a7:70:3e:f0:60:bf:e1:c7:3b:c6:
af:fd:64:74:74:7f:f0:b5:71:47:93:13:cf:e7:9f:
64:e7:14:e4:7c:c8:41:fe:e6:80:51:86:cd:32:85:
19:73:ca:01:b3:c9:08:0a:2c:3b:8e:04:f8:13:35:
9f:62:36:b3:c9:93:17:69:d8:16:b0:e5:fb:fb:da:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:B8:BF:AE:B8:2A:CF:6A:84:EE:61:62:A7:72:04:DC:BB:36:84
X509v3 Authority Key Identifier:
keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:22:ad:af:75:8d:57:c3:a3:09:cd:12:e0:f4:e5:ac:5d:
a5:09:0f:40:c8:b5:3e:93:e0:9b:07:4a:b6:da:53:23:9d:ae:
e1:46:ce:d8:13:b9:2e:a5:6b:15:96:40:2a:44:f3:a6:02:12:
dd:1d:34:4a:68:b3:99:08:4b:ff:23:94:69:32:3c:2f:9c:24:
70:6d:40:4c:35:3c:b2:9c:1e:d9:9b:6f:c3:d8:35:75:4d:67:
a3:2b:ee:a7:58:bc:29:bb:fc:06:9f:78:94:0d:e5:91:be:2b:
1e:36:ab:af:cb:0e:de:8e:a0:ec:da:9d:38:95:25:fb:e0:d9:
f6:c0:c5:d5:4b:49:92:07:57:d6:0b:50:e8:60:a8:3c:02:bf:
96:54:04:ad:b9:5d:8c:40:33:48:21:08:91:46:ec:6b:7f:ce:
3a:3e:48:f8:97:18:20:f9:64:7a:6d:07:ad:f6:09:ee:c6:29:
8b:0d:0a:0b:c4:29:9a:ae:f8:3a:39:00:57:0e:94:cb:ac:ce:
a8:06:ed:11:18:b8:8c:35:08:35:c7:70:54:7a:d5:9f:83:05:
4b:9b:c3:4d:00:68:38:cf:d6:84:b1:6b:dd:10:97:b8:71:4a:
1e:8a:c3:24:ed:f1:08:29:8e:d4:b4:9e:e9:e8:a0:0c:36:d2:
34:f9:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:38 2025 by rpki-client