Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: 4mNSUaSgRqAU/yjA/IzA6eeDV10IZFTm+7GbIavglb8=
Subject key identifier: BE:A0:FE:71:D4:9D:07:E7:F0:A5:09:01:8C:D8:0E:1C:8A:8D:9B:5C
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 0171
Signing time: Fri 31 Jan 2025 03:19:03 +0000
Manifest this update: Fri 31 Jan 2025 03:19:02 +0000
Manifest next update: Fri 07 Feb 2025 03:19:02 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: vjAY86w+tvz9Fs+k6pNVBNDYqoSDw1it7cUwy39ksKQ=)
2: 471D214809DD11EFAF5F611EC4F9AE02.roa (hash: NuXlYp6HBu4b8bcXEpIyB4yko9brj7g5R8b/IXH6ZJQ=)
3: 1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa (hash: Vx9CKwW38xSqzrMCQYt2Ce0lmPo6uotFsV92mi3qiaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Jan 31 03:19:02 2025 GMT
Not After : Feb 7 03:19:02 2025 GMT
Subject: CN=679c4126-2313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:2e:8a:74:1e:57:3c:aa:47:d5:49:1b:51:
f8:45:45:85:ee:40:8b:76:f5:f6:53:e7:c4:17:bd:
11:d2:da:09:bd:54:d8:e1:aa:b4:77:7b:f6:b1:21:
33:c9:ba:b0:c8:13:c2:db:e1:44:66:a3:ef:b8:9c:
ed:88:87:54:28:1d:76:12:fe:e0:fe:8d:86:d6:a5:
57:7c:8b:c3:60:b8:c1:3a:1f:0b:26:8e:1d:ae:d4:
9c:f5:75:53:34:02:89:5d:94:d7:22:bc:44:a5:74:
eb:cb:c0:7e:10:99:4f:54:0a:ef:4f:6e:f4:bc:9f:
eb:8a:d0:73:fa:cf:51:6d:3f:cd:d2:f2:d6:4e:fb:
8f:78:28:ef:d2:46:21:8e:80:52:b9:cc:44:a5:ac:
f3:aa:8e:b4:db:96:7e:9e:57:9c:34:5e:5c:6d:c1:
fb:d2:52:e9:f3:d4:e4:74:52:52:9c:80:01:94:79:
9a:2c:19:7e:0d:d2:3d:d9:ee:db:ab:d6:6e:a7:d5:
19:80:18:da:55:72:7b:7c:5e:bb:25:8e:a4:36:da:
9b:14:d4:bf:69:94:0b:84:c6:4e:7d:aa:f7:73:13:
65:55:be:06:f2:ac:84:c6:1c:5c:5c:f8:6a:df:c5:
e8:2f:71:d2:ed:56:c6:d4:3d:42:49:9f:34:1f:37:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:FE:71:D4:9D:07:E7:F0:A5:09:01:8C:D8:0E:1C:8A:8D:9B:5C
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:b5:e2:81:b8:f0:12:95:cd:df:6e:03:75:be:36:c4:f2:63:
49:07:2f:ff:3e:d1:bb:47:87:29:50:54:a6:e0:75:23:2b:6e:
62:64:28:66:5c:44:1f:ca:96:73:17:59:c1:8c:a8:a0:76:bf:
e3:62:54:fa:24:ff:99:42:b8:21:ac:15:ed:9a:d3:a0:f6:5d:
69:aa:5a:22:08:b4:1d:9c:49:21:d3:7a:1d:bf:fe:78:7d:89:
d2:f3:3c:c3:cc:68:99:ce:cc:cc:e0:ed:3e:67:fd:4b:28:cc:
5d:bd:a5:30:a8:7b:c7:aa:f4:20:9e:f5:d3:da:ad:03:3a:86:
72:3c:25:1c:05:a1:8c:b4:a6:4c:63:87:23:69:91:92:24:aa:
9c:cb:a7:73:43:4d:72:59:e5:58:23:90:29:03:bd:d6:17:ae:
4c:2a:95:05:fc:02:50:c0:6f:9b:37:4f:0d:f7:bf:0d:9f:4b:
fa:23:1f:de:a0:0f:a9:b3:54:05:09:6a:cb:d3:12:63:1b:70:
54:db:46:98:0a:80:4c:06:f8:22:3e:46:e5:0e:19:12:fc:7c:
5d:ca:8a:9a:a0:7d:27:97:90:78:0a:2a:e1:07:bc:c3:67:08:
a9:87:01:73:fb:e5:83:9c:ff:b1:94:08:78:d9:8b:c8:95:de:
ac:a7:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:09 2025 by rpki-client