Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier: JyyMruGWsk82yZ3LT/rzzSCr9+Zen1+2X/WkQPwS4UU=
Subject key identifier: C6:D9:6D:7E:3C:0C:15:EB:FF:21:C8:4E:37:D7:95:84:05:99:1F:AD
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number: 02BA
Signing time: Fri 31 Jan 2025 01:33:47 +0000
Manifest this update: Fri 31 Jan 2025 01:33:46 +0000
Manifest next update: Fri 07 Feb 2025 01:33:46 +0000
Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: twjPNjo2C7riwu6j9RVHg8iV7DwFbAnPIigxonnrW8o=)
2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: befFFpozyGTTud2Z8wsHoOu5TcgcBDvFYmEhZzj+W4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Validity
Not Before: Jan 31 01:33:46 2025 GMT
Not After : Feb 7 01:33:46 2025 GMT
Subject: CN=679c287b-0ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:36:7b:80:8b:e7:91:13:f5:6e:53:cd:e2:
50:99:69:9b:df:b8:08:40:a0:20:99:b1:0c:7e:0f:
5b:4c:de:35:c4:99:c3:ca:55:24:6b:b5:a3:eb:f0:
de:30:dd:3f:b1:35:ea:27:9f:2d:02:99:f2:71:6c:
de:91:c3:61:ec:93:6d:b2:b8:17:2a:05:3f:95:1e:
1c:e6:28:2d:bb:1a:88:13:ea:47:18:cb:c1:0b:5d:
7a:eb:d8:10:5b:ac:06:6f:31:4c:0c:46:03:1c:26:
b8:35:01:d4:d0:8d:b6:f2:8f:b0:ad:cb:a3:29:3a:
41:a4:52:b5:6b:00:73:6d:69:84:ee:b1:6a:e2:f9:
2d:25:aa:6b:4e:54:bb:34:8e:60:d5:17:32:dd:3c:
b1:b9:77:42:7c:95:52:aa:f0:1f:8d:27:94:40:d2:
2f:6e:51:35:53:30:93:f3:c0:97:9c:a8:b5:44:8e:
39:1b:14:06:f0:2f:61:a4:ee:78:24:8c:00:d0:68:
9e:d6:4d:19:f9:67:22:ee:2b:f8:f6:bc:85:c9:2b:
ad:05:e0:49:e3:89:73:c3:f4:60:b3:88:c1:9b:18:
09:e3:ec:af:25:6b:1d:9d:9e:63:58:12:ed:d7:bb:
2d:d1:21:34:b3:f6:48:e6:01:b6:c7:b3:d0:51:32:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:6D:7E:3C:0C:15:EB:FF:21:C8:4E:37:D7:95:84:05:99:1F:AD
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:a0:b4:f8:d0:85:7f:a1:d0:3c:99:9a:6f:30:91:20:1c:
20:f6:a2:d9:97:65:80:44:75:40:6d:b0:d3:a4:69:6d:66:ad:
ab:fb:e1:d9:67:c2:72:17:77:91:7f:b3:91:2f:c7:be:47:26:
c7:c2:35:6f:7a:f5:82:36:58:ce:bc:b9:64:0d:e4:21:a9:6b:
ff:07:5a:0a:ee:69:e1:22:e9:eb:3b:01:47:06:b9:a8:61:2f:
da:6f:a8:48:08:f9:3f:e0:d6:4b:ce:22:2e:b7:63:f7:16:37:
e6:7c:95:c4:17:5b:48:58:78:86:cd:62:16:b9:12:97:63:eb:
e9:c3:24:a7:ed:c5:9f:3b:5f:56:4b:a9:5d:3c:98:21:8b:2a:
e3:c4:df:49:37:bc:97:2a:3d:4b:af:b6:d7:75:96:fa:6a:6d:
29:48:f1:03:89:43:86:ca:47:6e:e6:64:2f:d7:72:db:73:5a:
4c:b1:90:3a:a9:b1:e1:06:a1:e6:bc:6a:57:32:21:1e:be:d7:
7d:85:bc:30:cf:d7:69:6c:88:5b:30:7d:96:0f:f1:0d:ee:39:
9c:30:ed:cc:57:d6:f9:5a:86:03:b9:42:5b:1a:81:6b:3a:99:
0e:40:cd:b1:66:3a:4c:e8:24:be:2f:2d:cf:81:b7:ba:2d:95:
ff:ae:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:44:37 2025 by rpki-client