Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File: gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier: z8TxIm1EfBYmHF2jQ5eTlQ3HycM6h9sfWECrng3Uf94=
Subject key identifier: CC:A9:EC:0D:F4:B9:21:D4:14:A7:17:C2:12:A9:8B:F4:D4:D4:B0:C0
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial: 0447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number: 0443
Signing time: Fri 31 Jan 2025 00:18:32 +0000
Manifest this update: Fri 31 Jan 2025 00:18:32 +0000
Manifest next update: Fri 07 Feb 2025 00:18:32 +0000
Files and hashes: 1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: kdjv02dW2j7pn8Hz+dHOfIrJa5jZTn4+PKZiVOUcDnE=)
2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: JzviQWAwGRyvIRx9Vf87scMnMba7gxa9U+rC1fHqC5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Validity
Not Before: Jan 31 00:18:32 2025 GMT
Not After : Feb 7 00:18:32 2025 GMT
Subject: CN=679c16d8-f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:77:82:75:3a:d7:fe:e7:31:da:b3:1f:ad:
61:4e:ce:f7:7c:02:39:af:91:a8:02:a3:7b:00:87:
cd:df:63:ee:3f:56:1b:c5:c6:87:4e:c2:75:18:47:
7f:7c:be:34:49:2c:e2:24:62:8a:d1:09:39:5c:f2:
3c:bd:04:de:ae:31:5d:52:26:ad:1a:59:fd:cc:5a:
cc:6d:3e:64:79:83:b7:05:21:45:d8:d8:ea:83:17:
3d:91:14:0b:c9:f6:a6:33:99:2e:52:7d:a2:16:69:
30:fd:80:b1:d8:37:2a:df:0d:55:90:3c:6c:eb:35:
30:b0:98:70:4e:3d:9d:18:14:11:8f:c2:3c:92:0f:
69:9d:c8:95:48:dd:2b:81:62:90:0d:45:c4:66:29:
e0:98:b0:b2:2f:e0:14:cd:be:4f:4a:42:fe:71:02:
2b:ff:e2:99:6e:71:e3:68:50:3a:d9:4b:60:4d:12:
eb:6a:02:e1:14:5f:d0:0b:f2:9c:e5:22:5d:af:f7:
a1:08:ec:e1:38:df:c1:99:c8:41:25:ea:4f:ed:cf:
17:9e:72:e5:e8:61:f5:2d:33:cc:6f:b4:10:f4:4d:
2a:58:10:38:cc:82:b5:61:5e:07:f1:66:70:a0:1b:
ca:d7:ff:db:93:f0:79:99:ce:52:cc:a4:6d:79:1e:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A9:EC:0D:F4:B9:21:D4:14:A7:17:C2:12:A9:8B:F4:D4:D4:B0:C0
X509v3 Authority Key Identifier:
keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:f0:32:21:a4:7f:1d:e5:6d:bb:18:35:a9:9d:84:4a:82:f8:
3c:55:5c:17:19:ed:b4:ac:60:e7:7c:40:47:64:69:ed:bb:e6:
2c:64:9b:00:69:fa:4d:98:e1:ec:09:dd:66:54:df:d3:00:ae:
b0:01:e9:9e:38:e2:41:98:52:41:07:90:c9:80:21:a2:24:96:
26:48:1f:62:bf:f5:d6:da:01:7f:dd:37:7f:be:89:4e:4f:18:
e9:47:e2:e6:b0:70:a1:70:b1:a6:ed:d5:94:96:7d:e7:c2:94:
0f:21:44:31:a0:64:c9:57:bd:91:b9:46:83:56:b1:b2:1e:4f:
9b:02:be:bf:57:fc:9c:56:b5:90:b2:4f:c1:67:bd:b3:2a:c1:
1c:c5:0d:f5:e1:6c:fe:3a:4c:10:9d:49:8e:ea:94:05:20:60:
8e:43:48:dc:cf:3b:f0:92:c2:2e:6e:e8:ad:e2:36:bc:4b:ef:
1a:e7:4a:a5:33:a9:39:fd:cd:5e:26:e6:9e:98:70:14:e6:06:
ac:53:16:f4:52:c0:ec:52:02:fe:9c:28:46:ce:8e:2e:7d:d5:
3b:a7:97:55:26:38:fb:cb:aa:a3:e5:fd:2e:0f:48:3e:45:89:
3a:25:7e:88:c2:1d:e4:4a:b5:81:c8:97:7d:3e:8a:18:33:0f:
94:96:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:40 2025 by rpki-client