Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier: MmEiV+SJJkcMEcTiwEy2San1xSRIytzqG7VwjMfT6Io=
Subject key identifier: 80:33:1A:FA:62:F9:F0:B0:12:18:8B:A3:CD:3C:04:31:D1:F2:0D:A1
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 05:26:51 +0000
Manifest this update: Fri 31 Jan 2025 05:26:51 +0000
Manifest next update: Fri 07 Feb 2025 05:26:51 +0000
Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: qq1RrYlrjPqYuNuOYEFBlt4BB/mZGsm3l+uw7CdL55w=)
2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: hRcVFNYNHbBeZgTvTYU37EJFfyfSXfiYJs6pkm9HP0E=)
3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: zLtLI1BQNW1wn6UWygb+Rg5doBGgY1EY6qM449wyd6Y=)
4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: LTJcypAu6Coib5lGymH2yoKTBwPNQa57v5jvPjgYjd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Validity
Not Before: Jan 31 05:26:51 2025 GMT
Not After : Feb 7 05:26:51 2025 GMT
Subject: CN=679c5f1b-a25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:1c:3b:94:65:62:e2:e1:93:55:0f:85:80:
ec:bb:7e:d6:cc:11:54:33:26:0d:97:e7:12:cc:c4:
44:0a:cc:76:05:91:14:1a:8d:71:f9:f3:d1:7e:99:
13:0c:e9:d1:aa:c0:7b:6e:aa:25:26:c6:94:b3:be:
8d:0b:3e:92:b5:81:05:3a:52:f1:5a:55:fb:7b:4e:
45:3d:3f:be:d0:8f:9d:f8:7f:a1:8b:02:27:44:ce:
7a:b3:9e:f4:3f:2e:78:3f:f1:0d:91:91:b4:91:cd:
f0:35:45:90:74:35:35:03:cf:a1:d0:8d:86:19:16:
b1:a9:29:4f:b5:21:b9:a1:8c:2a:89:56:b7:3c:27:
6c:85:97:c9:dc:ae:53:7a:58:7d:f2:e9:d3:f8:4c:
a5:16:0f:2e:3c:0a:46:ad:eb:f6:11:48:a9:4d:40:
27:2b:4e:53:d9:9b:d7:45:92:86:8a:33:81:a7:10:
b1:b3:c1:cd:bd:4e:5b:b9:30:69:65:c1:8c:1f:68:
e5:88:3c:1d:ce:e8:78:4c:7c:3b:c0:7c:1e:ca:a9:
64:ff:fb:a8:a1:b3:c2:97:bd:3d:57:37:d8:b2:f5:
4b:0a:da:74:26:62:36:76:56:25:d3:21:64:fc:39:
d2:d7:7f:47:49:c8:26:9e:e5:5c:06:f5:25:b2:a3:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:1A:FA:62:F9:F0:B0:12:18:8B:A3:CD:3C:04:31:D1:F2:0D:A1
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:38:ae:48:02:fe:87:98:29:27:20:57:9c:2b:7c:bd:23:
30:3c:94:8a:5e:00:f8:42:ac:50:25:15:55:1c:d7:9a:b5:20:
cf:f6:19:b5:45:df:21:be:ee:5d:ec:ac:64:40:81:dd:4a:53:
be:f7:39:47:90:aa:db:e2:fa:89:6a:24:a8:90:17:fe:43:9f:
2b:25:79:37:a7:81:d0:34:47:64:90:a9:12:b2:e8:88:8d:2c:
1e:f9:fa:aa:40:e2:4c:67:9a:23:86:96:d5:68:4d:45:fc:91:
05:c8:57:c4:de:1d:46:4f:cf:da:27:27:da:ca:6c:05:cb:5a:
2d:fc:b7:8a:09:61:98:e4:54:cb:a6:09:e7:57:ed:d7:1b:00:
4a:c1:c9:68:d1:4a:1d:59:68:33:b0:33:68:8d:ed:3f:bc:ac:
c2:c3:28:9b:7d:78:9e:bd:2a:5d:b9:ff:1a:b4:fd:82:26:86:
c5:66:04:77:93:e9:3c:39:42:14:f9:e9:17:43:f9:7d:6c:f6:
c8:c8:5d:60:22:7f:40:f2:a4:2c:3f:49:ae:3a:03:17:65:7c:
69:d7:80:dd:f0:a8:64:9e:8e:19:ba:21:9c:5c:70:c3:9d:5f:
6a:13:79:5f:69:11:01:ce:15:40:29:0f:cc:8a:19:30:72:19:
f7:be:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:00 2025 by rpki-client