Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier: xo5S8D6HpolobHvCfJq+Xsg+PKuse2soyyW0XwiJT4w=
Subject key identifier: 4E:AE:23:3A:3B:D9:54:CD:68:19:B8:DC:88:F4:B4:FA:12:E8:AD:91
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 19E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number: 19C3
Signing time: Fri 31 Jan 2025 16:24:22 +0000
Manifest this update: Fri 31 Jan 2025 16:24:22 +0000
Manifest next update: Fri 07 Feb 2025 16:24:22 +0000
Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: lKFQSO0N2jVJ9u0DDEaCL8KaKYLyFNGQZsAlkUSGZaE=)
2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=)
3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=)
4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6629 (0x19e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: Jan 31 16:24:22 2025 GMT
Not After : Feb 7 16:24:22 2025 GMT
Subject: CN=679cf936-f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:d6:15:24:80:bc:7d:15:15:67:85:62:3d:
17:c0:c3:ba:20:89:7a:c9:81:ce:6d:01:58:14:44:
9a:a0:f0:b4:76:e0:30:fc:f8:ad:24:0c:c9:67:bc:
ae:a6:90:21:99:b6:54:11:59:a6:e3:a7:62:e9:9c:
95:43:0e:a9:70:48:44:7b:7d:1a:eb:9e:51:cd:7e:
c8:ba:ea:51:ae:16:08:c8:16:6a:2e:fd:00:0e:40:
e4:e7:6a:e1:cf:07:3b:0e:01:6d:72:37:87:c2:dd:
c1:c5:55:be:7b:38:0a:30:a2:7b:49:8c:44:c0:c8:
77:dd:ad:66:9f:c9:e0:99:18:5c:28:e8:10:9a:fb:
e0:c7:b2:77:b1:88:10:d6:66:ab:ea:27:66:55:43:
62:48:08:b9:ce:e0:5a:36:b0:48:e7:95:28:27:80:
88:5c:3e:85:11:e4:42:40:8c:17:ed:fe:7c:5c:00:
58:0c:eb:14:40:eb:67:ad:92:25:bc:62:1c:de:c2:
47:0f:87:bc:c8:2b:e0:a7:2c:1e:4b:ae:e4:7a:30:
9d:db:4e:b5:bb:0d:2f:e4:84:aa:f8:52:50:30:8e:
45:9f:55:58:56:bd:1c:f2:ae:9d:1e:9a:bc:b5:59:
88:df:e3:7c:53:c0:83:85:2d:1b:49:6b:1b:54:0f:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:23:3A:3B:D9:54:CD:68:19:B8:DC:88:F4:B4:FA:12:E8:AD:91
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:72:35:a9:62:11:9e:ea:32:92:b7:39:ab:07:9c:4f:d7:
7c:28:61:c7:0d:df:b1:88:05:06:50:8c:a4:84:fe:3a:29:df:
77:7f:fc:a7:94:70:8d:a8:3f:85:e5:db:96:22:e2:ca:4c:6c:
9f:e3:96:a1:82:0a:73:a0:1b:03:2a:ad:b9:b2:c1:38:31:7e:
c6:d2:61:07:34:7e:a9:9d:e9:13:3c:94:90:2d:8b:bc:f8:82:
b9:92:fa:30:b6:c0:77:eb:54:a9:76:32:31:39:1f:b0:ac:f0:
02:d0:e8:26:56:b8:64:d8:29:52:91:38:fe:9d:3f:d1:90:71:
6f:34:12:84:7b:1c:eb:f1:1a:bd:e9:87:31:7f:67:2b:91:78:
b7:63:4d:77:ed:cc:3e:1a:fc:f5:0c:dc:af:15:ff:b9:21:31:
ff:75:a3:73:1a:c3:b2:50:9f:5a:66:3d:b3:6a:98:67:1e:f6:
20:9b:11:d1:b5:f7:5f:40:46:a0:1d:88:55:59:87:51:b6:3c:
cc:8b:97:8e:17:a9:b9:d4:98:e6:76:c1:e7:f6:80:41:72:70:
6c:a8:ea:78:33:96:2b:59:1c:99:4b:7e:0a:ec:76:22:41:99:
19:81:d7:3e:0e:4c:49:30:6c:e9:8f:8a:70:33:05:25:86:80:
f7:6f:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:32 2025 by rpki-client