Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier: l84qoIDg6/XkLFu5dGgyR545Qx2tzgf2gSLrU5pQdPc=
Subject key identifier: 4B:8A:D7:4B:14:FD:1C:E1:18:CE:85:41:15:AA:43:02:66:0A:51:61
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number: 01A4
Signing time: Fri 31 Jan 2025 02:31:34 +0000
Manifest this update: Fri 31 Jan 2025 02:31:34 +0000
Manifest next update: Fri 07 Feb 2025 02:31:34 +0000
Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: jA8BIYxwJVfUIaBRE06mpQPDRY6uRTs3hx1jzldz3Gw=)
2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=)
3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Validity
Not Before: Jan 31 02:31:34 2025 GMT
Not After : Feb 7 02:31:34 2025 GMT
Subject: CN=679c3606-cbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:12:f4:b0:4c:24:cf:8b:95:eb:a8:94:55:
28:87:be:dd:80:a9:a5:26:0e:79:29:e7:e6:b2:ed:
7e:92:29:f4:ef:13:c9:92:48:d7:94:35:35:fc:c2:
8f:5a:90:5e:8e:1e:56:50:41:cc:0c:8b:fb:60:c2:
30:39:a2:ff:ef:3e:6b:b6:fe:b7:85:41:a8:73:00:
e9:bf:7e:97:c0:d8:20:01:38:b1:0d:a0:b0:29:fc:
3c:f0:67:12:ac:29:1f:17:63:a9:00:15:39:0a:ed:
68:79:8a:c5:06:b4:47:c6:c7:c4:3c:85:55:77:c0:
b9:e0:5f:b6:b0:31:0b:7e:84:d2:be:0a:39:c2:9d:
d9:b4:4a:8e:0a:a9:45:7e:e8:d5:7d:cf:54:94:04:
ee:26:83:d9:fc:71:72:14:70:a2:6b:93:e3:ab:2e:
89:57:5d:5f:fe:f8:8a:4b:6d:bc:d8:d8:cb:4e:80:
67:63:05:55:2a:05:17:8b:70:f3:51:c9:27:30:e2:
02:b1:d0:25:b2:6e:f8:2c:db:36:05:f0:78:16:7c:
e6:bb:94:96:37:60:c3:1c:bd:56:cd:db:8c:36:99:
eb:3b:81:81:1c:41:a3:d3:2c:99:d4:3b:81:0c:20:
1f:c0:68:45:d1:de:c2:d5:f9:50:fd:3c:c7:34:b8:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8A:D7:4B:14:FD:1C:E1:18:CE:85:41:15:AA:43:02:66:0A:51:61
X509v3 Authority Key Identifier:
keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:44:94:17:fe:64:61:42:75:f0:62:c6:a8:e7:9d:b3:d5:
8c:63:70:ce:ea:33:39:45:7f:16:ba:0c:9b:62:ed:2d:c9:51:
7b:bf:83:39:82:16:38:29:31:be:e7:4c:75:55:50:ca:38:ab:
49:1b:8e:eb:76:1b:44:b0:bc:e5:b8:3c:ce:09:57:3d:c2:fb:
ef:ba:ba:c2:6c:eb:f5:ca:c3:e3:f0:b0:76:32:30:db:2d:b7:
32:42:9a:46:9f:2c:6c:8a:0a:b4:e3:b5:2c:55:0f:f4:6b:e8:
33:f2:48:18:7e:75:12:4a:bd:71:fa:d1:19:b8:ad:04:69:a8:
6d:db:1d:79:3a:e6:07:d2:ce:05:80:6e:fa:ca:d5:aa:f4:01:
cc:97:db:af:e7:1a:ef:e6:b5:60:2c:02:2f:c6:76:08:59:10:
4a:9b:fb:f9:eb:17:24:1d:07:5e:ed:d2:03:30:07:2f:69:4f:
a9:5c:24:ae:25:d0:77:ca:3c:98:f9:02:c0:f5:21:e0:10:53:
4b:4c:64:71:7b:16:27:69:66:81:3e:6c:9d:56:37:bb:2e:85:
a0:69:d2:ea:e2:17:a7:6e:4e:13:05:9e:3c:ee:3a:39:d3:04:
fc:fa:e3:9f:aa:01:f3:31:d5:c1:15:73:79:bd:2a:fb:f6:e5:
b3:34:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:45 2025 by rpki-client