Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier: e9dXmhjLT+d9y90lHbXZgItxL1b1P0tm36M/SLbEDPs=
Subject key identifier: 59:AE:AE:A8:04:D9:D9:AF:2C:69:D4:DF:53:5E:63:F8:AA:6A:03:8E
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 09F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number: 09F0
Signing time: Thu 30 Jan 2025 20:00:07 +0000
Manifest this update: Thu 30 Jan 2025 20:00:06 +0000
Manifest next update: Thu 06 Feb 2025 20:00:06 +0000
Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: tAYPPMlibBj5xtszeHknttG98zEf6b+uLZgz86COiUM=)
2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: ofPmRPb+6TnChxIwXK9GRCM7U6NtVuFPuLONS66PJvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Jan 30 20:00:06 2025 GMT
Not After : Feb 6 20:00:06 2025 GMT
Subject: CN=679bda47-a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:13:61:f5:e1:60:f2:f2:65:47:e6:6a:4b:
21:36:7c:62:48:00:8d:70:1c:e3:18:3a:5f:b4:db:
44:27:31:6b:d9:a1:02:b6:51:43:56:b1:7f:03:a4:
bb:48:54:1c:ca:dd:3e:bc:14:95:33:a9:81:22:23:
81:ff:74:0a:9b:46:ab:64:7b:d1:c5:ee:1c:8d:7f:
b2:36:12:7b:d0:49:38:dc:92:e3:36:af:b0:9a:3a:
6e:12:98:f2:bf:42:4f:5d:f5:1f:94:18:4f:74:f4:
a2:75:5a:de:4e:5a:5b:12:fa:e7:b0:13:2f:6e:05:
73:66:5b:81:ec:53:c2:66:a4:15:62:ed:5b:fb:1f:
36:b2:a4:5f:a2:06:9f:62:e3:cf:ba:36:ba:20:81:
2c:23:53:86:c5:7c:1c:3a:e2:76:52:5f:1b:ca:30:
c9:cf:93:d7:d1:72:8a:66:90:cf:ca:f8:40:e1:2c:
42:2b:7d:1a:e8:dd:89:12:75:73:1a:f5:a0:15:f8:
58:7d:30:54:51:46:65:65:c7:24:00:12:f9:2e:4e:
90:40:ab:5a:f0:89:c4:e8:46:47:56:a3:08:db:67:
8d:f1:cb:46:e1:64:7c:72:71:2a:49:31:d1:5c:3a:
16:3e:ec:54:f0:8c:8a:f0:26:69:94:1e:fd:7c:5f:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:AE:A8:04:D9:D9:AF:2C:69:D4:DF:53:5E:63:F8:AA:6A:03:8E
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:bf:03:23:98:0f:3d:f4:c5:f8:1f:78:ff:3c:a5:67:51:
dd:0c:e8:3d:6a:13:07:60:99:10:5d:5b:75:1b:22:48:02:23:
70:38:c5:3c:69:d0:9a:76:bb:58:a9:47:a4:d9:aa:a0:bc:53:
aa:5e:c4:05:5e:9c:d6:94:41:bb:ee:45:0a:55:ba:15:4e:3d:
54:57:a6:53:90:b5:a9:dc:b5:3b:0f:34:ca:85:3f:c6:c1:c2:
91:2c:6c:a7:f2:6d:9b:04:f9:14:b6:5f:43:52:e6:78:7a:90:
c4:55:4e:49:32:3a:ff:86:ee:28:a3:13:6c:fb:f0:df:9b:56:
dd:75:c1:e1:50:62:39:87:29:1b:55:07:1d:6d:97:63:70:f4:
64:26:83:0b:92:e2:ec:e7:c5:09:9c:4d:85:ea:11:e9:be:fe:
9b:fa:fc:50:d1:f9:01:e3:7c:3c:99:b1:15:04:8a:01:f8:ab:
55:bb:7f:eb:1f:06:5b:07:a1:06:64:d1:ec:8a:c3:d1:f0:34:
07:7a:68:fb:59:b0:71:f5:d7:0d:c9:f9:cd:ce:83:ba:2f:d0:
ce:eb:a2:a4:82:9f:c7:7d:f5:cf:aa:e4:ec:4d:c4:c4:7b:f3:
e4:57:c2:03:6e:63:60:1b:e1:f7:95:24:db:8f:1a:0c:3a:b5:
ea:9f:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:36 2025 by rpki-client