Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier: QT7l/HoWlLPbvZOEpdJUcLVYc5YJiPEPFPtlSP08eWg=
Subject key identifier: FA:D7:00:8C:05:4A:32:01:25:C8:FE:40:4D:D9:59:E0:91:05:24:E2
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number: 024E
Signing time: Fri 31 Jan 2025 01:54:50 +0000
Manifest this update: Fri 31 Jan 2025 01:54:50 +0000
Manifest next update: Fri 07 Feb 2025 01:54:50 +0000
Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: pcE6OBTOe9gr9Z/zzbU0tXTp0vITU0tQ1RHbh/TTdSw=)
2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Validity
Not Before: Jan 31 01:54:50 2025 GMT
Not After : Feb 7 01:54:50 2025 GMT
Subject: CN=679c2d6a-68bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:e9:6a:3c:23:ec:d2:a6:0f:7b:0e:4c:d7:
83:fc:47:cf:12:89:1c:b6:dc:71:ae:d3:2f:7f:e9:
1c:d0:0f:cf:b2:11:39:39:1d:a2:02:51:d1:ed:2b:
eb:68:d3:e4:f3:27:2e:25:5c:0d:50:0c:85:19:18:
0c:40:53:00:08:ea:b0:e1:03:02:02:8a:be:5c:64:
f1:22:ae:7a:ef:c9:45:46:21:4a:e3:eb:bc:f7:08:
7d:5b:4b:c4:6d:37:46:c0:88:b9:15:46:b0:5e:0d:
fc:51:b0:4b:3f:ae:b0:a3:db:bd:66:bf:98:24:ae:
1e:4a:74:13:cb:51:2c:ea:08:2a:10:77:cd:c0:04:
f9:81:57:b7:a6:56:74:9c:31:bb:7d:0b:01:4c:c9:
85:42:4c:78:18:e2:17:c5:82:3f:46:78:46:be:7b:
e1:94:c3:11:df:fb:16:51:cc:63:7b:b9:cb:6a:5d:
be:cb:18:46:d0:83:dd:fc:b4:fb:67:99:cf:a9:49:
71:a3:71:ea:2b:e6:39:25:68:d0:c8:be:b9:16:fc:
f5:40:e6:f9:d5:5e:31:e0:ba:8d:fd:ce:7b:8f:67:
96:67:f3:da:0a:cb:75:80:b4:ca:9d:36:36:c9:db:
de:e0:80:fb:fd:8a:fb:50:5b:c5:f0:1a:1e:52:82:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:00:8C:05:4A:32:01:25:C8:FE:40:4D:D9:59:E0:91:05:24:E2
X509v3 Authority Key Identifier:
keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:ad:04:eb:3d:70:35:07:ed:8b:3e:90:3d:46:00:66:63:
e3:eb:af:47:1c:51:d7:61:9b:c7:27:62:66:4d:65:39:ad:a8:
d3:e2:21:1a:48:89:da:f1:99:9a:f1:3a:c2:2f:a8:7c:d2:6f:
e2:8e:25:be:01:64:1c:9d:ce:48:f7:e6:cd:af:3f:97:35:50:
c4:81:fd:c3:b3:b8:dc:7f:5c:fb:12:c9:96:1a:19:3e:9d:0e:
3a:61:96:31:39:2d:67:c7:c6:c9:a8:10:e9:37:e4:84:13:8e:
75:cb:ef:4b:09:f9:b1:a8:35:f5:69:4f:7c:70:54:b2:08:4e:
bd:21:f6:39:16:df:fa:37:20:87:a3:2c:a8:ee:08:bc:69:a5:
8a:16:87:e7:58:fa:88:c8:35:0e:5c:ae:f6:15:e5:8b:d6:dd:
c3:64:f8:50:f0:63:f0:35:ae:2b:53:08:b2:b3:ec:99:3c:f8:
be:7b:55:36:3c:12:7b:1e:88:df:28:65:f6:d3:72:82:94:4c:
45:14:69:3e:e0:ad:43:cb:a8:2b:6c:cf:c2:52:b4:af:09:07:
e4:e3:46:91:3e:6c:0c:71:99:37:f9:b5:6f:18:17:26:47:2d:
8a:fe:c6:d6:b0:6a:4e:04:f7:6c:e0:6f:d0:bd:52:5d:4d:c1:
06:88:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:29 2025 by rpki-client