Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json)
Hash identifier: P7M8fcPwpeh452H2rr97CkhSfCUCaVcaJPh7Fl/62ZE=
Subject key identifier: DA:5C:D4:44:E1:41:48:AC:D6:67:95:78:CA:5B:F5:E9:EE:CC:48:52
Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Certificate serial: 0967
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
Manifest number: 095D
Signing time: Thu 30 Jan 2025 20:17:40 +0000
Manifest this update: Thu 30 Jan 2025 20:17:40 +0000
Manifest next update: Thu 06 Feb 2025 20:17:40 +0000
Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: F+15Pc6PnT8rXLThvCNzXSwouJlsayeqm5pLFsbKbUI=)
2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: jqlU7TCq337lg7pDaCwIyom0lGgn5suR/8mjfbP0KsI=)
3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: 3sRqg4lZyDDXGUzqLBUb+ZExh0wrRh+8FyVCH1KpgVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Validity
Not Before: Jan 30 20:17:40 2025 GMT
Not After : Feb 6 20:17:40 2025 GMT
Subject: CN=679bde64-44d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:06:8b:7e:4a:f3:b9:30:f2:ec:94:0f:46:
f4:38:64:1c:ee:5b:7e:a2:3b:a7:aa:fb:bd:4c:d4:
e6:8b:41:38:7d:21:c2:28:d7:56:f9:0a:96:b9:a5:
68:52:2e:53:9b:c2:dd:dc:8a:5f:45:4a:c5:16:7c:
26:56:8c:26:14:9c:49:3b:29:c7:97:f6:46:12:54:
fb:9b:63:ca:bb:af:f0:1d:71:03:b6:11:70:0d:84:
cb:a6:98:63:9a:3c:e5:5e:78:90:ea:76:71:5a:8c:
8b:84:a7:21:a3:9a:ef:90:e9:2e:ad:21:bc:b5:b5:
06:01:53:38:ea:00:8c:f5:ce:b7:d1:dd:89:4e:3f:
28:99:09:20:21:1a:8d:d6:26:1e:bf:15:2d:da:73:
8e:0c:c4:c4:c9:72:aa:53:cc:77:34:3b:3d:64:df:
2b:35:9b:68:b6:2c:d7:f5:bc:24:74:90:c0:9c:23:
92:94:76:2f:b4:85:39:39:ed:7e:75:08:89:e7:ac:
8c:c2:89:23:22:12:47:ea:24:95:57:d8:bf:7d:03:
0f:f1:1d:c8:7d:99:cc:cb:39:4b:01:7a:93:4a:da:
36:9a:5a:13:4e:c0:f3:6c:7a:6c:86:75:4e:25:17:
11:79:e5:83:d7:45:66:70:48:3f:5e:6f:3f:d3:f4:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:D4:44:E1:41:48:AC:D6:67:95:78:CA:5B:F5:E9:EE:CC:48:52
X509v3 Authority Key Identifier:
keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:66:31:e1:cd:4d:08:29:0f:96:71:17:7e:f3:8e:4b:28:89:
eb:39:be:18:7d:5e:58:f0:03:f2:37:7a:dd:dc:db:70:8d:50:
29:94:e6:b5:38:34:8e:8a:c5:e5:5f:04:dc:e5:93:9a:2a:1d:
ca:2f:b9:5d:2a:92:b4:ba:de:2e:f8:d5:eb:f1:3e:bd:de:af:
59:1c:5e:1d:20:6f:ce:4f:ed:d2:8a:ae:d7:73:02:69:77:74:
47:4d:a2:49:c8:af:15:51:81:9f:b1:c8:14:f2:64:e5:da:0a:
ff:c5:e7:b8:62:04:b0:12:6f:f7:1d:91:8b:5a:42:f5:3e:16:
22:40:a3:14:b7:e2:18:90:fc:7f:53:37:22:3f:fc:9b:8f:90:
94:8a:26:45:87:36:2b:76:ad:68:42:be:57:b1:63:04:e7:7b:
41:8f:e0:49:8d:e7:5f:cb:65:79:e5:be:d2:44:17:56:dc:42:
17:f4:e3:94:2c:7d:d1:dd:b3:f6:12:ff:a6:3d:e1:91:4d:c7:
f3:39:67:88:20:fe:ac:0c:76:65:cb:bc:db:2e:35:bf:81:5d:
95:42:99:c8:2a:6d:bd:fb:87:1b:e5:2c:65:df:59:3e:ef:46:
33:d4:25:d2:4e:9c:9c:8c:15:7b:87:47:48:c4:72:3c:e3:10:
c7:b0:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:08 2025 by rpki-client