Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json)
Hash identifier: lZJLGMXrMzoRc+0z43L3NBbtq7f53qzBWWTi3nnhb0Q=
Subject key identifier: 8A:AC:0F:B9:54:67:61:C1:CC:D8:A3:AE:5C:7E:F6:8F:D2:42:50:24
Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
Manifest number: A3
Signing time: Fri 31 Jan 2025 05:18:56 +0000
Manifest this update: Fri 31 Jan 2025 05:18:56 +0000
Manifest next update: Fri 07 Feb 2025 05:18:56 +0000
Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: HBZLIaIPxwhtmrG8qqvIyClFKStUchq7C8jLDkRuzI8=)
2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: y03lKIB42nw4jlkFQ7G75iFQPvcCfwFRDTzAnmoLg+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Validity
Not Before: Jan 31 05:18:56 2025 GMT
Not After : Feb 7 05:18:56 2025 GMT
Subject: CN=679c5d40-7a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:50:b1:74:22:c0:ac:11:b0:01:66:df:b3:
bc:54:ba:55:42:1f:d1:89:ef:ba:d2:bd:86:d2:c3:
76:c5:37:58:e4:7c:73:a3:ca:22:22:e3:3f:65:e1:
36:0a:9a:d8:5b:f5:9c:30:95:d4:18:89:10:8b:12:
5b:58:99:fe:5e:67:03:4d:2f:bb:9c:4a:25:c8:20:
28:50:29:ca:94:22:9f:ea:5c:04:bf:c7:6d:fa:6c:
d3:7d:8f:a7:52:d2:b0:06:e7:76:3b:88:6d:e1:95:
63:47:bf:59:8d:96:42:9c:b8:fd:e7:59:27:67:a7:
e9:59:0f:cd:4a:bd:9b:7f:e2:2a:e1:2c:7e:9e:a4:
9a:dc:a4:dd:38:07:34:cf:5e:61:af:70:ba:a3:ea:
7e:c2:55:14:0a:1e:94:07:f3:e3:94:ee:ab:c3:31:
d7:ec:04:f7:83:58:29:4c:44:17:5c:8b:ef:9c:da:
5d:81:ec:c4:59:b5:66:09:ab:2c:d4:c9:0c:bc:de:
b1:25:00:3d:df:fe:a0:22:b3:25:d0:c9:99:51:6d:
52:37:e7:15:d0:14:a3:38:00:d4:5a:31:79:47:1c:
73:ee:69:76:1c:99:5d:1d:87:52:3d:a1:59:e7:6e:
e4:74:5e:c2:4c:da:33:dd:26:c3:2a:60:7f:66:58:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:0F:B9:54:67:61:C1:CC:D8:A3:AE:5C:7E:F6:8F:D2:42:50:24
X509v3 Authority Key Identifier:
keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:9b:49:84:fb:c2:1a:91:1a:00:5c:75:17:9a:00:93:a2:
fa:95:be:3d:32:88:d9:7a:37:be:a6:9e:0f:b6:8f:61:e2:6e:
7b:70:e1:4f:b6:55:4d:c6:66:21:32:f0:6c:e9:c1:b6:08:1e:
5a:21:99:61:ee:09:15:7e:8d:f6:dc:8e:0c:dc:fd:f1:69:99:
c4:08:f0:c0:43:2b:eb:ab:7b:ff:0a:92:dd:b8:a6:d9:33:33:
85:46:76:27:22:f4:bf:8d:1e:ba:f6:5c:cf:70:f9:1a:87:f7:
74:d7:bb:8e:7c:b6:8a:5f:fa:9a:80:b7:02:67:4c:ad:5a:87:
0c:4b:7d:53:2e:75:8c:cd:4c:e4:e5:32:01:4e:a0:db:30:63:
e1:7a:c0:e7:ef:c5:5c:67:fa:74:e0:a4:89:24:7f:61:ec:fa:
6f:60:38:8e:62:1c:4e:b8:40:b3:93:9e:6c:64:3b:fd:07:0c:
3b:70:4d:63:e3:30:3b:0e:3f:9f:c5:74:53:cd:b7:a1:79:6f:
4e:43:be:49:43:b9:14:b0:82:a7:1f:9b:72:b6:cd:ff:2d:57:
6b:4a:38:85:16:d6:e2:0b:bf:66:d7:21:d2:18:36:82:bf:bb:
bc:15:06:23:fc:67:f9:10:53:2c:9f:4a:dd:ab:e1:bd:9f:35:
f0:cd:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:21 2025 by rpki-client