Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json)
Hash identifier: 2l4CALGzlwuhv3DwOpYPDmVnpwzWlRSv4BEOx5R7HXk=
Subject key identifier: 0C:E4:DC:F1:86:27:37:D5:69:D2:39:2A:BB:90:B8:45:32:A3:2F:96
Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
Manifest number: 0425
Signing time: Fri 31 Jan 2025 00:24:18 +0000
Manifest this update: Fri 31 Jan 2025 00:24:18 +0000
Manifest next update: Fri 07 Feb 2025 00:24:18 +0000
Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: IIMDSX7oQEBHWcllCCo7x33ZS2Ph8Ob2L+YAfJGgkgk=)
2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
Validity
Not Before: Jan 31 00:24:18 2025 GMT
Not After : Feb 7 00:24:18 2025 GMT
Subject: CN=679c1832-905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:85:1e:fd:e5:79:41:2c:00:35:27:fc:b5:
39:9a:22:6c:06:48:ae:2a:50:3e:33:35:09:62:98:
86:ad:52:a6:33:c9:e6:d9:fc:97:75:c2:df:36:00:
f8:bf:5c:f2:13:a9:c8:f8:38:ba:46:f3:89:a7:1d:
d3:46:5b:1e:1b:f2:13:0b:68:3e:a8:ab:53:2b:97:
64:0d:df:3f:6b:a0:cf:ef:89:83:d0:a7:2a:12:43:
5c:ef:b1:66:85:3b:4b:13:c1:0a:a3:ff:5e:bd:8e:
a5:a3:24:64:d2:2e:38:69:e1:c6:30:56:eb:30:e3:
f5:7a:34:40:a8:ef:a8:a7:4b:fa:7a:a4:b0:a9:5b:
f3:a3:79:3d:5c:bc:fd:a6:46:74:43:5d:26:eb:41:
3d:5a:4b:84:90:8c:8b:2b:6f:2d:67:fa:a9:03:57:
41:cb:03:f8:6f:40:9f:39:ef:5d:58:99:f7:46:a2:
de:50:e9:36:26:2e:76:b9:dd:e7:eb:48:4e:56:69:
da:92:25:12:3a:62:cc:be:b5:52:e0:85:45:44:6d:
1d:da:a6:5f:53:38:f9:62:a8:34:16:cc:25:62:66:
8d:96:36:dc:a7:23:96:8d:d1:78:8f:89:a3:cb:89:
46:a4:89:13:f6:42:cc:19:c7:e3:bd:00:89:98:8f:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:DC:F1:86:27:37:D5:69:D2:39:2A:BB:90:B8:45:32:A3:2F:96
X509v3 Authority Key Identifier:
keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a4:ec:85:a5:b7:fc:c5:35:03:1f:f5:4c:cc:58:dd:e3:79:
fa:0e:52:f7:51:0d:06:1f:06:73:f7:ed:93:e6:3a:6f:a5:7e:
38:ba:d3:97:3c:9e:aa:4e:27:43:9e:b7:45:2e:16:04:89:ea:
1f:04:3c:46:2e:b5:d7:1f:64:0d:88:f1:29:a8:a5:6e:54:22:
90:63:99:0e:67:c4:f1:a7:51:1d:79:f1:bb:e3:61:c1:48:6a:
9c:4c:9e:55:8c:de:6c:d2:3f:a9:63:44:19:7a:d1:bb:39:7a:
14:da:d2:75:63:00:70:3c:4f:49:9b:90:26:69:ec:18:12:6d:
da:ef:9d:45:b5:bb:a3:66:fe:2d:86:95:a9:5a:da:4c:7c:38:
dc:cf:f8:af:51:10:21:bc:19:1b:ff:89:f4:fb:fa:30:8a:bd:
8f:c7:af:bf:29:7a:6f:2f:df:da:5d:4b:68:75:2c:67:4a:15:
91:a3:43:00:00:90:3d:ab:18:22:a5:9b:a3:b5:91:f8:9c:d5:
40:37:0e:6d:57:b0:83:a2:17:10:09:dc:ca:1c:29:32:12:c6:
b4:e7:bc:1f:34:4d:ab:33:ac:9f:29:9d:7a:7b:c0:4a:c5:0d:
41:a4:a3:68:4e:ee:a6:64:11:45:3d:b3:27:9e:dd:5d:06:6c:
33:d1:32:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3
MTc1NkIxQjAwHhcNMjUwMTMxMDAyNDE4WhcNMjUwMjA3MDAyNDE4WjAYMRYwFAYD
VQQDEw02NzljMTgzMi05MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzKFHv3leUEsADUn/LU5miJsBkiuKlA+MzUJYpiGrVKmM8nm2fyXdcLfNgD4
v1zyE6nI+Di6RvOJpx3TRlseG/ITC2g+qKtTK5dkDd8/a6DP74mD0KcqEkNc77Fm
hTtLE8EKo/9evY6loyRk0i44aeHGMFbrMOP1ejRAqO+op0v6eqSwqVvzo3k9XLz9
pkZ0Q10m60E9WkuEkIyLK28tZ/qpA1dBywP4b0CfOe9dWJn3RqLeUOk2Ji52ud3n
60hOVmnakiUSOmLMvrVS4IVFRG0d2qZfUzj5Yqg0FswlYmaNljbcpyOWjdF4j4mj
y4lGpIkT9kLMGcfjvQCJmI9v5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzk3PGG
JzfVadI5KruQuEUyoy+WMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE
RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD
MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcpOyFpbf8xTUDH/VMzFjd43n6DlL3UQ0GHwZz9+2T5jpvpX44utOX
PJ6qTidDnrdFLhYEieofBDxGLrXXH2QNiPEpqKVuVCKQY5kOZ8Txp1EdefG742HB
SGqcTJ5VjN5s0j+pY0QZetG7OXoU2tJ1YwBwPE9Jm5AmaewYEm3a751FtbujZv4t
hpWpWtpMfDjcz/ivURAhvBkb/4n0+/owir2Px6+/KXpvL9/aXUtodSxnShWRo0MA
AJA9qxgipZujtZH4nNVANw5tV7CDohcQCdzKHCkyEsa057wfNE2rM6yfKZ16e8BK
xQ1BpKNoTu6mZBFFPbMnnt1dBmwz0TIL
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:26:50 2025 by rpki-client