Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json)
Hash identifier: kM+VKeI/RMPqBfbwZr9QUNfel4x/2S79LusBF1FSWjw=
Subject key identifier: DD:02:66:03:CF:AF:BA:13:58:EE:10:DB:33:4D:26:00:B5:82:58:DD
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
Manifest number: 0391
Signing time: Fri 31 Jan 2025 00:52:12 +0000
Manifest this update: Fri 31 Jan 2025 00:52:11 +0000
Manifest next update: Fri 07 Feb 2025 00:52:11 +0000
Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: fGFeKNky4NTOkhVhCTVQ3GTb4BJ/uQG9mzv3f1Sp7yE=)
2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Validity
Not Before: Jan 31 00:52:11 2025 GMT
Not After : Feb 7 00:52:11 2025 GMT
Subject: CN=679c1ebb-34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:12:e5:c8:19:3c:c8:24:63:58:9d:2d:0b:
74:37:e1:ac:8c:c4:fa:0d:41:ef:f3:7d:1e:e9:d8:
4e:7f:e2:3e:bb:16:5f:16:82:4c:50:e1:82:f8:ad:
54:0b:d1:37:49:d7:7c:a9:d6:7c:d0:a5:53:d9:38:
92:09:bd:31:46:e4:88:80:14:95:07:43:e6:0c:9d:
b9:1d:cb:50:f2:da:58:46:28:65:17:65:ff:5a:35:
e6:85:f0:9c:0e:fe:fb:82:c3:d3:74:33:52:dc:6f:
17:7c:51:2e:1d:a5:b4:7a:5e:38:40:3d:14:a4:25:
14:13:a4:5d:e8:93:12:5b:59:f4:9a:0f:92:f3:a1:
3f:bd:be:56:18:3e:4e:08:00:af:a3:14:59:df:43:
27:12:d8:38:aa:2c:7e:3d:a0:81:21:fc:2a:53:bf:
f1:f2:3e:42:e9:73:26:f3:75:ae:25:b0:19:b1:0a:
43:b3:a9:32:6c:f5:b2:6c:7b:fb:d2:b4:2c:16:03:
94:70:a9:51:0b:52:1a:1d:f8:bf:a0:fa:dc:46:9e:
a7:c3:75:41:14:d9:07:99:36:64:40:6f:ad:be:fc:
0c:ea:dc:64:47:d1:3b:c6:4b:b6:8e:86:d7:96:60:
3c:09:2b:60:40:0e:a5:44:c6:d6:6e:9f:f4:d8:bb:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:66:03:CF:AF:BA:13:58:EE:10:DB:33:4D:26:00:B5:82:58:DD
X509v3 Authority Key Identifier:
keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:19:f6:a2:95:c6:6f:b0:0e:fc:8b:98:65:f0:70:60:24:e2:
d3:3f:71:c6:21:99:c1:f4:59:19:78:c6:88:99:8c:15:7d:4c:
04:7a:d2:a7:7e:ec:fc:6a:42:fb:61:30:08:f6:89:4e:95:f8:
b3:86:a7:9d:46:ed:bb:86:24:5d:38:4a:64:fe:63:82:5b:64:
7b:e7:7f:a4:4d:aa:fc:df:0a:bc:c9:c4:b0:86:cc:8f:eb:4e:
a1:bb:08:c8:8b:a5:e8:c4:31:43:87:b6:cd:45:a2:82:16:10:
85:eb:b1:51:15:5b:59:92:59:14:c2:c9:46:58:10:b7:ab:c8:
6d:a9:9d:df:c3:2b:1f:0e:c0:41:dc:62:78:33:4f:20:bd:c5:
06:83:e4:d2:e6:50:6c:03:d4:3a:37:c3:19:63:cd:dd:d6:c3:
ff:98:c7:17:87:f0:02:63:dd:2d:b2:90:eb:2d:77:6d:51:4a:
34:ce:dc:ab:02:05:b7:3a:b2:47:9c:f0:c1:ac:96:c7:b8:08:
29:b7:c9:69:6c:86:dc:05:90:2c:75:44:04:b9:0b:d9:12:82:
a5:a9:52:fb:2e:ce:fb:6c:71:89:ab:13:32:cd:04:d7:85:e1:
44:f1:eb:d2:a5:81:08:6a:2b:0b:df:8a:9a:1f:ea:30:17:fa:
25:bc:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:36 2025 by rpki-client