Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier: Cn3d+NpxAOlOuNC6nglBR0zDdrSp7znfz3ASuDsu82c=
Subject key identifier: 33:E5:99:A9:C9:36:EC:46:ED:C9:9D:69:1B:5B:D9:02:88:10:DC:F1
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number: 06F5
Signing time: Thu 30 Jan 2025 21:53:38 +0000
Manifest this update: Thu 30 Jan 2025 21:53:37 +0000
Manifest next update: Thu 06 Feb 2025 21:53:37 +0000
Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: xo4VS8EYuHB7Ix4X3znUj75liz60goeLjUxqJ/TTXag=)
2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Validity
Not Before: Jan 30 21:53:37 2025 GMT
Not After : Feb 6 21:53:37 2025 GMT
Subject: CN=679bf4e1-e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:6b:d0:73:b6:4b:83:d2:b7:d8:8a:80:af:
26:d9:c6:00:75:da:95:f8:d4:3e:87:de:0a:ab:74:
6f:fa:a0:17:73:cb:02:b9:dc:70:eb:ac:38:a8:c4:
09:f7:41:29:fc:ad:c2:39:43:e8:81:6f:68:3a:3d:
04:e6:ca:a3:64:e5:e3:d6:66:8a:73:b5:e3:20:ee:
ab:95:53:61:01:86:75:fb:4a:64:6d:df:3d:b2:47:
20:3c:4a:8f:32:3f:56:b7:57:c4:ae:9a:11:7a:35:
2f:0f:89:e1:6f:b4:de:fe:cb:e1:4a:bc:66:1b:6b:
06:b5:36:6d:7b:86:2a:c3:01:fe:de:48:12:fc:a4:
49:8e:63:cf:42:ef:4d:5a:57:8c:16:52:00:68:18:
67:64:5d:ed:44:88:d7:64:ad:58:14:fd:2d:c4:69:
0c:40:d5:56:97:6c:45:06:9f:41:6f:61:75:77:2d:
06:c8:ce:8b:95:a4:84:73:73:b5:0d:f7:6d:ee:da:
ad:9d:12:8e:7f:3e:d2:be:2c:20:80:c6:74:14:19:
23:a2:30:e0:ae:b1:53:b3:22:b1:33:98:8a:11:c6:
7d:fa:03:58:d2:5c:e4:7e:ef:b7:40:c5:31:f5:f6:
46:64:06:23:0a:d3:68:07:45:10:7d:27:75:4b:4d:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:99:A9:C9:36:EC:46:ED:C9:9D:69:1B:5B:D9:02:88:10:DC:F1
X509v3 Authority Key Identifier:
keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:b8:74:17:ff:d9:af:65:b9:1e:4b:5b:6d:34:b1:35:78:
66:26:6d:b4:b4:44:79:fa:84:72:d3:2c:7b:5a:9b:4a:e1:e6:
90:5b:ed:5c:b5:fd:52:17:61:f9:1f:75:07:09:09:b6:20:eb:
95:4e:b1:82:0a:97:d6:d9:79:1d:fa:9b:55:64:3f:2f:6f:81:
b1:ad:a6:ef:b1:0d:b3:ce:d1:9e:9d:0c:73:aa:e5:29:06:c4:
43:9d:45:47:c1:ae:b2:9f:42:48:ed:46:1b:c0:92:7f:d8:74:
37:74:4d:b0:2f:ed:de:01:41:10:7c:bf:7b:86:6d:46:b4:b3:
8a:3e:32:72:86:61:22:94:84:a5:62:53:4c:e3:0b:fe:97:0a:
f1:c5:a2:b8:61:d7:89:26:43:a4:de:b9:de:96:47:b1:fa:60:
3d:7b:46:fb:72:85:96:67:b2:53:59:be:1c:08:fc:6b:49:1f:
57:8f:09:1f:33:be:7e:31:84:e6:ee:f9:67:60:a2:76:db:4f:
fe:dc:fb:2f:c4:9c:63:ed:0f:b8:37:fd:53:00:3f:d8:d0:51:
24:54:a7:66:b5:17:61:16:76:60:b6:9c:0a:df:44:b3:15:fa:
89:a3:16:85:57:dd:2e:8e:8a:62:7d:8e:cc:e7:18:41:7c:ee:
09:ef:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:45 2025 by rpki-client