Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json)
Hash identifier: OFaPaWNCHFYne5QE5c09MyZd9UhLTGrRNbwXvzgt6rM=
Subject key identifier: 59:E9:5A:49:2D:D0:8F:A1:67:59:0D:3D:34:F6:75:6D:80:8B:21:74
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
Manifest number: 0376
Signing time: Fri 31 Jan 2025 00:56:54 +0000
Manifest this update: Fri 31 Jan 2025 00:56:54 +0000
Manifest next update: Fri 07 Feb 2025 00:56:54 +0000
Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: /tLdRUAMGsyEqiYkikdaeJKn4nYQjCppaPPovsSyI7I=)
2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Jan 31 00:56:54 2025 GMT
Not After : Feb 7 00:56:54 2025 GMT
Subject: CN=679c1fd6-4fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:09:d2:ff:ec:37:79:5e:fb:ed:d9:4a:19:
80:e7:16:d3:51:73:95:7d:59:8b:5f:6f:06:ab:84:
38:d6:9d:6b:8e:ae:fd:64:69:74:83:63:88:7c:47:
d2:4d:82:d6:c6:6d:7f:ee:ba:ae:70:f5:85:44:e8:
03:e6:e3:d3:b4:72:c9:9f:cb:3b:97:9f:05:64:9a:
18:91:f3:6f:e3:b3:7e:fb:22:da:78:7b:a3:88:8c:
a1:22:da:4a:ea:4d:f4:72:ae:e5:63:65:7d:ac:67:
49:05:31:23:8c:3b:84:90:be:9d:ef:4b:bc:c4:49:
20:3a:46:35:90:29:03:60:59:46:65:ba:6c:34:1f:
78:90:05:90:89:01:4c:1b:25:ca:19:9f:4a:09:57:
75:7e:60:4f:53:ea:03:5d:57:39:e2:d9:4b:08:69:
33:bb:38:4f:cc:08:99:6c:9d:43:83:81:f9:d6:b1:
34:44:b1:84:98:16:24:cd:72:79:3c:1e:f7:f4:f7:
df:6f:d2:47:12:81:b4:ce:70:79:a5:5c:98:74:bc:
bc:d0:13:cb:80:4a:6a:f0:f8:63:aa:ed:95:a2:5d:
45:c7:4c:04:8e:43:24:41:17:3f:4f:e2:a9:d6:4a:
a5:aa:5d:d4:80:49:13:93:dc:aa:20:d2:ca:fe:f7:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E9:5A:49:2D:D0:8F:A1:67:59:0D:3D:34:F6:75:6D:80:8B:21:74
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:bd:40:4d:7b:48:e9:fe:59:b0:0c:ae:f8:3c:12:1d:72:
b5:9f:65:35:25:47:ad:60:0b:99:80:3c:d2:80:b0:49:c3:0c:
4c:77:df:48:ca:4a:ec:88:ec:5e:17:3a:68:63:ae:5d:7f:a1:
0f:09:19:db:c2:b7:b7:80:e8:ca:6f:e1:a2:27:bc:08:bf:de:
ba:ff:63:d3:28:47:bd:fb:05:a9:d9:a5:32:0c:e7:e1:19:63:
a5:de:b0:8c:0e:ff:ba:04:50:00:cf:f3:b8:1b:27:4a:ee:6b:
52:75:1b:cd:70:9e:3d:60:d4:57:dd:38:9c:c5:99:28:37:83:
9c:40:b3:20:d4:db:23:0e:f9:c0:1d:60:cc:4f:b8:9a:63:da:
82:81:56:f5:aa:30:6a:e2:7d:d0:53:7a:a6:e4:4f:67:fd:43:
6c:d9:fd:0a:bc:3c:c5:c4:5f:a4:b8:ee:69:86:6d:b1:be:e6:
cc:fc:f9:a1:50:b6:48:0b:b2:b3:0f:c9:d1:49:6d:9c:d4:e1:
05:59:44:df:fe:87:98:a5:76:1f:fb:0f:3f:97:ec:02:70:4a:
c4:29:f8:20:92:1c:bb:d7:11:2a:6c:2a:5e:49:6f:13:5a:fb:
76:dc:cf:41:55:f8:36:29:c5:32:41:b1:14:a5:83:91:26:99:
15:07:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:14 2025 by rpki-client