Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json)
Hash identifier: bXp5DWGC1SJwPRD24wsSzb4xra+vTEv9UOtg4uAEGao=
Subject key identifier: 58:33:D0:A8:96:18:7E:B1:A3:AD:EE:BD:5A:38:97:CD:F5:06:01:02
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial: 0610
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
Manifest number: 0609
Signing time: Thu 30 Jan 2025 22:48:36 +0000
Manifest this update: Thu 30 Jan 2025 22:48:35 +0000
Manifest next update: Thu 06 Feb 2025 22:48:35 +0000
Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: Mo15XU+WbTczTr/M7Iq1srODOTPeP3LzwEfRR4hyWgU=)
2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: 01f25j3R54MWvOTz10L2YoiOpP1/37rLlOmREDYrZ44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Validity
Not Before: Jan 30 22:48:35 2025 GMT
Not After : Feb 6 22:48:35 2025 GMT
Subject: CN=679c01c3-7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:35:2f:84:d9:eb:35:bc:4c:35:b9:97:e1:
47:aa:ab:3c:20:fc:97:3f:12:e0:f7:7c:90:4a:e6:
ae:f8:47:ef:34:17:20:80:75:03:97:01:d4:77:f7:
dc:00:8f:f1:7d:66:16:00:35:dd:30:e1:2d:bc:47:
6c:b0:e3:c2:5e:cb:ce:99:9c:94:e6:7d:1c:52:c4:
fd:73:ea:f8:ac:a3:30:f8:d7:76:2d:c7:a1:7e:c0:
8e:5d:fb:cf:b3:1c:34:8d:09:e4:d8:29:6e:a8:32:
57:fa:e5:cf:a7:06:ac:a9:8e:a9:51:ba:5a:aa:99:
76:00:33:5a:53:6c:fd:9d:51:55:0c:54:06:b0:05:
e7:ad:f7:4f:0b:54:3a:49:eb:13:26:94:cb:94:24:
72:a9:71:4d:b8:7e:20:bd:b3:30:67:c2:3f:47:ea:
c8:10:61:11:d4:68:4e:1a:bd:db:07:fe:4b:40:49:
5b:db:62:e5:a7:b0:51:38:f5:16:aa:77:93:28:b9:
02:2a:f4:3d:7a:35:a2:70:f4:be:5b:ba:28:20:66:
e3:c8:8a:2a:a1:97:da:d8:4e:42:b9:78:f9:97:e0:
37:56:b2:6b:ee:d0:a3:01:11:85:ba:52:1f:d3:8f:
65:97:e7:d2:22:d0:95:1a:c0:b6:7a:1d:a6:9b:df:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:D0:A8:96:18:7E:B1:A3:AD:EE:BD:5A:38:97:CD:F5:06:01:02
X509v3 Authority Key Identifier:
keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fd:4c:42:d5:5c:7b:97:6a:2b:d8:1c:9b:a4:cf:9d:81:50:
aa:8a:63:71:9e:4f:a9:1f:24:4f:13:66:64:7a:82:2c:0c:fc:
1a:ff:d5:34:3f:14:7f:2f:0a:d2:0b:e7:c0:ac:42:cd:f9:ee:
b9:fe:4d:7d:9e:83:65:f9:36:bc:1e:3a:4c:06:72:35:a8:d4:
09:b9:1b:30:43:05:45:17:f5:bf:b2:3f:76:b8:f1:a6:65:9d:
f0:52:4e:31:19:89:26:c4:4a:7a:c2:6b:fc:72:53:6c:26:a1:
04:e6:5b:b0:34:7b:59:17:ce:31:3a:0c:3b:67:b7:0b:1b:86:
21:af:f9:bb:f7:19:58:83:6a:d1:31:ce:3b:0b:cd:51:d3:e7:
43:f1:c9:9f:e6:a6:d5:57:4a:55:a4:02:2d:95:9f:d3:ce:38:
e5:bc:2b:c3:1f:43:39:13:fd:44:cb:46:52:eb:9d:c1:d7:44:
53:d4:50:b3:66:51:ea:29:dd:be:16:d9:dd:ac:2d:eb:f7:07:
63:b7:3c:bd:cc:8e:1c:5d:73:86:92:e6:47:52:b9:bb:cb:15:
94:5e:17:1a:40:d1:08:db:46:ed:c5:fc:5c:36:df:b7:75:17:
3b:bc:fb:b2:82:45:d2:9f:94:c3:98:0a:a2:b4:2c:cf:1d:93:
56:a1:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:35 2025 by rpki-client