Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier: YJfafHTjfDOgRUQj0IJJaUvE8X5GYy9JXjLcxOz+w3E=
Subject key identifier: 6B:09:52:FF:9B:EA:0F:99:AA:54:10:9E:02:AC:E2:18:50:65:7C:D5
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number: 01CC
Signing time: Sat 29 Mar 2025 02:26:21 +0000
Manifest this update: Sat 29 Mar 2025 02:26:21 +0000
Manifest next update: Sat 05 Apr 2025 02:26:21 +0000
Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: YCCgJStK0wFEkEyM/G0tD6ZizBpb4V8mjkMMs5Ep5Hc=)
2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DED4
Validity
Not Before: Mar 29 02:26:21 2025 GMT
Not After : Apr 5 02:26:21 2025 GMT
Subject: CN=67e75a4d-2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:6e:4a:66:a4:98:53:64:09:89:27:6f:6e:
f9:63:41:c3:97:91:54:31:b5:a4:b1:c6:be:88:c6:
b7:77:63:62:cb:bc:91:71:a4:7d:53:83:3c:4a:0b:
7c:50:95:d3:4e:10:5b:56:c5:cc:51:3e:8c:18:20:
6a:33:15:ba:bc:e7:11:46:06:da:41:5c:d4:ee:1b:
03:83:ba:f2:3e:da:a0:c1:fc:58:78:a9:7a:52:b1:
d2:ef:6c:48:05:0a:af:21:04:13:b4:da:ba:02:5d:
47:20:5e:45:32:db:50:5a:dc:b2:d3:d0:2a:1f:d0:
52:74:d0:46:d6:62:97:07:a9:38:4b:42:f2:df:f6:
ee:e6:9e:75:84:21:dc:36:d9:cd:de:2a:65:ab:a6:
9e:7a:22:c9:c0:b8:8c:b1:26:7d:e7:0f:16:c7:18:
db:87:85:d6:91:75:26:08:7b:27:9c:7a:3c:64:3c:
68:64:5e:4f:ed:29:73:ca:f8:d8:3b:7f:de:86:a5:
d4:8c:52:2b:70:8f:ab:ca:40:56:67:f0:e8:6b:cb:
0c:aa:9a:5e:62:a3:f3:4e:01:78:eb:11:4e:aa:cc:
b9:ad:49:d9:29:49:c8:c7:3a:00:f8:ef:74:63:8d:
6c:01:d1:2e:e6:fe:29:f5:dc:9d:a0:12:31:84:e3:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:52:FF:9B:EA:0F:99:AA:54:10:9E:02:AC:E2:18:50:65:7C:D5
X509v3 Authority Key Identifier:
keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:2f:f7:40:40:a1:99:d6:94:d5:43:0a:98:ad:89:4a:45:3e:
25:f5:7c:ed:80:d6:73:3e:ae:ac:de:25:7f:41:2c:f9:4c:56:
ee:12:33:b8:33:3c:ae:00:52:1b:82:4f:72:72:5c:1f:94:ac:
64:49:d9:4f:d4:de:d0:54:f4:aa:42:d7:75:51:08:9d:6d:16:
8b:c7:3c:1f:16:29:8f:e4:dd:a5:21:fe:14:a7:03:41:84:7d:
df:75:f0:38:42:92:35:56:59:34:95:a1:b3:51:a4:07:af:74:
5f:71:ba:4d:b3:8d:e1:f6:d0:cf:d7:3c:79:7c:4f:99:a7:79:
1f:1c:0c:8a:c0:ff:25:e1:f9:03:7e:b6:60:04:04:94:81:f2:
d4:50:ef:10:c4:ce:b8:eb:ac:35:70:bf:83:d6:ec:3a:16:c9:
20:4b:36:fc:5d:8a:d4:02:f5:a9:78:3a:91:92:a9:fa:6d:1d:
ba:87:21:52:50:7c:b4:4b:c8:d9:06:f2:67:91:1e:9d:20:df:
6a:1c:ad:d8:9e:27:54:20:8f:bb:5f:13:f4:a1:70:0c:75:09:
ac:e6:32:25:34:79:ad:ec:8a:46:bb:a5:37:05:1a:87:43:cb:
13:db:f5:6c:ee:cb:e4:f9:b6:5c:61:b8:94:f3:fe:50:d0:17:
7b:be:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:40:21 2025 by rpki-client