Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier: 8yODiRU9VxzB38KgY8xF+vG5Yzx9zNTFF9HBm+UOPIw=
Subject key identifier: 80:8C:79:A9:C7:E4:74:30:5A:E2:3A:B9:F2:31:08:FE:B7:CE:44:C3
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 1839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number: 181F
Signing time: Fri 28 Mar 2025 16:37:50 +0000
Manifest this update: Fri 28 Mar 2025 16:37:49 +0000
Manifest next update: Fri 04 Apr 2025 16:37:49 +0000
Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: uenRD3Hw5ardzprN+PM/+YArT37aMhx2SoUUZiqleds=)
2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=)
3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=)
4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6201 (0x1839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF
Validity
Not Before: Mar 28 16:37:49 2025 GMT
Not After : Apr 4 16:37:49 2025 GMT
Subject: CN=67e6d05e-0e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:6b:c6:2b:30:55:f3:49:80:25:b9:74:63:
c4:4a:26:d3:a6:bc:27:84:d8:e5:cb:7d:06:c3:c7:
e4:b1:a6:4b:b4:d4:7f:64:f1:c0:67:91:54:eb:c5:
54:16:43:32:b2:44:5e:77:5a:d2:d6:b0:cd:75:24:
d8:c5:11:57:dc:bd:37:03:06:a9:a0:2c:29:cc:96:
3a:cc:ec:03:7c:e4:29:6d:a6:ae:df:87:7c:c7:2f:
8a:dd:bd:02:a8:10:1b:9a:86:af:5a:ed:d9:c2:93:
f0:50:a0:49:7d:dd:c3:14:b6:81:90:08:a0:32:a6:
17:ee:72:c4:c2:93:49:74:5b:af:c7:ce:35:f6:62:
60:96:0d:38:2f:55:b8:54:e2:07:06:2f:40:39:94:
b6:52:75:02:ea:29:a1:29:22:81:5b:b4:f0:96:bc:
d9:10:92:8e:8a:40:93:0c:70:cd:2b:5e:d4:cd:7c:
61:9e:42:d8:77:e5:51:0d:6f:96:ec:d6:77:0e:d3:
6f:5a:a2:af:80:a7:f0:36:e7:62:ce:25:f8:f2:ce:
c0:17:e5:86:90:32:65:43:aa:69:1d:4f:ca:92:3a:
9d:fd:a2:1b:6b:4c:a7:5f:cc:26:a3:fb:0b:5f:95:
90:07:48:7f:8a:73:ba:19:12:14:26:a9:7c:e9:02:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:79:A9:C7:E4:74:30:5A:E2:3A:B9:F2:31:08:FE:B7:CE:44:C3
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:27:1d:30:5b:0b:69:3c:e0:9d:4f:c9:b6:b6:dc:42:35:
74:29:08:b4:29:09:1d:e3:fa:50:a5:14:91:98:bd:56:44:e7:
85:0c:28:88:f1:54:5b:3f:86:2a:9c:c2:03:d6:69:e3:6f:f4:
1e:a6:3a:f1:05:f0:7b:a7:d5:60:1d:3e:06:a2:1b:aa:5f:c0:
c6:8f:e4:bf:b0:20:9a:3c:52:63:de:ce:07:5c:24:4e:e0:c0:
2b:c0:b9:c1:99:53:69:8d:2a:3c:1a:6a:6a:13:77:b2:96:61:
de:73:7e:df:57:ae:8e:6b:84:11:08:cb:df:6e:b9:7f:37:1b:
a7:30:c8:11:79:5a:ae:e7:3b:22:b9:ce:74:8c:9b:55:14:09:
2a:1a:bc:0f:85:7a:96:48:e5:ef:9e:d0:09:5d:4d:37:5a:60:
a5:f6:aa:9f:4e:be:79:51:ec:14:8d:c7:b2:13:e7:ba:ec:d2:
ed:20:fe:6a:27:59:7d:e4:3a:da:a9:5d:61:15:c4:da:e5:13:
a4:a8:7c:88:01:8d:e5:48:ab:1b:b9:49:87:4e:f7:7b:a4:d4:
db:80:93:6a:04:33:15:5e:11:20:13:b8:a5:fc:17:a8:01:9b:
85:1d:8c:07:1b:d2:be:88:37:ea:40:b9:85:be:2a:e7:8b:61:
11:3f:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:30 2025 by rpki-client