Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier: /96B2Y3kwOs40Tp5F1JTzZ0dtShkt4ugMW+kwiCrR9w=
Subject key identifier: AE:83:65:5B:73:22:93:96:2A:A1:73:42:45:2A:78:42:20:82:43:EC
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number: 01DA
Signing time: Sat 29 Mar 2025 02:22:37 +0000
Manifest this update: Sat 29 Mar 2025 02:22:36 +0000
Manifest next update: Sat 05 Apr 2025 02:22:36 +0000
Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: xYyC+eeJZihd7tQ0DSpjZ1mxuU7YqGqZ5/wnV79UVR8=)
2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E0D7
Validity
Not Before: Mar 29 02:22:36 2025 GMT
Not After : Apr 5 02:22:36 2025 GMT
Subject: CN=67e7596d-690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:78:12:5e:cf:8c:20:d7:cc:78:3e:f1:0e:
cb:a0:36:52:fa:93:0b:2b:cc:35:21:b7:1b:aa:b5:
0e:af:99:57:19:02:fa:97:1a:ee:89:2e:c6:9f:b3:
8f:8c:e0:cd:27:8c:44:ca:7c:eb:78:b0:93:fc:ae:
5e:3d:96:ac:f2:91:43:80:3e:d5:ee:c9:27:44:01:
e5:7d:bb:19:6a:0a:e6:1c:45:62:33:f2:fa:47:fa:
6b:dc:e4:c5:7f:d3:ac:7e:ff:23:6d:1a:a7:1b:8e:
3b:0e:dc:ac:6f:bb:7b:f1:b8:5d:21:4f:9c:b4:7b:
fd:36:d1:a6:bc:f2:25:e4:39:d0:dc:08:f2:10:5b:
53:95:41:7a:53:dc:95:8a:01:38:87:44:66:ba:49:
d9:5e:bf:8c:2b:67:cc:95:f6:bb:10:5e:55:9c:f7:
72:9e:9d:44:5e:72:2b:c4:da:7a:89:0a:9f:17:fc:
f9:9a:a4:ce:9f:7b:bf:f5:66:54:67:76:e5:ce:6a:
f2:b8:f2:11:f8:1b:dd:c2:e6:f2:b6:8a:4f:89:3c:
c7:b8:1a:59:78:73:0e:26:a3:c5:3d:13:45:66:85:
c7:16:76:64:4c:1a:49:d8:7a:0c:d6:e6:83:44:f7:
58:a4:b5:33:6e:2e:8c:ce:c6:6a:7f:c6:3b:8b:29:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:65:5B:73:22:93:96:2A:A1:73:42:45:2A:78:42:20:82:43:EC
X509v3 Authority Key Identifier:
keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ca:d7:5a:27:30:1a:7e:35:a2:55:ac:0d:58:39:d8:e0:0e:
bb:6c:34:83:5a:f0:4a:e3:24:da:f7:8d:6f:b6:89:1f:3b:ba:
6c:3d:d7:d2:81:6e:14:24:b9:ec:0a:23:32:6e:1e:91:37:49:
5d:f9:e2:a5:ef:87:22:4c:1f:ae:86:2b:ef:10:65:9a:bf:0c:
70:01:76:0f:d1:52:2b:23:05:fb:25:7c:bd:a2:ec:46:6f:72:
34:d6:db:f4:26:50:b3:1f:a4:a4:e2:ab:cf:25:42:45:94:07:
e0:d9:45:0f:dc:d4:3e:71:70:bf:f4:78:de:4c:50:0b:5f:14:
41:ce:e4:ed:51:a3:ab:a8:a5:2e:2d:5c:4d:14:95:fa:e5:8a:
9d:4c:6b:a3:23:83:55:81:b7:2a:e2:a0:b8:d5:2e:eb:65:8b:
23:a2:c8:d3:4c:e4:57:ce:89:dd:73:7b:b7:26:bc:3d:19:2b:
ed:25:57:09:72:7b:50:d5:35:4f:9b:3a:ef:7c:cd:3e:17:f0:
1e:f9:df:ed:9f:6d:85:c6:e2:6c:0f:05:5d:2d:3e:85:51:0f:
a6:e5:20:bf:29:ba:a4:75:f1:0a:bf:be:c4:70:ca:8a:01:30:
70:ae:84:a2:ee:7f:01:eb:99:20:70:cd:a9:f4:80:05:2e:98:
17:a3:db:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0
MkY2QTY2MEQwHhcNMjUwMzI5MDIyMjM2WhcNMjUwNDA1MDIyMjM2WjAYMRYwFAYD
VQQDEw02N2U3NTk2ZC02OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Hp4El7PjCDXzHg+8Q7LoDZS+pMLK8w1IbcbqrUOr5lXGQL6lxruiS7Gn7OP
jODNJ4xEynzreLCT/K5ePZas8pFDgD7V7sknRAHlfbsZagrmHEViM/L6R/pr3OTF
f9Osfv8jbRqnG447Dtysb7t78bhdIU+ctHv9NtGmvPIl5DnQ3AjyEFtTlUF6U9yV
igE4h0RmuknZXr+MK2fMlfa7EF5VnPdynp1EXnIrxNp6iQqfF/z5mqTOn3u/9WZU
Z3blzmryuPIR+BvdwubytopPiTzHuBpZeHMOJqPFPRNFZoXHFnZkTBpJ2HoM1uaD
RPdYpLUzbi6MzsZqf8Y7iym7bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6DZVtz
IpOWKqFzQkUqeEIggkPsMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF
Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U
QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsytdaJzAafjWiVawNWDnY4A67bDSDWvBK4yTa941vtokfO7psPdfS
gW4UJLnsCiMybh6RN0ld+eKl74ciTB+uhivvEGWavwxwAXYP0VIrIwX7JXy9ouxG
b3I01tv0JlCzH6Sk4qvPJUJFlAfg2UUP3NQ+cXC/9HjeTFALXxRBzuTtUaOrqKUu
LVxNFJX65YqdTGujI4NVgbcq4qC41S7rZYsjosjTTORXzondc3u3Jrw9GSvtJVcJ
cntQ1TVPmzrvfM0+F/Ae+d/tn22FxuJsDwVdLT6FUQ+m5SC/KbqkdfEKv77EcMqK
ATBwroSi7n8B65kgcM2p9IAFLpgXo9st
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:10 2025 by rpki-client