
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier: hiNg/nuRu/esDF+c6FO8xU3AO34QHQCa4T9Nqv8hpz0=
Subject key identifier: 5F:F7:48:93:5C:2B:B7:85:D8:D5:82:52:8E:5A:10:B6:15:79:FD:7F
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number: 0256
Signing time: Sat 29 Mar 2025 02:02:37 +0000
Manifest this update: Sat 29 Mar 2025 02:02:37 +0000
Manifest next update: Sat 05 Apr 2025 02:02:37 +0000
Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: EI47hVhsuUn21d00Siy4TZq9aA+YQlZ1p7xnkXPe7O8=)
2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: H7gFBfSKuVP6R/OmKqYC78WBb2LAqvaWDA0cY1eM3ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143A67
Validity
Not Before: Mar 29 02:02:37 2025 GMT
Not After : Apr 5 02:02:37 2025 GMT
Subject: CN=67e754bd-94d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:5d:18:c7:a4:df:c7:b0:24:3e:91:21:45:
10:fe:96:e0:c5:e2:66:af:ba:45:d8:88:c2:80:b9:
56:ce:cd:55:b0:0f:81:4e:02:5f:3f:cb:43:7b:26:
8b:ac:2b:a6:c1:05:cc:7f:7b:c2:58:fe:2e:21:4b:
2a:38:bd:ce:31:10:09:ec:32:4c:81:2a:0b:94:60:
e7:f4:11:26:83:2c:dd:23:5a:cb:e1:10:bb:28:c9:
03:54:3c:5d:07:47:7f:7b:5a:e5:e2:b0:db:c8:4e:
1d:f5:98:ef:16:06:89:27:85:37:64:f6:9a:31:35:
21:eb:2e:ac:3a:c5:29:ef:41:38:26:18:89:97:db:
92:60:50:6f:9d:3e:45:94:96:80:27:b1:0b:15:ce:
3b:b1:0d:e0:dd:d6:84:3b:04:8c:05:82:a5:c1:a7:
b8:11:d1:9c:b7:2e:16:db:bd:a9:a2:23:59:b0:e3:
2d:07:e6:e1:99:00:db:fc:e3:97:a9:82:c2:01:21:
a7:27:66:50:ff:e9:50:4e:b9:a9:34:9e:3a:5a:b9:
fa:48:53:cc:71:fd:c6:d7:ce:eb:33:e7:e6:33:4e:
f6:78:0c:77:a3:0b:86:13:91:aa:a6:0f:76:6c:b4:
5a:56:fa:20:37:83:63:8b:d8:81:56:5d:66:1c:a3:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:48:93:5C:2B:B7:85:D8:D5:82:52:8E:5A:10:B6:15:79:FD:7F
X509v3 Authority Key Identifier:
keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:eb:a3:32:89:c6:bc:76:c5:56:fa:ab:5a:6d:44:08:a7:a0:
c6:87:d1:c9:65:7b:66:8a:7d:46:29:02:a8:dd:9e:b6:59:ce:
67:46:ab:43:66:1f:c9:15:ec:d2:54:de:10:fe:26:73:47:af:
7a:ac:52:5e:99:91:0c:f9:71:9a:9a:02:2d:7e:8e:88:61:f7:
97:c4:58:52:3d:e4:bb:e4:cb:f6:46:be:0a:03:47:75:ad:4f:
23:b0:b6:85:4b:3e:33:e6:cf:81:15:fb:47:e6:0c:f3:1e:d6:
d5:76:58:18:a2:15:85:b9:7e:c3:46:0d:0d:c9:b1:cb:af:27:
e0:4b:08:e9:1d:9e:71:85:e1:8d:69:fc:b6:ec:a5:99:2c:57:
ba:0f:51:2c:f2:fc:7e:96:ff:2b:87:00:3d:32:b5:9e:8e:63:
3e:d6:71:bc:42:2c:b5:32:9e:32:48:f4:d6:f5:23:78:80:e7:
89:49:ce:50:95:60:65:65:81:d0:a3:49:ca:2e:77:b7:cb:9a:
ab:3c:e7:d1:70:8f:55:e6:cf:06:eb:cf:ef:af:7b:14:89:8b:
4d:78:20:2d:35:b6:47:8e:0e:53:d9:53:aa:54:27:a0:f1:24:
61:9d:67:96:b4:41:69:b0:f0:bb:7b:82:30:ec:82:4b:fa:76:
f7:28:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:18 2025 by rpki-client