Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier: YeycjCMrFAgckjqgNJqcbvqxIWiO3Hnfnfwv/l3Q04c=
Subject key identifier: 11:A5:0F:BA:CA:04:04:0A:3D:34:9A:E7:A6:10:BF:DA:A2:84:3D:1C
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial: 346E
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number: 346E
Signing time: Fri 28 Mar 2025 14:22:09 +0000
Manifest this update: Fri 28 Mar 2025 14:22:08 +0000
Manifest next update: Fri 04 Apr 2025 14:22:08 +0000
Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: G+mhzOP1IVeqUf46ngk2Z4kLfCcFJrVe6ldsWsEq+4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13422 (0x346e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E
Validity
Not Before: Mar 28 14:22:08 2025 GMT
Not After : Apr 4 14:22:08 2025 GMT
Subject: CN=67e6b091-2ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:3d:5b:b1:21:3d:fb:89:69:70:d3:f7:48:
33:92:b0:55:e3:43:55:dc:32:7f:12:9f:5c:b8:8e:
a9:4f:c8:b2:9e:d1:17:fc:ae:94:f3:20:87:76:05:
e3:b3:43:4b:ae:0f:99:47:d5:96:22:77:59:99:88:
99:6a:97:25:ca:c1:d7:8a:24:a4:4a:e7:e4:03:0c:
78:ab:fe:db:73:11:c9:95:aa:98:7d:b5:16:79:87:
ae:a7:de:b1:c7:4d:89:0b:22:21:a2:5f:be:66:10:
d9:43:0d:10:29:9d:5e:1e:22:ec:d2:84:6d:00:1e:
10:22:52:34:bb:e5:ab:7c:5e:4b:8b:2f:81:eb:64:
6e:72:8a:e4:d8:84:34:47:4d:08:52:79:8e:62:22:
ad:2e:2c:1f:16:16:01:7f:fe:e7:23:f1:c0:64:eb:
bf:8d:b5:8e:9f:b0:de:59:b7:d7:5c:b2:36:94:a3:
57:11:66:6d:af:92:08:60:67:83:99:4b:e2:e4:dd:
0d:4d:4d:5b:cd:56:98:4c:ba:b4:e9:bc:62:25:01:
1a:7c:4e:a7:bd:bf:d1:82:1e:f6:c5:01:fb:97:9d:
07:c7:79:19:77:79:b5:82:dd:75:ca:ef:1d:95:8f:
09:a4:21:ac:b7:5d:f0:21:2a:e1:6e:3a:9d:a1:f1:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A5:0F:BA:CA:04:04:0A:3D:34:9A:E7:A6:10:BF:DA:A2:84:3D:1C
X509v3 Authority Key Identifier:
keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:19:f3:4d:d0:af:d4:ad:a5:14:fc:57:f0:a6:d7:9b:f8:
11:b7:a4:d2:af:a8:91:88:b5:21:aa:c4:bd:c2:70:e3:f4:2b:
7b:bd:87:54:68:ea:bf:d3:61:c2:c9:31:ce:f2:a9:1f:95:d1:
d8:d2:1d:64:70:2e:a8:5a:87:47:37:33:68:4c:43:e8:8e:0a:
dd:c2:ff:e5:ce:0c:d2:2a:1c:b0:b1:b6:d9:cd:de:63:ef:d1:
88:cd:3d:e8:61:8d:22:87:bb:20:28:50:0f:e2:21:38:ae:09:
55:0d:2d:12:97:59:83:37:61:e7:d6:99:2f:0a:25:6e:ab:30:
33:13:3d:16:be:57:76:c0:c9:73:e6:5e:9b:87:74:08:6c:43:
3a:c9:cc:ee:69:57:4f:64:54:3b:7b:81:44:fa:7c:60:25:61:
e2:36:3a:ff:d5:2e:8e:16:1f:b8:f9:8a:17:7d:63:1b:a8:72:
36:58:b2:5f:c0:19:79:5a:e5:3e:d5:c2:b9:61:e2:04:1d:6b:
ed:fd:65:f3:3d:d2:51:6c:9b:d8:50:91:24:7f:41:80:3a:f8:
f8:4d:96:c1:66:f6:05:d1:f4:ce:dd:7d:f2:6f:98:ee:47:0b:
1b:af:f2:fd:30:a3:a1:df:f8:71:9c:e2:27:b0:f5:c2:36:13:
48:16:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:36:20 2025 by rpki-client