Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier: gHtKtTUKi9qLftOer1RmUDCIEAUE4FYDQh6f6EvhKQs=
Subject key identifier: A6:B7:C3:0F:67:60:EC:77:D0:16:7C:A6:6B:B1:78:9C:FF:E0:96:27
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 0575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number: 0571
Signing time: Fri 28 Mar 2025 23:35:16 +0000
Manifest this update: Fri 28 Mar 2025 23:35:15 +0000
Manifest next update: Fri 04 Apr 2025 23:35:15 +0000
Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: FqslJ3u5hdmDqcyBjpjVfGRkJAuwFs6H/wnh/5gUMqQ=)
2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: Vy6NYC5JIjZxR2Zo1j1YR7/JfYdq8GexI/1xooXpvMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C
Validity
Not Before: Mar 28 23:35:15 2025 GMT
Not After : Apr 4 23:35:15 2025 GMT
Subject: CN=67e73234-70fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:b7:08:94:50:ad:10:ba:85:b8:8c:f8:2d:
24:27:bb:b5:79:6e:a4:f5:a2:50:04:74:a3:18:bd:
53:00:9a:61:83:48:24:15:94:b3:7c:88:cf:e0:c5:
91:92:08:9f:85:68:3b:e2:af:5a:12:98:f3:54:81:
78:ae:34:25:c0:c2:25:cc:a8:a7:60:d3:57:cb:20:
69:06:75:ec:ea:06:88:10:b6:05:d3:28:c1:a5:f5:
e0:53:c3:74:83:92:6a:52:3f:d6:65:15:02:0f:bd:
5e:ef:f1:21:68:d0:ba:9c:f4:e1:61:18:83:de:b0:
0b:74:e1:5c:ed:ae:00:5c:bc:3f:43:7e:86:47:e2:
e1:21:40:58:52:25:a0:e3:57:21:3f:e5:8d:13:03:
5a:43:52:ca:07:3d:b6:a3:0c:9f:3a:f2:72:5f:a6:
2f:36:3d:84:2b:f3:60:05:cd:e9:00:56:ab:97:8d:
b2:e7:8a:31:ab:8e:ff:9f:cf:52:71:3e:9c:72:ea:
8a:64:d7:e9:b5:d4:4e:f2:e8:96:60:62:c2:f8:d8:
ed:1a:02:af:27:90:c1:0f:33:ec:20:1e:bd:86:65:
28:9a:78:0f:41:c3:97:f9:1d:8b:d4:c6:9d:54:d0:
79:1b:ee:0a:38:e2:d9:46:b6:5e:5b:40:65:23:27:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:C3:0F:67:60:EC:77:D0:16:7C:A6:6B:B1:78:9C:FF:E0:96:27
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a2:f0:b4:bf:66:d5:1d:4d:27:3d:45:d5:bf:0d:2d:48:4b:
d7:a0:af:f8:7f:14:f3:a4:3f:68:c0:49:82:42:b1:01:fb:42:
29:e3:95:14:c7:5f:77:57:b1:51:2c:fc:f1:a0:de:ca:73:99:
5c:27:ed:0e:36:f9:d5:17:66:59:d5:8e:c7:54:81:8a:01:92:
a6:ed:b4:2c:5e:ba:e7:5d:06:87:5c:0a:97:95:4f:00:bd:73:
6a:42:6b:3c:ef:2a:60:2b:70:b8:aa:2e:6c:aa:46:b6:6a:25:
80:b2:4b:e1:e3:55:b2:ce:c1:f4:33:da:5e:26:1d:7d:12:b4:
8f:59:2e:e2:12:57:27:a8:24:4a:e6:df:a9:f7:bb:77:92:ed:
3a:17:88:4e:b6:76:a2:fd:59:60:a4:b5:30:fb:e3:c4:fe:eb:
8b:43:66:8a:fe:34:7a:db:43:f4:ac:63:be:92:34:f1:e2:29:
51:15:e2:47:28:14:9a:9d:b3:02:70:4a:03:87:da:95:8e:00:
58:67:e1:fb:31:05:1f:c7:29:fd:00:22:40:4d:a2:24:4f:0f:
81:2f:32:84:75:81:fd:4b:5d:98:b7:f5:fa:36:13:65:24:d6:
d8:e1:b3:86:f7:d9:09:85:a6:a5:0d:e6:07:81:8a:cf:f5:03:
99:e6:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:42:16 2025 by rpki-client