Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier: usIdIwaFR+wDzw1tS/Pyw2y19Tue6mAB1OiA9b0Eeeo=
Subject key identifier: DC:99:DB:DB:5F:64:DB:E2:5A:3C:C3:EF:6F:D2:F6:BA:95:17:CF:99
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number: B0
Signing time: Sat 29 Mar 2025 05:24:48 +0000
Manifest this update: Sat 29 Mar 2025 05:24:48 +0000
Manifest next update: Sat 05 Apr 2025 05:24:47 +0000
Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: b1UanbCXE6D46eCvz2HN+VfQJCdBZfvP3pR5ewN+B08=)
2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA48
Validity
Not Before: Mar 29 05:24:48 2025 GMT
Not After : Apr 5 05:24:47 2025 GMT
Subject: CN=67e78420-334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:96:13:26:dd:68:0e:22:5e:b3:e5:d1:3b:
8b:b6:c9:66:d8:a3:e6:ed:f6:8e:55:ce:37:e5:5e:
dc:de:e0:a5:82:39:67:91:3e:20:2d:14:63:6d:17:
6a:49:73:75:cb:61:86:e8:f7:b1:a0:3e:d0:9c:98:
f8:61:f9:44:6c:e7:fb:f7:ec:68:ed:67:f7:cf:40:
7e:72:f4:7c:e0:11:8e:23:f5:13:e7:c7:95:e9:19:
88:fc:7f:05:16:a8:68:63:dc:e4:8e:42:fc:39:78:
30:3b:3f:a9:e4:30:7b:5d:6b:53:06:f7:de:11:c7:
ff:1d:7f:d3:11:07:4a:70:13:10:f9:17:db:29:d9:
ef:bc:b2:79:ba:67:83:eb:57:dd:6f:25:f1:4f:fa:
34:1a:f8:e8:c4:9f:1a:a8:61:6f:60:72:64:73:d6:
1f:33:98:b9:c1:46:10:19:78:ec:39:57:16:98:95:
9b:04:a5:05:11:8f:cd:c3:2c:26:f5:5d:60:f7:28:
d9:21:5c:9e:2c:bc:4b:dc:4d:6d:fc:ef:ff:c7:4f:
58:1c:e6:5f:9c:43:22:c1:05:7e:73:d6:a7:85:aa:
28:b3:aa:61:58:ee:64:73:59:a0:20:39:f1:a7:31:
6b:3a:9c:dd:26:9e:2c:ee:0a:07:7d:33:91:71:eb:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:DB:DB:5F:64:DB:E2:5A:3C:C3:EF:6F:D2:F6:BA:95:17:CF:99
X509v3 Authority Key Identifier:
keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:32:50:51:90:67:b4:be:02:b2:13:5b:fa:95:72:7b:89:89:
65:26:dc:c6:a3:0e:5e:57:a5:bc:85:cf:87:45:7f:8c:2b:4c:
b9:3e:b7:7f:7f:7e:3e:57:6a:ff:41:60:12:1f:8e:ef:ec:d0:
ef:10:70:95:a4:c3:17:ff:2a:21:f7:42:43:38:ee:5e:61:b4:
a6:e5:ae:c6:ae:03:6a:4b:04:e1:9a:a1:c9:c2:52:83:53:0c:
bd:0f:36:8d:cd:cd:61:36:40:35:39:ff:c7:28:cc:ef:8e:cf:
ae:40:e5:cb:91:7e:47:af:84:be:3a:b0:29:f3:7a:79:a3:3b:
99:fd:db:49:bc:b5:23:84:0e:0b:1c:43:78:f2:9d:8d:07:b6:
8b:33:c3:a0:5e:9d:a0:21:45:c6:9a:17:a5:49:30:b2:ed:2f:
d7:3e:e5:c8:19:62:d4:43:40:36:b0:15:b5:18:1b:c0:6a:bd:
58:d8:ca:48:5a:b9:e1:51:96:99:15:a1:fc:ce:05:a8:67:b3:
dd:90:54:e4:42:e7:1f:d4:ae:c9:27:69:3d:a4:7e:ac:be:7d:
43:b5:61:08:3f:eb:f2:5c:93:7e:f8:5c:72:67:d7:41:6b:95:
85:9a:d9:ab:c6:d9:4a:40:b2:b1:3c:fd:d9:cb:ac:f4:32:e3:
c2:46:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:42 2025 by rpki-client