Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier: Z9/ym6wlhHuyRjoe83alwI08aBmOaGdzTatZOUjwY9Y=
Subject key identifier: D7:73:22:2B:23:93:46:57:33:2D:49:8C:C0:91:35:8C:D6:FD:16:DF
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial: 26CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number: 26BB
Signing time: Fri 28 Mar 2025 15:45:46 +0000
Manifest this update: Fri 28 Mar 2025 15:45:45 +0000
Manifest next update: Fri 04 Apr 2025 15:45:45 +0000
Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: cTZP4uehO/Ma7DSOYt6+L/AKJ3eQ+vfdUIteByBxRgI=)
2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: AGdYmprG1+spdhAmRDse9H6yLxE5LG56xPYvpdtuuFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9930 (0x26ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151C9D
Validity
Not Before: Mar 28 15:45:45 2025 GMT
Not After : Apr 4 15:45:45 2025 GMT
Subject: CN=67e6c429-0072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:1d:a6:b0:9b:87:45:f1:f8:3d:e6:2f:90:
aa:6d:f1:a9:52:98:cf:c4:25:91:1f:5f:d7:b8:b7:
ff:bc:67:aa:d9:b9:c5:76:0c:0c:66:3a:78:23:89:
55:30:a6:7f:31:08:59:59:63:4b:3d:61:05:90:24:
23:4f:a4:58:45:31:d4:9c:63:53:d1:62:e3:de:a8:
cd:a7:c8:77:52:a4:21:03:4e:40:39:bf:11:e9:a5:
39:f8:d1:3e:74:54:6b:fa:f1:71:79:45:6c:e3:4e:
1a:b5:a8:df:32:b0:25:15:77:83:20:02:b3:f2:7f:
85:39:20:aa:5b:04:eb:99:bd:d4:16:5a:38:51:3d:
5c:03:8b:ea:7e:88:e0:d8:3a:20:fe:01:85:e1:f6:
72:f1:6c:8e:67:28:16:ce:72:ba:97:a2:6a:ad:e5:
01:f9:ca:38:4a:9b:cf:ec:73:f8:c3:10:85:ee:10:
f9:36:05:e0:4d:8f:f6:63:f8:c7:c3:f7:48:8d:bb:
e1:a0:0a:cc:9b:32:3f:06:ed:37:80:0b:2d:01:9e:
f4:ad:f7:63:b6:93:dd:d4:53:aa:cc:59:7b:03:f0:
97:30:62:ba:f8:0b:ca:f4:0a:3a:91:91:b3:2b:11:
a8:a7:d5:d1:53:0b:02:91:1f:e0:30:98:76:35:7b:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:22:2B:23:93:46:57:33:2D:49:8C:C0:91:35:8C:D6:FD:16:DF
X509v3 Authority Key Identifier:
keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:64:fd:e2:64:e2:95:a4:06:46:2f:fc:b8:65:e5:c6:c3:
0a:86:a9:51:79:4d:7f:95:ae:68:5e:82:c8:7f:ed:d7:cc:e8:
25:4a:ab:4a:6e:a7:87:76:4b:4b:20:5c:5a:76:83:8e:8f:b6:
fe:05:2d:3f:5d:0a:7f:cf:7e:e9:6b:a8:e2:f0:77:16:cb:e2:
e2:d1:d4:ce:d8:bd:d4:1f:a8:00:df:cf:d9:e2:cf:4e:e2:0a:
01:1f:6b:b5:c5:25:4d:24:2e:e6:b6:1f:57:9e:12:76:71:07:
a7:1e:c1:69:74:df:ba:5d:55:11:be:02:12:4e:47:9f:db:78:
e2:c9:68:05:ce:ee:6e:bc:43:88:17:8d:89:ff:92:26:e6:fb:
62:06:19:52:36:27:9b:ae:c8:cd:f5:18:3f:82:b1:ea:e9:ac:
1e:08:49:e1:e4:af:8b:20:c0:51:54:a4:94:a9:b0:bb:dc:cc:
24:29:db:93:43:84:f5:c9:6a:3f:31:15:15:0b:a2:95:89:a3:
bf:76:5d:fd:17:33:a8:e0:ef:5b:c4:42:0f:94:2f:96:11:4c:
7b:4a:61:57:71:0b:06:27:a1:f5:4d:a3:4d:c4:b5:bd:bd:57:
68:2d:2d:c1:11:6d:5d:1c:b0:cb:25:a0:44:0d:02:6a:85:af:
5a:a9:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:30 2025 by rpki-client