Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json)
Hash identifier: kkVMkq5S0gP0wFU07Kk/Y6GpgdTxPAHcb7Ty7m9jxzQ=
Subject key identifier: EA:3E:DE:CA:EC:9A:BE:D5:FA:05:9C:73:F2:4D:63:41:D8:18:5B:8D
Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
Manifest number: 0815
Signing time: Fri 28 Mar 2025 21:06:43 +0000
Manifest this update: Fri 28 Mar 2025 21:06:42 +0000
Manifest next update: Fri 04 Apr 2025 21:06:42 +0000
Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: o/onTySrYqa6IorvGteelXJ/UBFz35wq4Sj4V+GZ08A=)
2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158635
Validity
Not Before: Mar 28 21:06:42 2025 GMT
Not After : Apr 4 21:06:42 2025 GMT
Subject: CN=67e70f62-34c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:2d:7c:86:f4:3c:94:39:3f:b2:81:aa:b4:
2c:45:14:4f:06:9f:f7:c6:4c:68:22:06:ca:cc:6f:
b7:4d:64:49:37:e3:ed:be:73:ae:ce:7a:57:bb:a3:
6e:dc:a3:db:f0:e0:0c:8c:b1:a0:dd:62:d3:ff:f2:
98:32:c8:29:8e:68:b8:d4:b0:1c:be:ba:75:0a:cc:
2f:81:35:27:fe:3c:3f:7f:d9:2a:46:ea:db:f7:78:
cb:0f:87:c2:29:a0:3a:d4:97:48:ea:be:7b:4e:3f:
4f:e7:e8:c7:b2:c5:8d:db:90:b8:db:03:1d:24:78:
6d:67:4e:2f:75:ef:4b:bc:dc:39:80:9e:c1:2a:b3:
f1:c3:87:34:f6:3b:1a:d7:15:b1:4b:5e:85:47:1f:
da:67:ae:73:8e:72:ad:18:d0:5a:ca:8e:3b:9f:7c:
ea:fc:3e:70:a0:b8:f8:e0:fc:a6:e6:ef:b6:d2:a3:
d1:98:8b:39:b9:b8:71:ce:36:c2:60:62:cc:52:c8:
51:24:df:c0:f2:17:76:8a:0a:e7:3a:e5:20:0c:8c:
b5:75:d7:70:44:be:ca:ab:f2:f3:0c:8d:9f:41:4c:
b8:3a:fe:b1:1a:6b:cf:ee:c5:d4:8d:33:e3:c2:12:
14:ca:42:24:03:74:a6:cf:ee:c2:aa:83:40:90:a5:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:DE:CA:EC:9A:BE:D5:FA:05:9C:73:F2:4D:63:41:D8:18:5B:8D
X509v3 Authority Key Identifier:
keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:fa:31:99:6e:4e:98:7b:f4:0b:b9:e2:e3:15:92:ef:54:
dd:cd:36:6e:2c:0a:77:c9:3e:36:4a:26:a5:72:e7:63:8e:33:
fb:08:da:54:ae:bc:2b:30:69:50:b4:0b:2f:a4:e7:40:4d:d0:
0e:9a:17:1d:7c:2d:92:f9:f8:28:10:ae:e7:5f:c6:bf:7a:ee:
c0:24:b0:7b:eb:ec:7d:8b:66:d9:24:fc:41:d4:8c:da:76:ee:
47:1c:8e:18:9e:97:39:16:64:f0:18:45:d3:b2:cb:2b:0b:bb:
6f:33:2e:01:f8:48:0e:a8:8c:df:90:b3:a9:4d:4e:ed:6c:b2:
a1:dd:92:a3:16:73:26:2d:37:16:61:3d:70:1a:cb:d5:2c:c8:
33:56:12:6d:e2:64:9d:76:4d:2a:33:0f:71:f4:59:32:af:5f:
db:92:58:82:d8:ff:07:a1:61:e9:94:17:18:30:97:df:3a:f1:
b0:b1:c4:09:d3:b8:bf:15:67:25:e4:16:85:fe:6a:a5:4f:57:
7e:48:eb:3b:e3:30:9a:2d:be:33:02:ca:fc:1c:22:c2:3c:f9:
fa:a3:4c:14:33:9f:1e:a1:0a:b4:c3:f4:a2:d9:6b:e1:3d:fa:
b6:86:9f:6f:26:ea:34:90:cb:e7:ac:4f:94:44:a4:9d:9d:6e:
64:d3:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:34:34 2025 by rpki-client