Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier: 357UTeQkHaKs0WxnEc02x4DEgzFme6mb28AQPa46N6s=
Subject key identifier: B2:A2:D8:C1:08:A7:B8:C7:62:76:F1:6D:5B:C2:94:60:FA:99:84:A9
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number: 4E
Signing time: Sat 29 Mar 2025 06:37:08 +0000
Manifest this update: Sat 29 Mar 2025 06:37:07 +0000
Manifest next update: Sat 05 Apr 2025 06:37:07 +0000
Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: lsG5FOEYHrn7yuWAgDZl+1e6P9OOwrJLh3maHCmqIaw=)
2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11
Validity
Not Before: Mar 29 06:37:07 2025 GMT
Not After : Apr 5 06:37:07 2025 GMT
Subject: CN=67e79513-1abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:27:fa:cb:f4:6d:6a:7a:14:c3:88:27:5e:
3e:78:5e:cd:2c:1d:08:80:01:34:21:85:46:3d:a9:
1c:81:68:88:3b:5d:d5:ad:64:e0:b7:6b:1a:6f:c8:
2a:45:6c:fe:92:2e:85:e8:ae:2f:9e:ae:70:e2:2e:
c9:37:ac:9e:bf:1a:39:b1:d3:67:1f:9f:99:af:d1:
76:d7:0a:76:93:1b:8b:bb:fc:65:2c:e3:89:c6:6b:
d5:35:93:09:cf:02:e9:96:60:d2:22:e1:42:8c:9e:
90:de:ef:96:05:1d:19:4e:7d:70:c8:1f:3a:73:7f:
25:f3:1a:b2:8f:3a:69:b3:37:f3:47:55:57:a6:86:
28:8b:80:7b:88:39:a3:68:76:c7:12:3e:88:ff:ed:
a1:96:5f:24:7f:5d:fa:9a:d1:76:4a:19:b3:67:a8:
5b:25:0f:4d:21:dc:cb:d9:f2:da:c2:83:c1:f4:a5:
79:4d:d5:81:11:07:8c:74:60:ca:3f:9b:ca:51:d6:
73:21:64:25:a2:95:e2:92:00:2e:9c:ab:b4:59:54:
a6:0b:50:47:04:e2:c2:0b:56:dc:65:9d:a2:27:98:
a7:ca:5a:49:95:ba:1a:ff:55:69:14:a1:a9:a4:6c:
66:5c:4e:e5:88:a8:fe:74:6d:85:96:00:16:b3:ed:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:D8:C1:08:A7:B8:C7:62:76:F1:6D:5B:C2:94:60:FA:99:84:A9
X509v3 Authority Key Identifier:
keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:d9:58:46:65:bb:8f:88:92:9d:d3:7a:b9:7a:a6:ac:db:
1f:34:b3:d7:3b:1f:16:b9:69:ca:0e:73:51:fe:57:a1:d8:2a:
e8:df:4d:e3:8a:c0:b4:e5:c2:a1:b1:ec:6b:a6:03:bd:50:bc:
2f:70:d9:0f:bc:b8:27:f2:f2:45:ef:df:e3:a9:30:6d:14:02:
6b:e7:97:91:53:0e:63:c4:55:13:c2:b2:4a:53:6c:8a:83:8d:
b9:9c:c0:ef:7b:be:14:ec:fa:e5:02:11:84:de:ba:8b:37:3d:
04:b6:79:00:03:86:88:a4:b0:c7:c7:c8:59:9c:2f:8d:a5:d3:
8c:7c:a1:91:dd:49:0c:ab:3f:6b:48:27:d5:a7:e3:be:0d:ac:
b1:2d:e8:45:5b:91:30:4a:e0:cf:db:6f:5a:d1:b6:e4:13:55:
64:2a:27:c8:85:63:4a:13:c7:92:ff:4e:8a:e9:8e:42:27:fb:
97:d5:61:59:fb:4f:24:b6:f4:f2:c4:f5:5b:f9:6c:e5:9d:ac:
c7:65:4b:ee:12:98:9d:89:27:32:ef:e5:a2:e3:d1:5d:8a:a9:
51:d7:71:92:cc:44:30:c9:43:9e:cd:4b:8b:a2:c5:6a:71:80:
6d:c4:88:d3:4b:af:ee:8d:cd:2c:75:40:a3:ac:87:0b:eb:c3:
75:f3:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:59 2025 by rpki-client