Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json)
Hash identifier: hT7xPI0TEd2tCM5U35PxmKZyx3cJ7AOljhaFqMCVlEk=
Subject key identifier: 2E:2D:28:89:F3:51:11:25:F2:12:C1:FA:FB:6B:3A:31:64:09:CE:40
Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
Manifest number: 0AF4
Signing time: Fri 28 Mar 2025 19:33:39 +0000
Manifest this update: Fri 28 Mar 2025 19:33:39 +0000
Manifest next update: Fri 04 Apr 2025 19:33:39 +0000
Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: lLv3MlBYWng1PTiFeB6LfXInxD9EZHofEqlMyMLSpxY=)
2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: zFt+0w+kAFNr7NicRmzvofA0omlHEP7AqJhUpc/xR5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175299
Validity
Not Before: Mar 28 19:33:39 2025 GMT
Not After : Apr 4 19:33:39 2025 GMT
Subject: CN=67e6f993-fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:bc:78:b3:70:aa:43:ab:a5:be:34:86:23:
c1:6d:03:f3:fa:08:19:25:9b:f0:4f:83:5a:8a:81:
76:44:32:61:24:c9:ae:11:e7:08:7d:d1:5e:aa:05:
02:36:95:49:7d:2c:be:42:e3:bd:2d:b0:fe:0b:b4:
d8:ff:53:f9:3f:48:3c:3c:01:12:fa:e9:28:e5:78:
b5:0b:92:25:ef:e4:2a:82:c6:99:1d:73:5d:f8:ff:
62:ee:fb:d8:5d:fa:2e:bb:84:d2:17:62:e6:88:b6:
41:28:2d:c0:86:2b:c7:0c:64:95:10:b3:48:58:8d:
12:b3:c5:85:6b:d1:84:b9:35:5f:71:be:32:44:f8:
bd:88:76:b8:ec:25:36:4c:03:99:9b:7b:87:97:12:
02:8d:ac:1f:8a:cf:e9:d1:10:1f:21:1f:64:84:a1:
ad:e5:0d:6d:8e:d4:7c:1a:2e:6f:53:eb:c0:d7:f4:
9f:9c:1e:e1:c0:c6:38:10:ce:bc:fc:92:2c:71:a5:
7a:df:a1:35:f2:3c:e9:55:bd:e3:35:13:7e:65:92:
d3:f0:80:7c:39:97:84:9f:24:c7:f2:d8:c7:9e:3e:
49:b9:a8:e7:24:0f:c5:89:6f:61:bd:77:28:4c:80:
66:78:5b:ef:12:92:92:f4:8d:bd:1c:2c:dc:13:82:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:28:89:F3:51:11:25:F2:12:C1:FA:FB:6B:3A:31:64:09:CE:40
X509v3 Authority Key Identifier:
keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:6a:1e:83:4a:71:a0:e7:55:a3:f7:cb:c9:07:8e:5b:ce:
3f:8b:ce:07:52:cc:f2:0a:1d:52:4c:90:89:d4:f3:ac:75:cc:
e1:9b:b1:bd:2e:24:4b:26:d7:f5:25:be:64:4d:d1:38:c1:0b:
e6:1b:23:e9:d5:1d:7d:e3:bf:66:5c:20:b7:86:db:78:eb:0d:
80:ff:17:e6:be:34:47:a6:c6:40:cc:8b:1a:81:ed:65:3b:f1:
c5:64:40:5b:0d:9a:d2:36:4b:d7:d8:d0:1c:5d:b3:78:19:3f:
78:0e:1e:ae:8e:0d:8e:0d:c9:f1:b3:fb:8a:7c:ef:4f:62:4e:
99:49:18:8e:de:d9:9e:7c:7b:19:26:db:1d:26:b3:90:04:c2:
cc:30:54:56:e4:c7:d9:90:e1:5f:0f:03:f9:fb:4b:7b:af:9a:
42:00:bc:d1:1c:51:d0:6b:ee:4e:2d:39:0c:ac:f6:99:5f:eb:
66:08:da:3f:3a:01:f1:d4:ee:bf:1d:ac:de:66:6f:11:b8:f1:
4b:64:a3:33:93:cb:f8:34:84:01:db:93:03:69:44:a0:62:f1:
41:66:26:c3:ee:f1:22:25:f6:e9:4e:a5:69:6a:55:55:4b:24:
16:8b:39:7a:4e:5b:c1:16:52:33:7e:a6:06:8e:69:05:10:f1:
4a:b1:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:35 2025 by rpki-client