Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier: rwqPJaiCrK/f/fMMmy740hMJUlBT4X0/SanJXWy88Ic=
Subject key identifier: CC:4A:7A:48:D8:D9:7B:BD:0E:F2:CD:C1:02:A0:06:86:74:28:64:71
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number: 0123
Signing time: Sat 29 Mar 2025 04:04:45 +0000
Manifest this update: Sat 29 Mar 2025 04:04:44 +0000
Manifest next update: Sat 05 Apr 2025 04:04:44 +0000
Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: EO0krWjzYOqm5fwDqAL6pqLgF/+9mKqTOjzDiXIFiqQ=)
2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D857
Validity
Not Before: Mar 29 04:04:44 2025 GMT
Not After : Apr 5 04:04:44 2025 GMT
Subject: CN=67e7715c-d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:56:46:a2:e7:df:67:6d:1e:cf:be:4f:68:
20:22:27:45:2c:d7:ac:0e:00:86:7f:ac:79:82:8b:
48:33:d0:f5:56:f4:5b:32:50:f3:53:fd:34:6c:0e:
a6:a0:60:ed:ba:ac:67:cc:db:dd:a3:a6:90:b2:81:
f7:24:53:f6:78:15:e1:7a:57:83:92:bb:c2:05:30:
4c:47:3b:05:a9:83:3d:81:88:36:32:ea:7d:4a:64:
36:03:c6:f8:97:e6:0a:80:d4:b1:91:4d:90:4c:02:
fb:2e:ad:7f:44:0f:36:04:52:9b:4a:25:be:58:d3:
5e:df:a8:ca:7f:5a:00:0b:7b:dc:bc:14:40:34:5e:
14:e3:6d:03:bb:2a:a5:42:f3:ff:92:d6:af:76:1f:
67:a5:aa:56:6f:1b:5a:20:5a:a6:e1:02:46:8a:63:
2c:6a:db:43:36:8f:11:4d:c9:01:3b:db:65:87:50:
f2:d0:cf:5b:99:1f:9b:29:21:09:1b:a0:0b:77:88:
43:df:55:58:f3:54:0f:04:d4:4f:50:3c:34:c4:32:
37:39:22:70:ae:9c:d6:8f:85:84:cb:83:6e:c8:56:
aa:d3:12:e1:e1:c3:f6:0b:16:a0:6d:78:32:7c:2b:
2b:7a:ce:ec:da:d5:05:9c:9d:aa:fd:24:c1:1d:ce:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:7A:48:D8:D9:7B:BD:0E:F2:CD:C1:02:A0:06:86:74:28:64:71
X509v3 Authority Key Identifier:
keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:b9:4c:ae:c5:e0:d9:57:02:cb:20:94:08:8d:e1:4a:7c:
f2:93:b0:8b:0f:95:4d:5a:11:9f:df:94:23:e2:b1:76:56:6d:
06:56:2e:73:a8:88:e2:0b:6b:7b:68:ad:0a:0a:19:cc:e4:4f:
3b:54:9d:5f:d9:4f:11:63:fc:95:d4:fa:80:22:bd:82:21:11:
4f:4a:cd:83:7f:a6:71:56:c7:5d:76:30:6a:05:e6:5f:87:f1:
f7:8f:25:f7:db:54:66:77:d1:0a:fb:4a:55:21:9b:9e:0a:09:
59:f4:f7:21:0c:14:54:1c:5f:84:45:bd:3b:f7:e4:45:d2:5d:
be:52:c8:b0:fd:f3:68:9d:38:a6:6f:5a:68:74:e5:43:20:b6:
ee:b0:b0:42:a6:86:57:9f:83:38:a7:29:7c:94:9c:7f:0f:18:
f5:51:74:d9:66:0d:f4:59:2b:e4:04:5a:34:37:a7:45:ac:ea:
38:35:22:b7:1b:c8:68:97:10:1b:e4:6e:5c:08:a3:f2:cd:af:
85:9a:75:e6:5b:7f:96:12:78:40:39:e2:94:af:9a:8d:48:2a:
8d:22:3a:c9:f9:6e:50:aa:68:1d:8a:1a:e8:00:be:e5:fe:d6:
8e:63:50:31:16:83:ea:27:fd:56:1e:1d:5c:a2:85:74:c7:0d:
8d:29:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:10:00 2025 by rpki-client