Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier: ak5yJWdsN2YzBf7WzfOgojqjMPH9uPj6uW54uZPjxHs=
Subject key identifier: 83:BD:07:D1:C7:89:5D:41:98:C4:23:FD:BD:C3:12:73:77:56:12:5A
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number: 49
Signing time: Sat 29 Mar 2025 06:42:13 +0000
Manifest this update: Sat 29 Mar 2025 06:42:13 +0000
Manifest next update: Sat 05 Apr 2025 06:42:13 +0000
Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: 5rUsXypV9XHrNDUQUiMGzcL5NPzAWKVRYfvq+eRzWq0=)
2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: etgfr2FMXbKAdL4ONMDhHdEqlj7eq8Os+Vy9Aq6JfHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2
Validity
Not Before: Mar 29 06:42:13 2025 GMT
Not After : Apr 5 06:42:13 2025 GMT
Subject: CN=67e79645-cc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:be:ae:9f:7a:c2:47:26:32:4e:94:b5:94:
b1:3d:3c:c0:3a:bd:3d:77:27:6d:df:eb:49:ec:f0:
92:44:5f:05:96:e5:2d:eb:63:68:f8:54:e8:f2:67:
7b:ad:2e:f1:f3:0b:2c:d8:de:f2:43:de:b8:58:cc:
d1:32:b0:2f:46:21:d2:26:81:4f:c0:b8:81:ff:f9:
7f:3e:a5:4a:f4:47:57:7e:2b:a9:56:b6:56:f4:6b:
b6:dc:e7:78:53:4f:5a:88:46:45:37:f7:01:57:f2:
7e:5a:ce:9f:b0:25:95:03:44:d1:86:3f:d6:e9:1a:
01:6b:94:be:87:74:cd:6f:0f:98:74:78:ab:82:d3:
60:36:dd:b6:35:61:14:ac:5d:f6:a4:58:6e:e5:b4:
6e:43:fa:d2:34:b2:f3:33:40:09:c1:b1:2a:d8:ed:
3b:b9:9a:aa:96:33:d1:1a:bb:91:1d:b4:f9:e3:18:
67:ed:85:bd:0c:bb:4c:06:1e:da:cb:f3:27:94:76:
44:24:3e:82:1c:4c:18:4f:c6:0c:c9:26:c3:43:5f:
7d:ca:59:98:5d:3f:a9:28:65:0e:81:bf:b5:ed:79:
05:23:54:e4:1f:51:cc:57:03:c1:49:41:f9:e6:9b:
1c:f0:6d:65:c5:00:54:3b:14:de:cd:6d:fe:7b:4a:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:07:D1:C7:89:5D:41:98:C4:23:FD:BD:C3:12:73:77:56:12:5A
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b3:ac:16:87:a5:4f:8d:f3:85:ba:c4:fb:38:c4:e7:48:00:
53:25:43:12:d3:31:a6:8d:d5:0d:38:32:35:03:89:fd:c2:a1:
ed:e8:10:b3:f3:05:51:87:df:58:fb:f5:76:34:9e:19:07:ce:
ac:38:62:9b:e5:2d:d3:c4:bc:e6:c6:ae:6c:96:87:2d:9d:ca:
3c:03:2b:d6:e1:08:0c:74:c9:e0:3e:cc:dc:65:9c:f0:1d:f8:
96:60:27:ba:13:f3:1b:b3:73:fe:51:32:d6:f5:e3:3d:66:7f:
92:30:11:e6:fe:91:49:60:61:08:ff:94:60:50:ce:aa:10:a7:
ce:45:b3:9b:08:6e:c8:45:15:8b:30:47:60:f6:0d:16:f0:71:
1d:fc:a4:fb:39:0c:e0:c7:bf:1b:0a:fe:97:e6:e5:92:1e:c6:
0c:34:36:7d:a6:3b:8c:c8:26:a4:ed:70:92:5b:41:5b:35:22:
25:af:9b:ac:f5:f8:cd:61:27:98:05:53:1a:44:44:1b:00:db:
af:78:a8:82:fd:1b:ea:a3:ff:52:3b:f2:e8:75:4e:b5:8c:6b:
c4:7a:d7:41:09:09:a1:b8:f2:25:a0:bb:cb:41:e1:63:8e:0e:
23:df:be:ec:17:c4:08:7a:69:4a:e4:2b:f0:43:f7:7d:9b:7d:
d5:75:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:52 2025 by rpki-client