Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json)
Hash identifier: z3jyRpp0w3FUJDeg2m/Hgt0pNu2LLFujQ+UW5P/tj9A=
Subject key identifier: 44:E2:1C:84:FF:27:AA:0D:EE:5A:D6:A9:3E:D9:E6:E8:B4:FD:AB:A8
Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05
Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
Manifest number: 0186
Signing time: Fri 28 Mar 2025 17:45:33 +0000
Manifest this update: Fri 28 Mar 2025 17:45:33 +0000
Manifest next update: Fri 04 Apr 2025 17:45:33 +0000
Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: wEUwbGucIUFPoGg6lPeQ2widdVcBY2ptlQkoYUtXI1w=)
2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02
Validity
Not Before: Mar 28 17:45:33 2025 GMT
Not After : Apr 4 17:45:33 2025 GMT
Subject: CN=67e6e03d-5aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:b5:75:ac:f1:0c:ec:23:ed:cb:bd:71:9f:
ac:fe:6f:b3:e7:74:9a:a3:b1:6f:f5:f5:7a:31:5e:
43:b5:c4:33:ce:58:88:2c:c9:b2:13:09:fc:8d:0c:
62:8e:fb:e8:84:c7:be:44:90:a8:85:6b:62:47:dc:
21:e2:6c:97:14:d4:bf:a4:a9:cb:f1:a6:fc:c6:31:
63:6a:d2:ad:7e:43:e0:33:d8:b0:f4:d0:51:c1:80:
d9:4e:c0:3a:dd:6d:61:10:12:88:3c:f3:02:73:28:
b3:c0:0f:87:2b:41:e9:eb:ad:f4:80:09:5e:bf:ff:
c7:f4:95:f1:65:2e:ba:12:ec:92:a6:8d:fb:5b:a6:
04:96:fe:84:51:fa:44:6a:d6:24:d4:e0:5b:c8:f2:
af:36:e0:17:7d:35:b2:9b:b1:f5:47:23:1c:16:0c:
6f:6e:4f:99:b7:bf:a3:51:ba:05:0b:44:53:26:4b:
22:bb:e2:04:64:a9:ec:38:da:7c:ec:78:ea:a3:da:
74:fb:a1:11:c7:da:29:66:e6:07:c4:90:9a:7d:c9:
86:a4:dd:dd:fb:f9:8b:0e:95:17:36:a1:ec:54:c4:
c0:91:69:24:35:90:96:68:5d:87:1d:13:7f:ed:e8:
bd:bc:4e:75:a3:96:aa:1f:77:39:33:50:53:04:a1:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:1C:84:FF:27:AA:0D:EE:5A:D6:A9:3E:D9:E6:E8:B4:FD:AB:A8
X509v3 Authority Key Identifier:
keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:84:82:5e:a3:e4:c0:58:ec:f0:6c:89:a9:c5:ff:3d:65:
26:07:d2:cd:5e:50:74:65:c9:35:1d:d4:0d:d3:64:11:af:37:
4b:db:c3:1e:02:01:ec:ab:db:de:bc:d2:8e:e6:7c:c4:24:13:
d9:a6:69:d2:19:01:8e:d9:23:36:ed:40:62:5f:55:19:ec:a5:
8f:34:33:0b:11:ca:57:a3:e1:91:d5:60:6c:86:a7:ee:44:5d:
35:0b:70:fa:a4:d0:e6:2c:50:a2:c7:50:b8:a7:06:64:b7:8e:
b7:8a:c4:a3:80:f7:c6:a1:b3:2a:2f:24:45:28:36:3a:52:2b:
64:ee:c7:62:fe:f5:47:2d:6c:17:50:74:90:f7:ba:07:66:e5:
9b:a8:d8:ca:38:3b:1d:2d:9b:fc:68:0e:93:48:ef:30:f4:fd:
0d:09:4e:fc:5a:61:cf:04:46:a5:ca:29:ab:89:63:fc:8d:3c:
e5:b4:e9:a6:b5:73:0c:6a:6f:67:97:c5:e0:8d:3d:f0:0c:58:
2b:1f:d6:ba:3e:44:00:f6:be:00:87:6c:b2:df:29:55:7a:3f:
68:3b:12:12:15:3b:ba:41:05:c1:55:8e:fe:12:78:c4:b5:20:
a1:29:ab:70:4f:48:f2:58:c2:60:e1:37:41:cf:59:14:d0:45:
5d:aa:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:30 2025 by rpki-client