Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier: moe3r7/GscQf4jAfK6BxXnx/J+XNlAPBM1YKD6g0ZWQ=
Subject key identifier: AA:93:47:D4:86:07:CD:4D:D4:CA:D8:C0:C9:AA:8A:A6:E8:CB:F7:EA
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number: 0310
Signing time: Sat 29 Mar 2025 01:27:09 +0000
Manifest this update: Sat 29 Mar 2025 01:27:08 +0000
Manifest next update: Sat 05 Apr 2025 01:27:08 +0000
Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: wiqNt7uiJF8pkrfD8OQ9+cqD1IlJBpd5UMQ6m9sDNco=)
2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D32
Validity
Not Before: Mar 29 01:27:08 2025 GMT
Not After : Apr 5 01:27:08 2025 GMT
Subject: CN=67e74c6c-b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:06:cc:09:b2:c9:e8:3b:18:79:79:e7:39:
de:61:21:39:d5:05:1d:38:11:e0:ac:c2:b5:29:87:
df:c3:32:1e:14:a2:2c:75:c8:35:a4:ee:3c:39:33:
52:ea:2f:ec:d9:a0:f8:ed:cb:b9:ac:53:23:f5:42:
03:f8:96:b9:b5:3f:73:36:b2:72:0d:17:c3:60:a2:
18:07:65:ba:29:21:e3:7f:9a:d8:4b:66:24:7b:65:
79:f5:9d:89:54:38:c4:a5:8c:8d:3b:ce:d0:18:18:
3c:d1:67:1f:0f:4c:38:68:61:df:d4:87:de:b3:05:
10:0c:6a:2f:07:71:c8:7f:71:dd:5a:26:a2:61:d0:
08:d8:e9:e0:fb:01:31:69:03:b5:0b:6f:85:67:3d:
12:65:e8:a4:72:9c:98:9d:e7:17:ba:8a:cf:e7:a0:
42:89:77:22:04:13:4c:3d:07:cd:b5:68:f3:a1:ce:
9e:bf:fd:7a:63:34:14:b9:50:2d:8a:80:9f:fa:df:
a1:6b:da:2c:95:a5:ed:66:1f:2f:d5:3d:82:b5:53:
68:32:72:46:08:97:c5:c2:4a:53:d7:45:4c:da:bd:
8a:f1:8d:3e:7d:45:f3:27:0f:0b:ca:2a:02:1c:30:
d2:4a:75:70:c5:77:8e:81:53:9e:a5:8c:35:1c:a0:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:47:D4:86:07:CD:4D:D4:CA:D8:C0:C9:AA:8A:A6:E8:CB:F7:EA
X509v3 Authority Key Identifier:
keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:f8:9d:ac:43:1e:e2:f1:52:c3:be:78:12:f6:fb:d3:cb:
fd:06:66:d3:28:92:35:b8:f2:fd:dd:49:26:c9:20:0a:0a:db:
f9:f2:c8:a0:cc:c9:51:a6:18:5a:fd:c9:e2:d2:1a:ae:84:c1:
0a:c5:bb:83:fa:19:68:be:1e:c4:f5:42:c3:4b:b9:f5:21:d3:
a6:d3:e7:98:ab:97:eb:9b:c8:70:66:62:3e:c0:c1:39:dd:7d:
24:f7:30:25:65:6a:25:ec:b1:65:e6:b0:c1:94:07:d9:fe:e1:
41:a5:c5:2a:96:5c:55:68:d5:16:8d:9b:48:46:2a:8d:80:75:
49:6a:54:32:0d:2b:eb:fe:6a:be:80:c1:e5:0d:8c:49:41:98:
74:f8:81:d7:fb:10:45:8e:0c:49:bf:d5:39:93:1e:2b:2e:8a:
dc:42:50:eb:4e:5e:ac:fa:3b:f0:9a:b7:bf:9d:42:c9:94:74:
9c:24:51:09:ff:f7:06:50:d2:c2:0b:50:d4:66:d2:dc:10:5f:
6c:a5:70:e1:e7:fc:99:a0:6f:8f:df:2f:8d:35:b1:72:9f:5b:
14:80:ba:09:17:df:47:6a:a9:ab:01:13:8f:bd:9a:46:55:31:
29:3a:1c:53:5e:a3:b2:10:2b:af:01:53:76:61:aa:72:32:43:
75:b8:30:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE
NDhCQjI5MkIwHhcNMjUwMzI5MDEyNzA4WhcNMjUwNDA1MDEyNzA4WjAYMRYwFAYD
VQQDEw02N2U3NGM2Yy1iNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7OkGzAmyyeg7GHl55zneYSE51QUdOBHgrMK1KYffwzIeFKIsdcg1pO48OTNS
6i/s2aD47cu5rFMj9UID+Ja5tT9zNrJyDRfDYKIYB2W6KSHjf5rYS2Yke2V59Z2J
VDjEpYyNO87QGBg80WcfD0w4aGHf1IfeswUQDGovB3HIf3HdWiaiYdAI2Ong+wEx
aQO1C2+FZz0SZeikcpyYnecXuorP56BCiXciBBNMPQfNtWjzoc6ev/16YzQUuVAt
ioCf+t+ha9oslaXtZh8v1T2CtVNoMnJGCJfFwkpT10VM2r2K8Y0+fUXzJw8LyioC
HDDSSnVwxXeOgVOepYw1HKAerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqTR9SG
B81N1MrYwMmqiqboy/fqMB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1
RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6
Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkC/idrEMe4vFSw754Evb708v9BmbTKJI1uPL93UkmySAKCtv58sig
zMlRphha/cni0hquhMEKxbuD+hlovh7E9ULDS7n1IdOm0+eYq5frm8hwZmI+wME5
3X0k9zAlZWol7LFl5rDBlAfZ/uFBpcUqllxVaNUWjZtIRiqNgHVJalQyDSvr/mq+
gMHlDYxJQZh0+IHX+xBFjgxJv9U5kx4rLorcQlDrTl6s+jvwmre/nULJlHScJFEJ
//cGUNLCC1DUZtLcEF9spXDh5/yZoG+P3y+NNbFyn1sUgLoJF99HaqmrAROPvZpG
VTEpOhxTXqOyECuvAVN2YapyMkN1uDCi
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:40 2025 by rpki-client