Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier: qV3flO8u8sjOx6kVJL2wXY/61MOCLE7mhHPI2Lt2eJc=
Subject key identifier: E7:5A:1D:42:69:B5:6D:82:09:A8:1E:91:9F:EE:91:7D:B4:EB:C9:78
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number: B8
Signing time: Sat 29 Mar 2025 05:20:37 +0000
Manifest this update: Sat 29 Mar 2025 05:20:37 +0000
Manifest next update: Sat 05 Apr 2025 05:20:37 +0000
Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: 9KPbslh3lS9m/Woj6qAhHcQyBh31PDgyrXdlxbyIqnc=)
2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: hRcVFNYNHbBeZgTvTYU37EJFfyfSXfiYJs6pkm9HP0E=)
3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: zLtLI1BQNW1wn6UWygb+Rg5doBGgY1EY6qM449wyd6Y=)
4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: LTJcypAu6Coib5lGymH2yoKTBwPNQa57v5jvPjgYjd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931
Validity
Not Before: Mar 29 05:20:37 2025 GMT
Not After : Apr 5 05:20:37 2025 GMT
Subject: CN=67e78325-f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:e6:51:08:76:e5:8d:33:b6:3b:f1:34:b4:
5b:6a:53:9c:f0:fb:4c:fe:f9:29:16:43:19:99:dc:
2f:c4:c9:e5:6b:3d:0b:72:df:61:9e:b3:f7:61:1d:
a7:00:9b:ba:03:47:3e:15:bf:0b:c1:92:4f:68:16:
50:af:89:4a:83:3c:59:43:dd:f1:20:a5:77:67:a4:
bd:33:d7:94:b3:a5:37:6a:1a:9f:35:71:be:f7:c0:
5f:57:8d:be:9d:31:8e:22:88:47:d7:ab:a8:b8:7f:
d7:e1:44:01:69:bd:be:d5:88:62:d8:8a:02:32:ae:
cf:73:57:ef:0b:ae:24:ae:a4:b0:ff:8a:f0:d5:78:
0b:e6:0b:b8:17:c4:22:0a:8e:cd:7c:57:68:00:4a:
00:f4:3e:1c:e2:68:bb:54:6b:92:27:3c:0b:1b:8d:
c4:cd:c5:4b:31:8c:59:c0:6c:17:b3:36:42:0e:d8:
61:c9:e0:ed:0f:50:1a:cd:d6:a8:0e:18:22:4e:a5:
79:b1:fa:11:4e:bc:11:bb:25:97:8a:0f:eb:1e:22:
22:36:87:d8:88:49:47:7b:4b:3b:a5:f8:c7:69:d9:
05:34:7f:7c:c0:27:b2:d7:f5:bf:0c:e0:58:2b:bb:
ad:e8:da:28:c8:68:bb:7c:74:59:6f:04:e3:2a:f0:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:1D:42:69:B5:6D:82:09:A8:1E:91:9F:EE:91:7D:B4:EB:C9:78
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:64:a5:46:dc:e9:49:0d:10:27:48:ef:e1:96:23:a6:a0:94:
11:e1:37:7c:56:55:77:d4:c7:34:5b:cc:8d:1a:d1:34:b4:0f:
5e:b9:2b:fb:aa:ad:01:40:4d:43:a2:75:ce:7b:e6:89:00:a0:
3b:80:df:02:62:9b:5d:8b:63:3a:18:5f:11:ed:7d:b6:2b:40:
cf:fb:b0:11:02:45:fe:ef:57:3a:a9:e4:6f:9d:c6:d9:4a:be:
f8:8c:7d:e5:14:a1:42:83:54:a1:c4:58:83:d3:9c:3c:1d:29:
0c:36:81:48:cc:44:eb:3f:af:de:68:a5:4f:2a:1d:6f:0c:60:
13:59:f3:a4:2d:14:3f:ca:82:ca:4b:94:94:06:e2:db:cb:f8:
83:75:4c:17:9d:55:43:b0:dd:85:0d:a4:86:66:19:03:45:99:
98:55:99:f2:f8:8a:bc:d6:ef:f9:ec:49:63:b7:cd:4c:ea:91:
cf:a5:99:92:1f:c7:ff:82:8d:dc:e5:0e:86:3e:47:c9:08:23:
d9:ed:dc:af:2b:58:ef:f9:93:4e:9e:9d:af:10:26:b3:5a:9a:
85:aa:7c:93:9e:f5:75:43:d1:d8:92:51:6d:72:42:69:2c:e8:
b4:5c:b6:71:d2:86:6a:d5:d1:dc:5a:05:71:08:a6:b0:f2:06:
b1:59:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:33 2025 by rpki-client