Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json)
Hash identifier: S+dwNfhej2yRk/ThwYQaLULiLBx4mNWs0LRnXbMq7+c=
Subject key identifier: AA:01:67:BC:00:A3:C1:08:D1:52:3A:FF:35:E9:7E:48:7C:A6:99:0E
Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38
Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638
Certificate serial: 1553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
Manifest number: 154A
Signing time: Fri 28 Mar 2025 16:55:08 +0000
Manifest this update: Fri 28 Mar 2025 16:55:08 +0000
Manifest next update: Fri 04 Apr 2025 16:55:08 +0000
Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: 6Zg69zY/kty0PAL5T6+ZesDLx3YlGu7icxYT4EQRGs4=)
2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: gEvklT75Gk6RX/nO8dPcZCY87nihSKVb8/0u+SUGEUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5459 (0x1553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD00E
Validity
Not Before: Mar 28 16:55:08 2025 GMT
Not After : Apr 4 16:55:08 2025 GMT
Subject: CN=67e6d46c-8e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:76:a5:d8:8d:a5:5c:d8:fd:8d:52:f7:13:
34:0b:59:39:30:5b:32:dc:5e:62:4d:0e:7d:d0:af:
04:e8:45:25:c9:a7:e4:18:8f:d2:a0:84:fa:ed:7d:
a7:a7:ba:a3:72:22:55:20:17:44:06:16:13:19:26:
55:d2:99:59:1f:fb:3f:b2:ac:f7:7d:71:de:19:37:
ae:31:41:7f:f9:80:e9:e8:ff:49:b8:2f:f1:90:e7:
e0:f0:17:f3:14:c0:e9:0c:0d:70:4e:e5:af:ff:31:
ec:e7:c9:18:1f:a7:71:0c:06:37:8d:7c:a3:84:82:
65:28:10:e4:7f:bf:03:63:c0:ac:dc:2b:83:46:1a:
c5:cd:f3:b4:88:db:63:99:44:c3:8c:53:c5:f4:bd:
7d:71:c7:e3:3f:c3:22:12:29:4f:90:e0:b2:ed:6f:
f1:7e:b5:1d:fb:6a:e4:d6:48:27:8b:60:44:d2:1b:
a9:1a:68:54:65:e6:54:ef:30:df:34:39:35:2a:94:
21:23:48:d1:89:eb:06:be:7e:6e:60:38:b7:9c:5c:
69:f9:a1:d6:b4:78:37:ae:c6:1a:3f:c5:8a:61:9a:
a3:b3:d0:6a:db:9b:97:78:8f:9f:a5:92:e6:1b:cf:
f9:71:1a:11:14:21:26:82:05:36:5e:63:03:38:af:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:67:BC:00:A3:C1:08:D1:52:3A:FF:35:E9:7E:48:7C:A6:99:0E
X509v3 Authority Key Identifier:
keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:fe:9e:ca:20:63:34:35:e5:fd:85:89:1b:25:38:5a:ad:
45:da:a2:a3:90:ce:3e:66:d3:c8:e5:5d:ba:77:8e:85:20:dd:
41:d3:73:d3:4b:d0:0c:54:47:64:d4:6f:34:5d:73:55:99:49:
76:a5:37:82:99:ee:70:5a:91:4e:8f:f2:62:4c:bf:0d:f3:59:
79:5e:d9:56:6e:aa:20:92:bd:9b:1e:d8:ef:5d:47:32:20:93:
db:2b:0d:ac:ac:a2:c4:6c:7c:50:ba:59:a2:50:c6:7d:7b:1e:
7f:45:16:e1:d0:05:8a:d3:bf:57:3e:68:b8:4d:7e:52:e2:bd:
07:04:5e:53:10:5a:a6:8b:d2:13:9f:d8:19:16:3e:c5:66:77:
a3:ae:7c:cb:b9:56:aa:04:3f:0d:c2:7e:e0:b7:17:b6:2b:a5:
db:ae:45:3b:68:0f:bf:2a:57:bb:35:dc:fd:0a:cb:8d:d1:06:
fe:29:20:5f:fa:95:55:84:6e:a8:e4:65:11:55:7c:08:e4:5e:
d7:7f:d1:b1:5f:33:a1:11:14:8f:ab:58:cc:cf:cc:7d:66:7e:
48:ee:eb:c1:51:93:be:ee:52:ea:78:59:06:84:f5:59:23:69:
5b:f8:45:97:95:f3:36:9c:dc:c5:2d:a8:00:60:56:c9:5f:bb:
ec:6c:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:44 2025 by rpki-client