Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier: gkRACnMPhpC88bCxX4b4d+Nf9mSXzjCrYJ1mQ2C4O4s=
Subject key identifier: 8B:73:0D:CD:57:E5:6B:DC:67:E6:BB:97:6F:51:19:4F:9C:9E:AC:8E
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 0684
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number: 0679
Signing time: Fri 28 Mar 2025 21:04:44 +0000
Manifest this update: Fri 28 Mar 2025 21:04:44 +0000
Manifest next update: Fri 04 Apr 2025 21:04:44 +0000
Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: FFfpM4UAeephm2QPxPbhzK1QhVbREsSdAnfS3Te1Oc4=)
2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=)
3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: lAVQxnaIpb4+FR/69nne2013Hk4eswtCR3VSmU3tbJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6
Validity
Not Before: Mar 28 21:04:44 2025 GMT
Not After : Apr 4 21:04:44 2025 GMT
Subject: CN=67e70eec-a549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:16:ea:0c:81:03:0c:c0:b5:3a:75:9b:e7:fd:
cf:ad:b1:c8:9b:19:96:1a:a5:ad:06:21:9a:5e:86:
98:5d:e6:bd:48:c7:25:a8:f1:4f:6f:f9:4d:db:01:
ba:34:ea:78:15:bf:19:88:6c:3a:3f:a1:79:94:2c:
ac:e7:19:9a:5f:c5:97:72:0f:99:c0:bf:2e:16:f3:
1b:e3:0c:4b:6e:d8:9f:d3:83:35:23:d5:a4:4a:c5:
a4:6b:b9:bd:11:74:75:d7:67:ab:03:23:9f:7d:6e:
42:e6:04:0a:37:54:7e:cd:76:9b:c1:e6:38:d8:29:
23:a5:56:8a:d9:cd:db:f6:cb:05:49:11:79:f9:08:
4c:4c:c1:c6:65:12:c7:83:80:1a:4d:5c:68:9e:32:
83:af:40:12:56:07:e7:44:60:85:03:d1:7b:26:f0:
1e:5f:92:2b:b6:e7:13:bf:ff:39:79:cf:6e:50:a6:
42:10:eb:12:bf:bf:c1:d7:b2:9e:58:89:5e:f4:af:
f9:2f:19:81:47:0d:a8:88:0d:99:1a:f8:28:03:7a:
01:d4:bd:af:bb:3c:74:2e:f4:b8:54:1d:cb:b9:45:
ba:85:9a:e8:0e:56:8f:13:10:23:29:c6:86:87:80:
c8:b1:9c:23:61:0e:09:59:f7:1b:27:a5:19:d5:df:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:0D:CD:57:E5:6B:DC:67:E6:BB:97:6F:51:19:4F:9C:9E:AC:8E
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:5f:f2:c3:8c:d0:e4:77:43:c2:b3:f8:0e:aa:d4:f4:61:
c9:98:e1:2a:dd:f0:61:6d:db:34:09:f3:e8:b0:57:b8:e8:8e:
09:16:33:9c:34:79:8e:f5:0d:34:ae:39:4a:56:ca:4a:3e:76:
b3:95:42:e1:4d:11:6c:1c:11:c4:63:f7:1f:67:10:da:8a:94:
d4:b7:7f:a1:ea:4e:28:59:7b:1f:54:fb:e1:8b:ac:16:fa:12:
9f:c1:4d:53:9c:2b:45:28:d8:2d:9f:4b:07:3b:6d:fd:c4:d5:
35:84:a1:e6:bb:4d:96:cc:95:78:d9:cb:fe:0b:e2:36:a2:3f:
90:b2:57:ef:69:9b:1a:f2:fa:4d:6a:96:1d:d8:51:9d:56:46:
ba:64:8a:62:3f:4a:18:7b:b6:0b:ae:9b:ab:91:66:ad:9f:d8:
99:28:4e:61:ce:22:e6:c8:6d:ad:cc:ba:63:62:b3:0f:d9:c9:
53:11:ad:83:82:5d:1b:8c:0a:c0:fa:96:f1:ad:b4:13:be:4c:
d9:1c:72:19:6e:22:b9:38:29:d3:2c:ab:9d:24:4a:02:d0:8c:
eb:55:49:80:f0:32:a1:47:c0:ad:b6:fd:45:b7:83:07:b4:90:
b5:26:12:aa:c6:6c:08:fb:44:41:f5:05:31:cc:ce:a1:f9:20:
dc:ba:bc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:56 2025 by rpki-client