Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json)
Hash identifier: 5LgDagekBFZb5SYd1hjSRAkWm9pn6KP9gyKtp+otOvM=
Subject key identifier: 86:91:63:C4:E6:E6:A9:C0:47:9E:63:3C:7B:FA:CA:9A:7B:32:B9:70
Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Certificate serial: 3442
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
Manifest number: 3442
Signing time: Fri 31 Jan 2025 15:22:07 +0000
Manifest this update: Fri 31 Jan 2025 15:22:07 +0000
Manifest next update: Fri 07 Feb 2025 15:22:07 +0000
Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: h5C7SBGV7PCc+Zi4f3jDBwuJQ+1sidQHGihfqB3Gj64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13378 (0x3442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Validity
Not Before: Jan 31 15:22:07 2025 GMT
Not After : Feb 7 15:22:07 2025 GMT
Subject: CN=679cea9f-3497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:f2:7d:d5:ef:f0:b2:93:59:92:56:e6:a5:
36:a5:b2:ab:9a:63:4f:59:42:a0:f5:9e:64:6f:e0:
a9:70:68:e4:a3:d2:97:6d:eb:3c:46:d1:9e:66:11:
38:0d:cc:b3:cb:c0:a8:7a:3e:06:e4:df:7e:4a:50:
d7:3b:37:df:5d:78:85:2d:49:35:d3:ea:73:0e:d6:
ca:2e:d8:eb:d0:40:30:24:9e:04:a1:c1:90:a6:9d:
13:be:54:98:cf:c3:c7:69:cc:7c:73:97:1c:68:ec:
31:bf:31:d0:16:61:d7:ab:00:ac:e2:70:8b:20:1c:
f0:85:17:87:88:10:25:b7:1b:07:84:39:14:72:23:
81:e4:f8:20:79:77:f6:1f:15:ae:93:2d:36:27:bc:
3f:0d:b3:26:40:d2:53:19:3a:5a:88:97:45:43:df:
f9:91:f3:69:93:a5:8d:63:32:8c:5a:9d:1d:33:ae:
b3:f4:3b:b5:3e:70:82:70:a6:e7:af:d6:bb:bd:72:
11:a4:a6:fd:04:a2:50:5a:8b:e4:25:15:3c:9e:18:
dc:44:b2:29:bc:bf:19:19:51:01:5f:cd:8b:72:a1:
37:49:06:1e:15:b6:51:fc:68:78:97:a2:2a:e0:e4:
42:ec:6a:27:fd:d5:34:1f:1c:b7:aa:15:75:c0:7a:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:63:C4:E6:E6:A9:C0:47:9E:63:3C:7B:FA:CA:9A:7B:32:B9:70
X509v3 Authority Key Identifier:
keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d3:ec:22:22:75:e5:18:03:6b:a5:30:77:01:86:22:1f:8e:
53:4d:c9:f0:be:e8:87:29:75:a8:ad:d2:7f:81:11:67:3f:59:
dd:0f:a2:3d:2c:28:8b:30:bd:e1:ec:67:2c:b6:45:d3:15:bc:
ae:04:13:27:4d:7c:13:13:0f:07:ef:d3:84:5e:43:ec:7a:e2:
44:e9:9f:f7:2e:52:c5:06:5a:90:7e:05:25:18:1c:c9:29:17:
25:18:1f:37:19:a4:9e:51:d1:fd:70:40:81:1a:1d:25:04:07:
25:aa:9f:94:e0:0e:2e:57:8c:7f:c3:df:b0:93:52:3b:c7:b4:
6d:1c:8b:4f:01:84:bb:1d:41:04:d7:54:fb:c0:20:74:cf:2a:
6c:bc:5d:e5:97:27:8b:8f:15:a2:a9:04:0b:e4:c1:a0:a3:4a:
80:9a:fc:26:f0:c1:df:3e:18:a0:66:b9:ab:13:20:b0:1c:de:
f6:21:2b:da:6b:39:8f:c4:53:d0:64:e4:d3:6e:4c:07:43:5d:
13:c6:a1:91:01:0e:7b:04:78:6e:0b:d4:9a:ff:ad:5b:c2:ac:
48:76:42:f5:a4:52:b5:ee:7e:db:48:56:92:e6:ab:10:0d:da:
8d:f1:8f:cd:96:58:23:e7:f7:14:0a:33:26:ba:31:37:79:95:
7e:17:ab:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy
NzNCM0VBMjUwHhcNMjUwMTMxMTUyMjA3WhcNMjUwMjA3MTUyMjA3WjAYMRYwFAYD
VQQDEw02NzljZWE5Zi0zNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVLyfdXv8LKTWZJW5qU2pbKrmmNPWUKg9Z5kb+CpcGjko9KXbes8RtGeZhE4
Dcyzy8Coej4G5N9+SlDXOzffXXiFLUk10+pzDtbKLtjr0EAwJJ4EocGQpp0TvlSY
z8PHacx8c5ccaOwxvzHQFmHXqwCs4nCLIBzwhReHiBAltxsHhDkUciOB5PggeXf2
HxWuky02J7w/DbMmQNJTGTpaiJdFQ9/5kfNpk6WNYzKMWp0dM66z9Du1PnCCcKbn
r9a7vXIRpKb9BKJQWovkJRU8nhjcRLIpvL8ZGVEBX82LcqE3SQYeFbZR/Gh4l6Iq
4ORC7Gon/dU0Hxy3qhV1wHoUywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaRY8Tm
5qnAR55jPHv6ypp7MrlwMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE
QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn
VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCT0+wiInXlGANrpTB3AYYiH45TTcnwvuiHKXWordJ/gRFnP1ndD6I9
LCiLML3h7GcstkXTFbyuBBMnTXwTEw8H79OEXkPseuJE6Z/3LlLFBlqQfgUlGBzJ
KRclGB83GaSeUdH9cECBGh0lBAclqp+U4A4uV4x/w9+wk1I7x7RtHItPAYS7HUEE
11T7wCB0zypsvF3llyeLjxWiqQQL5MGgo0qAmvwm8MHfPhigZrmrEyCwHN72ISva
azmPxFPQZOTTbkwHQ10TxqGRAQ57BHhuC9Sa/61bwqxIdkL1pFK17n7bSFaS5qsQ
DdqN8Y/Nllgj5/cUCjMmujE3eZV+F6vv
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:21:17 2025 by rpki-client