Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json)
Hash identifier: HUu5pXae+A7ffeowDogNnCLuFH76+tG66vHnf6MfKeA=
Subject key identifier: 02:22:72:CA:E2:24:D6:A7:BE:BF:3D:86:45:2C:03:8E:B5:E1:A9:B5
Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
Manifest number: B9
Signing time: Fri 31 Jan 2025 05:03:29 +0000
Manifest this update: Fri 31 Jan 2025 05:03:28 +0000
Manifest next update: Fri 07 Feb 2025 05:03:28 +0000
Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: t+l0DhdVxlVjVcx7OarP+48bSkfzI/TyjsjyRNH5gpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
Validity
Not Before: Jan 31 05:03:28 2025 GMT
Not After : Feb 7 05:03:28 2025 GMT
Subject: CN=679c59a0-c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:92:0c:84:13:3f:f8:0a:d3:05:10:12:0f:
69:6d:3a:8d:30:92:36:7d:e1:1b:5c:f1:a7:dc:8e:
b8:ce:71:71:aa:32:7a:66:18:c8:e8:c7:90:80:0a:
b0:de:55:39:10:b0:82:04:4f:ea:08:7a:e8:7f:0f:
20:3c:2c:df:76:22:37:90:56:5a:2c:1f:11:7e:38:
0d:0f:13:39:63:40:a8:16:13:c9:27:8a:f0:be:7c:
02:3c:21:ea:0e:06:6d:88:e8:dd:46:d0:57:00:48:
e8:84:a6:26:32:95:09:20:17:e3:62:e4:98:35:10:
ae:ec:52:59:39:c9:19:85:84:34:a5:ee:de:40:6f:
4d:e9:82:da:cb:7b:5e:94:2e:ce:34:a2:81:78:38:
98:e6:27:aa:1a:48:3d:9c:01:b1:54:25:92:2f:78:
39:52:8b:5c:89:4c:44:1b:b2:76:50:44:63:31:85:
19:83:09:3d:16:87:44:be:29:be:80:c5:3e:d8:0b:
7d:93:ec:d6:4f:1e:e6:b3:cf:69:8d:b1:61:19:95:
19:ad:48:4b:f0:e9:3a:37:54:28:ee:c8:e7:45:f9:
a3:22:09:76:71:c8:8a:a9:38:7f:73:5e:29:1b:6f:
c2:b5:1f:a9:04:17:10:c1:5c:e1:2e:49:5d:2d:40:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:72:CA:E2:24:D6:A7:BE:BF:3D:86:45:2C:03:8E:B5:E1:A9:B5
X509v3 Authority Key Identifier:
keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:0b:ea:b3:5d:36:e2:9d:23:a7:41:bb:69:d7:67:28:c5:
43:30:47:30:11:99:8b:e2:6d:80:5c:42:4d:e7:19:0c:90:5e:
a6:98:7c:32:72:68:79:4e:27:eb:87:7a:8e:ed:57:65:84:85:
a1:1f:85:5b:99:af:2a:1e:1a:c3:7a:68:e6:7c:22:bf:67:ae:
bc:15:6d:ae:e9:b8:25:71:fb:87:03:2f:71:c1:6c:2b:bc:a5:
47:a5:2b:b1:9d:5f:92:e7:a2:d4:ad:83:2b:87:b8:f5:6b:7c:
0a:31:24:7a:10:4d:14:3e:ee:93:0b:eb:66:30:28:62:0f:e7:
ad:01:a9:6b:a4:5f:03:19:01:2d:8e:34:e3:2f:9a:3b:e4:85:
82:bc:9b:44:4a:42:5d:0a:d9:88:16:f2:14:84:2a:3e:52:a3:
56:27:3b:a9:28:4a:f9:9a:4f:a7:17:8e:48:58:a8:34:a7:60:
e4:1e:56:10:d7:96:c1:69:d9:b9:b0:cc:2a:7e:03:ba:1c:e6:
f5:d6:b5:78:5b:9d:ef:6d:0c:d8:66:61:91:cb:53:85:d4:3b:
ca:64:ad:c9:98:64:ae:a2:ac:ab:e0:aa:bb:b7:55:6a:dd:cd:
d5:42:d4:31:8f:56:5a:d8:c1:12:e2:3c:be:37:3a:91:38:dd:
00:8f:86:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:47 2025 by rpki-client