Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier: 0qeNRtKiIFp+8zw1Of4tA2dq1ju8MpIyzpBw8lEJKbI=
Subject key identifier: 00:FF:20:30:47:43:6D:37:5E:1E:76:6A:E4:86:C2:B7:F7:53:AB:57
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial: 344B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number: 344B
Signing time: Fri 31 Jan 2025 14:36:45 +0000
Manifest this update: Fri 31 Jan 2025 14:36:44 +0000
Manifest next update: Fri 07 Feb 2025 14:36:44 +0000
Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: v6Y2h7cqj/GurL0bjOarVPqlCD4GKCP/38jEIivmX4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13387 (0x344b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Validity
Not Before: Jan 31 14:36:44 2025 GMT
Not After : Feb 7 14:36:44 2025 GMT
Subject: CN=679cdffd-1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:5d:ba:95:0e:e9:7c:8b:15:8f:c6:56:0c:
19:72:f0:a8:4a:ba:aa:c0:01:99:3a:ff:60:53:8d:
51:94:93:82:43:ab:39:f0:fd:fe:2a:dc:0c:0c:96:
cd:6a:2c:6b:ff:98:47:21:c7:37:cd:22:8c:72:41:
c7:ae:e8:8d:90:40:7f:c7:c1:18:08:65:a0:e6:87:
79:a8:18:f3:d5:46:2c:bc:f7:e6:77:a6:0c:69:e9:
58:e2:08:f6:c5:0b:a0:f6:bc:8c:83:c6:6c:3f:1b:
2e:0d:e7:bf:cc:87:97:42:ba:1a:7a:ee:c1:0f:18:
3f:7f:93:a9:17:29:a1:bb:46:57:54:51:5a:12:66:
69:45:48:d3:0d:b2:5a:f5:2f:34:b0:4d:28:a8:4b:
e2:b1:bc:ec:2f:fe:1a:60:5f:b9:c4:31:bf:86:58:
d3:48:a8:d3:46:20:ad:f1:b4:2d:7f:36:c8:5f:19:
4a:1f:c2:cd:a0:e3:14:49:c1:b6:38:8e:c5:51:db:
12:eb:4a:07:bc:16:37:e3:6e:78:e9:5b:c8:64:5f:
be:ef:a8:3e:87:a5:92:27:5d:1d:81:94:e1:d1:8d:
65:a9:14:e8:d1:ab:52:4c:f6:d5:80:57:bc:23:f0:
0b:aa:98:22:46:06:3b:5d:d8:9f:1b:73:fa:1e:d4:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:20:30:47:43:6D:37:5E:1E:76:6A:E4:86:C2:B7:F7:53:AB:57
X509v3 Authority Key Identifier:
keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:34:d1:da:c0:a2:1f:e6:b0:00:06:a9:63:54:04:5e:a5:
e5:0e:34:8b:34:a7:cf:7c:3b:0d:a2:a3:eb:e7:6d:d7:2a:c7:
39:a2:2c:36:5f:d4:ff:e6:5f:6b:80:7e:c9:ad:e8:99:80:35:
8c:64:5a:2a:68:52:75:e6:e3:a2:15:9f:ab:9c:40:c1:3c:af:
ad:8c:0c:a7:d0:88:4a:19:13:c0:ae:1d:25:8a:98:07:ec:b8:
54:ac:43:7b:77:ca:4d:1e:ce:6d:0d:70:02:45:05:fa:79:32:
bc:9c:0b:d7:dd:63:52:b8:f6:95:14:ab:62:61:53:eb:b1:12:
c2:4a:30:f1:05:8a:d1:d9:85:9e:68:f5:31:c6:bc:4f:c5:6a:
e6:18:a3:26:48:c2:35:34:bb:aa:64:02:42:7a:cf:41:e7:97:
31:0b:39:eb:31:a8:53:f2:8d:f8:95:16:14:0d:cd:b0:3e:62:
2a:4f:bc:12:62:3f:63:95:fe:eb:be:84:d1:29:a2:9c:b2:05:
92:7c:37:64:61:81:c3:87:24:c7:ef:e3:25:6b:86:90:3b:fc:
9b:66:c3:0a:69:5c:89:5b:87:9e:16:c2:37:b3:f3:e4:a0:ba:
aa:68:77:31:de:c7:87:d3:3c:f5:c4:ed:02:76:22:8f:87:d8:
58:92:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:53 2025 by rpki-client