Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier: lPjb8UxZi6yeltGHv5zBjzbbheAzNaGkNDCVnj/UrL4=
Subject key identifier: 96:BF:BE:40:EA:2F:C4:04:47:C0:C7:3F:65:CE:C1:76:53:8C:E5:D9
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial: 0AB6
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number: 0AB6
Signing time: Fri 31 Jan 2025 15:38:25 +0000
Manifest this update: Fri 31 Jan 2025 15:38:25 +0000
Manifest next update: Fri 07 Feb 2025 15:38:25 +0000
Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: TTLA2JQdq7rShnvW6eoQT28R0M0P0sDy+VSy+AMLins=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Validity
Not Before: Jan 31 15:38:25 2025 GMT
Not After : Feb 7 15:38:25 2025 GMT
Subject: CN=679cee71-73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:65:32:1c:86:44:2a:0d:40:e6:88:7e:93:
e3:5e:20:14:29:83:3e:3e:03:11:bc:22:17:6b:9d:
8f:9a:27:03:a0:66:23:d4:a0:40:44:b2:13:2c:29:
94:b4:23:71:9e:e3:12:03:e0:15:48:2b:1a:ab:77:
5f:d9:32:ca:36:7c:8d:cb:03:b3:64:96:44:17:ef:
3e:ae:e0:32:8d:03:30:46:db:93:b7:5d:36:61:4f:
a1:fd:b1:6b:0a:de:3d:00:91:07:9f:f4:65:d5:a3:
75:d7:53:45:f4:a7:43:cc:36:4f:d3:c4:4b:d4:28:
a1:f8:eb:80:f4:f1:2a:5b:77:ce:09:69:f0:e3:f9:
e5:7f:11:32:1a:ca:fa:00:93:a6:14:64:3c:36:f5:
54:99:17:c9:07:ec:c3:4a:41:b1:6e:5e:07:43:c2:
8b:3a:50:93:01:a5:20:fd:7e:fc:73:c9:e6:af:d0:
d4:0a:5c:b1:77:de:db:7e:98:ce:42:54:17:ff:b4:
ab:c2:bd:e2:5b:d0:19:5e:93:fd:a4:9d:d0:cd:c7:
2c:81:a3:03:89:7f:ac:3e:79:35:8b:7c:8e:ad:e9:
31:30:cf:4a:9a:cf:dc:08:85:b3:87:ed:ff:bb:35:
2e:e6:5e:31:bf:f3:a5:33:5c:7c:70:22:69:0c:e8:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:BE:40:EA:2F:C4:04:47:C0:C7:3F:65:CE:C1:76:53:8C:E5:D9
X509v3 Authority Key Identifier:
keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:a1:05:6a:6e:6b:1f:26:ac:09:b9:90:2a:98:05:a9:8e:
61:21:3f:22:26:cf:ee:ba:3a:9c:8d:dc:f7:83:ee:a1:5a:76:
fc:40:c0:71:33:0f:96:11:0f:a4:bf:f0:f7:8b:8d:27:6f:88:
24:f7:8f:4b:16:f2:cc:9a:1c:f2:65:78:2c:8f:0b:74:ae:92:
5f:a6:44:7e:54:c9:fc:7e:4a:3e:4b:55:dd:ae:d3:73:82:08:
8b:86:96:d0:cf:65:f6:33:1e:5b:18:ab:4e:4c:42:4a:f0:18:
d3:97:f5:4a:0a:0e:36:67:10:67:03:2f:d2:eb:36:3d:3e:77:
37:fd:c3:82:83:c3:b6:65:fd:28:4f:f2:24:21:e9:d8:61:d6:
c5:aa:25:33:5e:9d:2f:97:41:d9:9f:3b:ba:77:4d:05:98:be:
1a:4f:17:84:c2:37:95:5d:dc:10:15:f1:c4:0e:97:1e:8f:1d:
3a:0a:a1:1e:0b:1c:1e:33:42:2b:ae:f8:66:15:5f:c2:9d:66:
30:28:87:21:53:98:72:d5:94:65:87:98:33:48:d8:13:ef:43:
1b:7e:20:e2:12:23:5b:21:7c:ef:ce:78:ca:11:5a:52:86:0b:
27:52:7a:f4:12:57:40:42:f1:b7:57:b9:5c:93:c8:c9:a6:ab:
c6:41:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:29 2025 by rpki-client