Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier: A0fWg8kiqGWJmEBYoaeDLNO0/kbNtde1kRf26E+68kg=
Subject key identifier: AA:8A:CC:2F:41:32:2B:C1:D1:8E:BD:45:72:3F:AA:B7:62:DF:41:23
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial: 344E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number: 401F
Signing time: Fri 31 Jan 2025 15:06:47 +0000
Manifest this update: Fri 31 Jan 2025 15:06:46 +0000
Manifest next update: Fri 07 Feb 2025 15:06:46 +0000
Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: R8qpRDMiUWn4XehlxA1ZdKhk74ZZGdb/kYMlJ9hCZCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13390 (0x344e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Validity
Not Before: Jan 31 15:06:46 2025 GMT
Not After : Feb 7 15:06:46 2025 GMT
Subject: CN=679ce706-81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:bd:55:7f:ca:9a:80:10:a6:b4:1b:c2:64:
07:04:11:42:09:97:b5:45:c3:b5:24:fd:5f:e7:64:
01:61:b9:2a:42:a6:12:98:6d:8b:53:81:ee:09:cf:
a9:24:13:a4:49:18:15:30:bb:b8:4d:8a:8d:39:da:
3e:6a:3f:88:36:23:01:37:99:b4:b2:12:3b:12:3b:
62:65:b0:d5:fa:cb:bf:92:71:3e:90:0a:d6:11:4d:
a4:60:99:61:bf:9f:b7:ec:65:e9:0f:8b:b2:ab:80:
1c:f9:85:24:f6:fb:16:cf:89:84:2a:68:a4:19:53:
66:ed:57:bc:b9:cc:be:81:6a:0a:80:0f:fa:ff:1b:
b2:61:8d:47:2e:68:01:fa:a3:00:52:e3:7e:14:b8:
82:be:35:9c:23:7f:40:1b:65:1b:a7:d6:ee:e6:45:
7c:bc:6c:ea:7d:71:1f:a5:44:ec:7b:a6:a0:43:86:
77:ce:df:3f:d5:1a:95:09:ad:c1:f8:4a:a1:2d:71:
99:a1:fd:9a:2b:8f:5c:1d:13:77:e9:ff:e1:0d:4d:
86:38:dd:fb:b2:5a:96:bd:c6:aa:bf:de:e2:aa:8d:
a5:52:23:88:49:12:3c:d9:65:1f:e6:ed:f9:42:b8:
33:61:9d:96:69:5f:51:37:52:51:d2:45:19:6d:9a:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:CC:2F:41:32:2B:C1:D1:8E:BD:45:72:3F:AA:B7:62:DF:41:23
X509v3 Authority Key Identifier:
keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:56:4f:8e:26:d8:bd:98:c0:d5:46:e8:00:19:c9:1f:5b:
68:48:bb:02:a7:f1:5a:a8:06:81:3d:44:27:f6:2f:25:f5:b1:
04:00:a6:fc:e0:ed:48:2a:29:b8:e0:e5:53:b7:cc:34:bc:7d:
32:aa:fc:5e:a1:72:d9:28:75:4a:df:01:d3:a0:b8:9f:fb:00:
e8:90:16:c9:0f:20:9a:f1:ae:a2:f0:e5:ab:d9:3f:f8:04:58:
0e:dd:28:c5:5a:1a:14:4a:7d:f8:06:55:56:b5:eb:44:82:4d:
be:4b:46:b0:92:80:27:dc:83:ef:0f:29:7d:4a:1d:73:d3:1e:
96:b3:32:90:cf:a6:3b:8e:48:cd:b1:55:94:43:00:ab:ac:71:
ee:f8:d6:98:fa:42:ff:28:91:1f:fa:b4:c2:bf:ca:22:d6:8f:
db:c0:97:e9:44:8c:b5:9f:a1:96:93:69:10:02:9b:dd:bc:ad:
5f:e5:ef:65:08:e8:73:2d:98:8f:6b:51:d9:03:12:fa:7e:3a:
0d:fc:26:6f:32:1b:07:62:8e:e2:d7:2a:b8:f7:2f:0e:e0:58:
ef:08:30:1d:8e:1e:b7:39:aa:b8:57:53:ef:54:8d:6d:b5:e9:
d4:fe:6e:28:d2:31:d2:7a:61:c0:a4:2c:0c:e1:93:4c:29:a8:
05:19:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:14 2025 by rpki-client