Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier: YVu1OwjkC1Siwe7IAlqypp8k8hrz7xnaarrERXiuZW0=
Subject key identifier: A7:FB:F3:38:47:48:74:1F:7B:2D:9E:C0:86:82:29:D2:BB:E9:39:96
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial: 1E1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number: 1E1B
Signing time: Fri 31 Jan 2025 16:05:02 +0000
Manifest this update: Fri 31 Jan 2025 16:05:02 +0000
Manifest next update: Fri 07 Feb 2025 16:05:02 +0000
Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: ktxoUcCBsMbNQpz7EzGy81ex723ypL9A+0U0DAPmIKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7708 (0x1e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Validity
Not Before: Jan 31 16:05:02 2025 GMT
Not After : Feb 7 16:05:02 2025 GMT
Subject: CN=679cf4ae-6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:f1:94:b6:1b:dd:8e:13:29:f9:d5:3d:f2:
63:67:b8:47:a5:bd:d5:21:7d:16:64:07:6e:0c:68:
1a:77:fc:2f:7d:66:bf:12:9b:a4:ed:4d:1e:a4:ef:
49:78:09:40:96:f1:87:05:5d:ce:1b:a9:c5:4a:46:
91:fc:d8:40:8c:4a:97:78:19:6f:37:d8:6e:39:0a:
90:88:7d:b3:91:fe:40:67:97:25:07:22:5b:a6:fd:
8e:41:c7:82:b6:80:e7:42:19:bc:79:9c:23:8f:c8:
49:8d:ef:f1:05:83:fe:9c:2e:f6:7b:5d:f1:ae:10:
09:8e:06:b5:73:46:0e:4e:35:b3:52:1e:7d:0c:b9:
7e:1a:e2:a5:38:b3:34:d9:d8:70:03:d3:dc:04:3c:
c2:07:e7:c3:97:83:b1:e0:05:85:f3:43:5f:31:4d:
44:de:b3:6e:52:10:65:6d:13:af:fc:0b:c8:88:51:
af:6d:12:98:7a:48:b4:7b:21:22:ce:89:cf:4e:8f:
71:8e:85:a2:5d:d9:51:c6:0a:72:5c:05:fe:29:06:
73:c1:f6:7b:84:1f:66:9a:5b:56:96:ee:7a:57:cd:
d8:9b:25:c1:e8:32:09:1a:02:18:a4:ef:ee:c5:bc:
22:47:35:8d:f0:88:d9:f2:09:fa:53:5f:f0:3f:ae:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:F3:38:47:48:74:1F:7B:2D:9E:C0:86:82:29:D2:BB:E9:39:96
X509v3 Authority Key Identifier:
keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:ec:de:a7:f0:0b:6d:77:27:b9:8c:aa:23:da:c9:8f:e5:
a6:63:9b:40:96:88:ab:ce:eb:46:e6:bb:b6:c9:7e:c2:85:23:
c2:ad:5e:75:6d:ef:d7:2a:5c:c7:f9:cb:84:d1:c2:c2:a7:40:
63:7c:a7:ad:8a:a9:3f:e7:f4:64:58:e4:4c:c0:37:2a:dd:e8:
91:45:41:1d:e4:b3:5e:dc:e4:ee:e9:c2:81:05:47:b4:24:d5:
39:69:02:d3:eb:81:54:a3:33:1b:85:28:4d:5b:d4:51:99:96:
3a:98:ad:e5:96:29:c7:79:40:b1:bd:a2:41:96:21:54:75:43:
f1:a5:7c:37:ce:40:37:42:a6:83:cc:f7:9d:d5:02:c7:19:ae:
87:9b:19:fd:4d:95:52:27:20:3f:2b:18:be:64:ef:77:c0:48:
d0:19:c5:41:ad:e4:5d:f0:d7:4e:48:ab:f8:ab:92:40:3b:a7:
eb:c5:95:89:c9:c6:b4:0d:09:0c:65:e4:2c:35:49:78:51:17:
42:bb:30:68:96:45:59:81:c3:60:7e:2e:7e:1c:6f:5c:0c:d8:
d2:00:67:8f:e3:e8:8d:c6:19:e0:f6:04:06:90:10:d1:ac:6c:
53:62:cc:7e:bb:6c:70:16:a7:68:94:46:47:bf:fd:ec:68:08:
99:51:e4:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2
Rjc2MjVFNjcwHhcNMjUwMTMxMTYwNTAyWhcNMjUwMjA3MTYwNTAyWjAYMRYwFAYD
VQQDEw02NzljZjRhZS02MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFDxlLYb3Y4TKfnVPfJjZ7hHpb3VIX0WZAduDGgad/wvfWa/Epuk7U0epO9J
eAlAlvGHBV3OG6nFSkaR/NhAjEqXeBlvN9huOQqQiH2zkf5AZ5clByJbpv2OQceC
toDnQhm8eZwjj8hJje/xBYP+nC72e13xrhAJjga1c0YOTjWzUh59DLl+GuKlOLM0
2dhwA9PcBDzCB+fDl4Ox4AWF80NfMU1E3rNuUhBlbROv/AvIiFGvbRKYeki0eyEi
zonPTo9xjoWiXdlRxgpyXAX+KQZzwfZ7hB9mmltWlu56V83YmyXB6DIJGgIYpO/u
xbwiRzWN8IjZ8gn6U1/wP67VjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf78zhH
SHQfey2ewIaCKdK76TmWMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2
M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J
ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBf+uzep/ALbXcnuYyqI9rJj+WmY5tAloirzutG5ru2yX7ChSPCrV51
be/XKlzH+cuE0cLCp0BjfKetiqk/5/RkWORMwDcq3eiRRUEd5LNe3OTu6cKBBUe0
JNU5aQLT64FUozMbhShNW9RRmZY6mK3llinHeUCxvaJBliFUdUPxpXw3zkA3QqaD
zPed1QLHGa6Hmxn9TZVSJyA/Kxi+ZO93wEjQGcVBreRd8NdOSKv4q5JAO6frxZWJ
yca0DQkMZeQsNUl4URdCuzBolkVZgcNgfi5+HG9cDNjSAGeP4+iNxhng9gQGkBDR
rGxTYsx+u2xwFqdolEZHv/3saAiZUeR+
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:40 2025 by rpki-client