Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier: UxNQCb2A2gWG1TCkniagEhpjmX3s/J8q5FqPHub7RtA=
Subject key identifier: 61:03:B2:86:5E:0E:08:3F:E3:D8:AD:3E:A5:B1:A6:03:4A:43:01:E6
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 06:01:55 +0000
Manifest this update: Fri 31 Jan 2025 06:01:54 +0000
Manifest next update: Fri 07 Feb 2025 06:01:54 +0000
Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: dgWF2VUrk5eAWKVrYhadXuvs6SPhC+5oosCMY8w/DOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Validity
Not Before: Jan 31 06:01:54 2025 GMT
Not After : Feb 7 06:01:54 2025 GMT
Subject: CN=679c6752-c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:25:0b:42:8c:77:44:41:7c:30:0b:04:29:
89:44:bf:06:73:a2:a2:b4:0f:1d:15:8d:00:8e:9d:
f5:d9:b7:b8:dc:c9:ee:ce:be:9b:70:1a:7d:0b:51:
7a:00:d0:a6:92:a5:79:1c:8c:38:09:b0:21:3c:2c:
1e:2d:29:bc:50:ff:d5:13:e7:e4:e0:7a:76:c8:27:
d9:90:cd:25:89:58:85:b4:9a:27:9d:86:eb:f5:15:
00:4b:10:05:63:f0:d3:8e:e9:11:5a:30:ac:f2:a2:
58:10:cd:3a:d3:ec:ec:c2:85:9a:af:cb:84:1c:b5:
7a:85:c6:76:4f:43:3c:c6:27:79:78:ae:dd:8b:91:
54:e9:0f:dc:68:dc:f1:23:47:e1:a4:d9:fa:79:08:
5a:42:0c:32:5a:e6:ad:21:56:52:85:41:c3:30:bb:
82:7d:8c:77:e0:97:97:23:ac:d4:f9:d5:d5:bc:8f:
63:cb:bb:a3:87:17:f8:2d:e6:03:5d:a0:30:38:4e:
7c:f8:aa:c5:c0:75:99:8a:b8:7a:61:29:51:84:39:
5f:16:26:9b:13:2c:36:97:0a:9a:53:b1:de:e7:ae:
b9:b2:49:20:82:20:58:d1:83:5c:c9:17:0f:03:cc:
10:1d:5f:66:72:76:eb:83:34:e2:d8:ab:14:f3:1b:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:B2:86:5E:0E:08:3F:E3:D8:AD:3E:A5:B1:A6:03:4A:43:01:E6
X509v3 Authority Key Identifier:
keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:6d:17:34:47:e2:5c:07:57:aa:05:f6:b8:b4:7c:e1:7e:
b2:a7:04:a9:8a:aa:a1:f0:d8:67:65:bc:11:83:0b:f0:5c:b2:
71:4e:e8:9e:2d:17:56:98:d3:45:5a:d5:9d:50:78:64:eb:9e:
4c:4d:dc:e6:cb:61:a5:1d:dd:59:58:13:f4:e1:92:8c:4a:3f:
00:0c:85:0d:fb:d2:bf:ce:e8:b9:f2:b2:f2:6d:86:86:d1:59:
06:26:58:65:7c:f4:72:27:02:a3:e8:3b:87:91:85:62:da:de:
30:e1:70:bd:3b:2f:48:9e:cb:93:b3:34:99:be:3f:d8:d2:90:
62:fb:c6:ef:21:1e:31:03:ff:51:c1:41:73:1f:a5:d7:8a:b8:
35:52:96:80:72:f4:7b:e8:fa:71:0d:fa:8e:a5:cb:ad:c9:c3:
32:eb:58:8a:a1:24:c9:29:b3:05:b4:e0:46:88:4b:37:77:56:
37:2f:b4:e2:c9:c8:91:9f:d9:dc:3f:86:2c:9d:6b:f2:83:18:
9e:71:30:ac:03:60:90:36:b9:b3:ee:8f:a5:84:02:dd:2f:b4:
ea:29:e7:4d:a6:27:32:bd:e9:13:2e:87:72:0c:37:d1:10:4f:
e8:e7:a0:c9:53:bb:c9:df:23:fa:85:fc:8b:e4:29:33:45:c0:
e8:a7:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:26 2025 by rpki-client