Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json)
Hash identifier: tfhnurbRW+iFX9odjCdSXGwLHZomKQDd56IuINoG6p0=
Subject key identifier: 07:AD:E8:47:55:18:A0:3B:69:DB:62:61:5E:2E:A8:70:B8:1C:14:A3
Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E
Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
Certificate serial: 1909
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
Manifest number: 1E53
Signing time: Fri 31 Jan 2025 16:26:40 +0000
Manifest this update: Fri 31 Jan 2025 16:26:39 +0000
Manifest next update: Fri 07 Feb 2025 16:26:39 +0000
Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: WzW4iMC6PQErRTcAc0siPEKSCTr+Ysp5z4O/pqRkpzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
Validity
Not Before: Jan 31 16:26:39 2025 GMT
Not After : Feb 7 16:26:39 2025 GMT
Subject: CN=679cf9c0-3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:06:32:c6:3d:e1:b4:b8:26:08:b7:f0:17:
92:68:8f:d1:6f:d8:27:d4:f9:e1:d8:1e:6b:cf:fd:
f9:e1:66:82:46:21:ea:a1:69:7e:e7:05:94:f5:a5:
7f:37:a1:5d:35:4a:1d:1d:68:cb:89:f2:37:b0:19:
7a:46:f8:48:a7:df:1d:4f:77:e6:92:33:fa:e5:33:
3c:04:c7:bc:ad:42:5e:9f:e6:ff:a3:1a:10:63:4a:
13:fb:0c:a3:29:0c:a3:4a:ee:4c:e5:e9:e6:7b:92:
86:1c:9c:19:a4:ab:23:76:43:90:9b:a8:f6:db:39:
b0:90:d7:ad:7e:97:2f:08:e7:53:3f:07:42:a6:4f:
cf:17:af:22:32:b2:83:dc:bf:aa:db:3f:f6:ad:2c:
87:6b:a4:ff:40:2d:93:c7:03:a3:ec:3f:91:d8:e7:
21:c3:b0:3d:7d:85:2d:a2:17:eb:38:5c:d5:d4:ca:
05:e8:a8:c9:cd:ce:18:77:ea:a8:b9:4b:6f:60:9b:
77:96:6c:7a:02:cc:48:27:4c:dd:16:cc:fa:f7:da:
4d:56:96:e3:78:79:e0:e4:95:14:de:48:26:80:ff:
a4:ce:fa:9a:05:87:68:67:79:32:e0:bc:ca:71:cc:
72:ad:2c:90:ba:13:8e:17:b7:0d:ac:11:66:2b:19:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:E8:47:55:18:A0:3B:69:DB:62:61:5E:2E:A8:70:B8:1C:14:A3
X509v3 Authority Key Identifier:
keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:17:a4:3c:02:b4:d6:89:0c:a6:fd:e2:f1:63:d0:08:5e:
0e:3e:7c:c5:6f:ea:ef:7b:04:72:e2:c1:40:a1:de:ec:c1:8c:
f6:9c:fd:a8:f1:fd:3e:31:b1:c3:c6:6e:fd:ce:f5:0c:7d:58:
3e:c6:bf:39:a8:1a:10:61:c6:c1:ec:5a:9a:e9:01:5c:b4:fa:
87:6a:e0:24:a1:53:e5:67:5c:22:17:1a:27:98:7b:0d:81:07:
6e:db:84:45:4f:c8:02:e7:cc:82:de:7a:59:74:33:4f:72:47:
2a:50:58:3d:56:d5:3d:b4:63:7d:a2:2c:bf:d8:00:b5:96:75:
db:85:bd:16:22:b9:49:9a:7f:5b:41:34:bb:53:1a:4e:49:8e:
28:47:ae:19:00:de:1e:b0:6a:86:14:e7:7f:b7:b4:b3:bb:68:
62:cd:7e:e7:80:13:0b:10:d7:44:1c:10:3e:f0:06:ab:93:6a:
c2:6d:e8:68:5c:16:45:b3:8e:ed:81:8c:3a:a0:71:61:8f:eb:
bf:b1:37:5b:5e:ae:a8:e5:df:89:d2:7c:ed:34:80:db:0f:36:
3f:b0:c2:fb:dc:ba:d8:b9:90:66:8c:75:2c:79:44:64:dc:36:
71:ba:66:5a:81:33:b6:30:8d:84:10:a4:70:5b:4d:a3:8d:c9:
28:85:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:20 2025 by rpki-client