Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier: L4MhTWj/itEWAGLyHeWzZ3KkwZzB8s+dzVIAbBm7rq0=
Subject key identifier: 83:EB:A5:FE:37:2D:E0:C3:4B:8F:63:3C:57:BF:4D:6B:2C:DA:3B:21
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number: 02
Signing time: Fri 31 Jan 2025 06:16:25 +0000
Manifest this update: Fri 31 Jan 2025 06:16:25 +0000
Manifest next update: Fri 07 Feb 2025 06:16:25 +0000
Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: u9T4qLE5iXA/k6EVXMGiiboqwV3DfzBNrB6MX6P4T3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Validity
Not Before: Jan 31 06:16:25 2025 GMT
Not After : Feb 7 06:16:25 2025 GMT
Subject: CN=679c6ab9-ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:18:c4:d9:09:fc:3e:98:1b:c4:3f:af:72:
2e:41:e7:e0:0c:f5:70:1c:87:39:21:40:ae:b3:34:
cb:56:8a:26:9b:99:0a:17:ac:38:1a:44:41:16:f3:
b9:c5:f2:bf:f4:3b:a3:79:5e:39:3f:35:06:d2:73:
11:1b:99:1f:db:24:af:45:3a:5e:e7:b0:7b:17:fd:
5c:c6:4c:ff:89:9c:f8:50:27:c2:2f:71:99:84:f3:
85:99:7e:22:b1:f2:26:38:bc:4c:64:4d:bd:78:2e:
a9:c4:46:52:d8:5b:09:44:bd:d0:0b:6b:c7:a8:77:
2d:73:e3:b7:1c:08:05:96:23:24:2b:a9:ca:0e:88:
c2:4d:90:df:10:24:88:cc:0f:fd:fb:84:57:1a:df:
85:02:86:fd:47:58:b7:8c:51:c2:82:89:4f:01:40:
48:a5:29:01:e6:37:27:7b:e8:3d:62:ef:6f:8e:b7:
34:94:6e:a0:9e:72:2a:4d:81:c9:1c:f8:73:12:4d:
27:55:08:57:a0:c1:93:fb:2c:1f:d6:e8:51:eb:06:
ed:30:4b:43:4d:7b:aa:b1:c0:88:d9:43:b8:1e:f6:
ee:fa:06:ba:f2:f5:56:4e:a4:c6:47:02:b8:18:e8:
51:4a:ca:40:67:31:2f:0a:6e:46:32:21:da:6c:11:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:A5:FE:37:2D:E0:C3:4B:8F:63:3C:57:BF:4D:6B:2C:DA:3B:21
X509v3 Authority Key Identifier:
keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:41:d6:cc:97:79:ea:c5:ac:75:9b:c8:7e:f5:26:47:60:
f9:65:fb:32:21:ab:5a:84:bb:0b:f8:91:8e:cd:b4:b6:3f:ed:
3a:d3:50:4f:40:a0:e2:f1:91:c6:0c:3f:f9:c8:ac:2c:ed:01:
2d:31:e4:b6:9a:db:21:4d:9e:e7:ad:13:c6:7e:c8:e5:38:b9:
b2:c6:da:65:26:2c:51:7f:8a:7e:48:24:73:b4:6c:dc:1b:fb:
82:8c:00:4b:e5:23:10:5c:b0:bb:de:39:2f:09:f9:c1:15:de:
1f:a3:26:8f:39:d6:f2:24:51:bc:01:70:6a:2d:43:37:bd:e2:
35:ac:02:48:7a:d9:14:8b:b1:11:b0:07:2d:64:36:10:9d:78:
d3:6d:74:48:84:51:e7:89:63:61:24:d6:58:8b:e9:e9:90:6c:
17:a4:01:5f:31:e5:4f:b5:07:1f:58:2c:16:eb:db:69:3d:27:
36:90:c6:5a:b6:e9:e0:3d:2b:e9:ca:91:cc:24:8b:4c:b3:df:
2c:2b:25:89:24:07:e4:2e:dd:cb:72:ad:50:ac:d9:c4:b5:7d:
84:c6:46:87:da:d0:cf:25:a8:15:f4:ae:5b:08:16:86:7b:b2:
36:59:fd:1c:af:ca:17:90:79:fb:09:d2:94:55:07:3f:4a:41:
0c:47:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:02 2025 by rpki-client