Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier: g5+yxZZKLJwNvli0VH1KmS8uTaiTu9AGE16lAd88C2M=
Subject key identifier: 44:48:AF:56:02:B5:9D:C9:2B:39:EA:75:C9:83:03:EA:FC:59:FE:C5
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial: 06C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number: 2714
Signing time: Fri 31 Jan 2025 15:58:48 +0000
Manifest this update: Fri 31 Jan 2025 15:58:47 +0000
Manifest next update: Fri 07 Feb 2025 15:58:47 +0000
Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: xCtyapifVJ9rK0VLDdu/rDWGLCVxQLAlLkicA79eb9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Validity
Not Before: Jan 31 15:58:47 2025 GMT
Not After : Feb 7 15:58:47 2025 GMT
Subject: CN=679cf338-1ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:12:cd:a6:50:3d:c1:fd:a1:5b:a5:2b:c0:
28:ff:7c:6e:09:d8:b1:9f:ed:9b:d0:91:82:5e:28:
5f:31:18:71:4b:9a:0b:8a:b7:6a:d5:ca:77:99:9c:
f9:d2:46:fc:8a:1a:f8:38:79:52:7b:2d:cb:45:21:
aa:c2:ec:bb:06:92:9c:10:f0:dc:d9:22:7c:e0:ac:
25:17:dd:a9:ba:81:96:ef:fe:5d:ca:b6:ee:13:08:
85:e9:fc:af:2f:0d:44:71:09:e3:b4:1e:5e:25:42:
a4:6a:f6:70:0d:75:f5:a5:73:7d:3a:98:13:f3:f4:
a2:3e:59:51:0c:60:dc:f8:0d:28:e7:65:74:14:c4:
48:01:4d:9a:7f:53:94:c9:d9:7a:f7:d4:6c:dc:82:
08:8f:fe:0b:d5:18:47:75:e1:14:36:99:19:d4:cb:
28:7a:37:b1:26:59:ab:91:3e:65:66:a3:99:ff:f7:
51:02:e3:cc:70:d5:4a:76:23:5d:90:8d:fc:10:b6:
34:b6:cf:c9:91:ab:53:c3:ba:16:aa:1d:a3:40:a5:
03:01:65:f3:e0:53:1c:8d:6d:88:a6:b2:89:ea:48:
e5:d5:c1:75:42:eb:96:3e:46:77:ce:ac:4c:0e:93:
e3:d0:64:62:7e:5c:a5:9d:0f:57:5b:7a:c7:00:42:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:AF:56:02:B5:9D:C9:2B:39:EA:75:C9:83:03:EA:FC:59:FE:C5
X509v3 Authority Key Identifier:
keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:d8:0e:62:20:c1:2d:dc:47:f3:f0:5e:c2:77:cd:b0:fd:
bf:b2:ee:77:49:c4:81:41:70:02:e0:c9:7c:be:ac:cc:03:68:
e2:34:cd:8c:e8:4b:f4:f6:44:90:de:fc:b1:eb:b2:b4:a4:62:
a9:7d:4e:e0:17:2c:54:c5:5d:55:b5:08:8e:f9:b0:7f:bf:5f:
e1:f6:d6:d9:84:54:03:5c:29:57:8d:8a:5a:f8:0d:14:0f:34:
36:63:ac:6a:20:f5:25:05:5f:92:a2:97:4d:aa:5f:00:f5:43:
e8:ce:e0:23:c6:dc:40:d0:db:95:22:ae:cb:81:0e:fb:3c:41:
b8:5d:b0:6c:a1:c9:69:32:ff:48:15:3b:0c:ac:f0:99:29:5f:
aa:7b:d9:b5:c1:3c:de:43:01:ee:43:7a:ef:5e:fc:3f:19:57:
05:28:8a:8f:a0:8e:73:84:6f:69:08:22:ea:29:23:b7:ac:33:
14:87:5d:0c:19:16:d0:4d:37:87:26:d9:82:91:fc:16:0a:9a:
9a:7b:94:29:4c:4c:ab:7c:e9:52:48:fb:fa:65:ca:86:03:b7:
af:4b:51:6f:10:21:54:3e:4e:25:1c:8f:f3:c7:1d:97:b5:68:
0c:38:4b:2b:aa:72:5c:75:d8:4b:f9:82:b6:79:db:2e:8d:ca:
26:3d:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:08:51 2025 by rpki-client