Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
File: GhmPmhfws17bhJVg-1-YUBw8nK8.mft (raw, json)
Hash identifier: vAodeSIImWdk1cR7gigQ70RQO9BZx06r2OxKOE773bc=
Subject key identifier: 01:9F:15:00:E7:25:36:74:56:C4:1C:18:55:25:7B:24:75:A8:21:46
Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
Certificate issuer: /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Certificate serial: 0F99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
Manifest number: 0F8B
Signing time: Fri 20 Dec 2024 17:30:42 +0000
Manifest this update: Fri 20 Dec 2024 17:30:41 +0000
Manifest next update: Fri 27 Dec 2024 17:30:41 +0000
Files and hashes: 1: GhmPmhfws17bhJVg-1-YUBw8nK8.crl (hash: CJeGSu2mDzC4DqUgs6XYjWXiM5Qjg//puyUvl5+YZ5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B300, serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Validity
Not Before: Dec 20 17:30:41 2024 GMT
Not After : Dec 27 17:30:41 2024 GMT
Subject: CN=6765a9c2-b3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:d6:4b:29:b1:08:ff:a0:bf:d2:12:2f:24:
e1:7b:a0:22:62:cf:1a:4b:16:fa:70:bf:31:e7:aa:
1c:99:9b:6b:d1:af:59:6a:86:f0:7b:ec:02:83:28:
72:d5:81:86:7d:2f:67:c0:84:c2:54:8e:49:8a:d3:
73:00:f9:d5:35:a2:ee:63:2b:dd:2c:cd:f1:dc:7d:
b4:dc:b3:9d:34:9f:20:0a:a2:48:61:60:33:8f:a0:
06:76:f6:4c:ba:ea:c6:c0:e2:c7:10:2a:46:8c:7b:
bf:26:4a:ad:ad:df:7b:19:80:a0:d7:b5:1a:40:c2:
c7:43:35:c7:54:5a:e3:50:f4:35:2d:e3:7c:bd:8e:
83:cd:c7:56:83:ff:9a:ba:1a:ef:6c:f1:c7:f5:b2:
ce:c8:4a:31:2f:24:fa:05:c7:4b:ed:7f:2a:d8:b1:
58:3a:07:16:40:82:b0:f8:88:1f:31:14:75:cb:d6:
42:13:d8:db:6a:f5:fb:d1:1a:81:1d:01:6f:c0:4c:
ee:7c:08:59:8a:9f:51:b1:21:86:e1:39:cd:c4:bc:
4e:74:d1:dd:54:22:c2:f8:57:50:ff:55:0e:a0:d5:
9e:26:77:4d:b1:c4:33:2e:d2:26:fb:20:38:23:91:
b1:3f:0c:14:09:14:f3:79:d8:cc:a6:21:1c:ec:73:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:15:00:E7:25:36:74:56:C4:1C:18:55:25:7B:24:75:A8:21:46
X509v3 Authority Key Identifier:
keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:c5:78:80:8c:ea:f8:0b:b6:8a:05:89:2e:93:8d:cb:95:
3f:d8:bf:3a:45:c9:52:91:9e:6a:2a:c6:e7:17:2e:fc:80:e8:
90:b9:37:c7:0f:25:fa:d5:46:74:dd:0e:d5:df:45:73:c8:78:
37:07:93:be:b0:5f:b7:99:56:8b:8a:4b:c8:74:4a:73:05:d9:
c7:c4:09:1b:79:8b:97:68:ef:c7:14:02:8f:ed:f9:91:26:01:
ec:96:75:d3:f3:cd:88:71:22:00:ef:01:91:95:b5:f9:b1:c1:
fe:4b:3e:7c:7e:58:34:78:b4:f9:ba:70:31:3c:ba:f6:93:ab:
27:11:e3:7b:aa:a7:4a:42:a4:29:73:e7:c7:11:22:cc:a6:62:
38:65:ca:2d:a7:f7:d4:d6:2c:99:6e:e1:84:ad:88:38:21:4c:
ee:06:6a:c1:81:25:25:20:c4:51:6f:9a:7a:aa:15:a9:04:50:
e2:66:2e:ed:d9:b0:2c:e4:eb:ac:3e:48:66:93:93:7d:73:f7:
b0:98:e0:7b:3b:3d:44:2e:bb:b7:6f:f8:3a:fa:90:3e:37:7f:
e8:b0:f3:39:70:44:b5:05:ec:14:68:4d:2a:01:4d:cf:2b:98:
eb:ef:7d:b8:ec:88:61:6a:1a:d8:c7:26:0f:c4:55:d9:6a:c9:
11:3b:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:34:51 2025 by rpki-client