Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
File: GhmPmhfws17bhJVg-1-YUBw8nK8.mft (raw, json)
Hash identifier: B9E0ZbY9Z4oxo3kCZuN1IRHtzRx7dmnyJ7BVarCz6uc=
Subject key identifier: 25:26:AF:7E:0D:5C:DA:02:70:DE:F1:95:C1:3F:5C:9D:9A:1F:49:31
Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
Certificate issuer: /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Certificate serial: 0F98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
Manifest number: 0F8A
Signing time: Fri 20 Dec 2024 02:46:20 +0000
Manifest this update: Fri 20 Dec 2024 02:46:20 +0000
Manifest next update: Fri 27 Dec 2024 02:46:20 +0000
Files and hashes: 1: GhmPmhfws17bhJVg-1-YUBw8nK8.crl (hash: SC5AWOjgLQAzEhKZtUGkuTrGJwrzkVpFoDkdUJ2Jsxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B300, serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Validity
Not Before: Dec 20 02:46:20 2024 GMT
Not After : Dec 27 02:46:20 2024 GMT
Subject: CN=6764da7c-080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:59:2f:c7:77:34:f2:ec:e0:ba:6d:34:25:
b1:08:3a:a6:0c:bd:64:d0:2b:23:95:90:d4:75:0a:
fb:b9:ca:e6:e9:96:35:4e:9d:39:78:11:2b:df:3b:
54:22:dd:b2:d8:da:85:79:70:ef:5f:92:03:45:57:
09:f2:a5:7e:8d:f5:5e:a1:94:70:85:63:2c:22:db:
95:f0:5b:5b:78:8e:c1:3b:a4:05:64:5e:e1:63:14:
5f:05:40:ac:fb:12:48:ed:e2:19:c6:99:d7:b2:57:
a2:db:77:a4:5a:a4:30:0c:e4:50:df:14:df:bc:84:
af:39:fb:fb:8c:40:89:6b:59:d7:bc:d5:47:fe:d3:
d5:55:6d:0f:6e:43:fe:ed:9f:32:cc:15:81:65:f7:
d9:81:41:8c:3e:f1:33:a4:c7:5d:14:8e:4c:9e:e8:
2c:fd:49:05:3d:ef:69:da:48:78:ab:96:19:d9:d1:
05:db:bd:14:10:4c:0b:40:d7:09:92:15:e3:14:be:
0b:10:a5:8d:bf:db:a1:18:08:a1:37:2c:47:c3:11:
34:e3:d0:a3:9c:89:89:4f:4d:a3:62:1b:79:3b:7c:
98:11:9e:f8:84:1a:7d:b8:4e:24:8c:db:92:bc:32:
2c:ad:f3:65:f6:14:2a:6e:3c:b6:76:db:66:7e:f9:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:AF:7E:0D:5C:DA:02:70:DE:F1:95:C1:3F:5C:9D:9A:1F:49:31
X509v3 Authority Key Identifier:
keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:0b:c4:44:3e:8a:b4:57:86:83:dd:b5:1b:b9:f5:f5:dd:
73:fa:c6:b4:51:9a:31:0a:8c:4a:a5:c1:fd:d2:e4:43:6c:8e:
28:48:49:fe:96:65:ee:1c:65:d5:1d:47:9e:77:1a:fb:75:a3:
92:87:78:ec:99:61:95:95:76:40:fa:b0:45:54:2c:ed:ca:13:
4b:c8:e9:7c:78:07:68:8b:b3:d4:c2:ad:c3:bd:fa:20:84:a9:
9d:16:f6:1a:d4:9e:cd:87:49:d9:b1:16:b9:44:df:bf:97:5d:
26:ab:9e:22:1a:0e:d0:c7:53:9f:08:90:27:fc:9f:5e:a3:3d:
12:88:f0:f1:37:68:ac:3e:e2:c1:d5:79:1b:b9:25:b2:45:08:
81:99:5b:4b:27:48:67:9e:b9:0c:f0:73:55:d7:c4:3f:f9:68:
c6:32:c0:17:1a:da:ea:e2:7e:34:d5:11:ab:73:4e:96:73:e9:
c1:d4:f8:7d:64:d6:e7:78:f0:7b:9a:69:2c:1c:2e:ad:08:12:
77:d2:7d:21:c8:d5:d2:ac:be:aa:7b:44:d4:82:e3:08:4a:be:
c4:f7:5f:d8:1c:b9:27:85:82:7d:54:95:88:86:9f:17:9b:b7:
11:f5:b3:2f:31:86:9c:58:a3:28:34:70:21:88:ef:36:08:03:
71:5f:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:42:00 2025 by rpki-client