Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: kMmP37mdjwA+zp9qxcs/wyUDko0WniAPY5DELPLQ2fc=
Subject key identifier: 4C:71:02:0B:AE:34:3A:01:0F:1F:23:42:8E:08:BD:93:E0:74:4F:52
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0982
Signing time: Thu 30 Jan 2025 20:12:53 +0000
Manifest this update: Thu 30 Jan 2025 20:12:53 +0000
Manifest next update: Thu 06 Feb 2025 20:12:53 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: +KTqMJZkhBJzdYZ5WqX4IO781SIJJn+5Qo7YKREGTSQ=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: KDJ+ohVUY2aGK5rtHUQLiPRKWsZuV9h/W6r/Y+qQ0VM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Jan 30 20:12:53 2025 GMT
Not After : Feb 6 20:12:53 2025 GMT
Subject: CN=679bdd45-4fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:53:4e:d4:2a:a4:7d:35:f2:0e:ee:44:6f:
c4:98:c7:ec:ce:d0:fa:c0:87:b2:36:b6:e3:e6:f2:
d6:4d:68:0f:d1:77:db:ab:71:a7:9c:86:0a:4c:d6:
6e:51:62:5a:b3:78:05:e8:90:6b:3e:f9:bb:bd:41:
87:fb:bb:2f:80:17:c8:f3:bb:13:b8:86:43:17:66:
35:ae:44:01:1f:98:82:60:f1:82:cb:61:41:0f:41:
52:13:07:d8:a9:87:c3:64:1c:e5:57:5b:04:d8:54:
27:59:ca:27:1e:40:17:6b:e0:33:26:b0:80:6e:95:
85:8e:fa:1f:5d:e1:b9:45:31:16:4e:29:6a:21:31:
8e:35:c4:da:1d:58:df:3c:95:12:89:1b:52:fa:5e:
63:47:54:f6:3c:2b:96:a7:ac:d9:22:ec:a8:59:43:
af:e7:13:46:40:cb:d9:c5:79:91:05:6c:78:45:76:
50:96:70:31:2a:4c:98:c3:ef:f6:eb:51:a0:c8:17:
31:1b:da:ac:98:6e:2c:eb:06:6d:97:f3:8b:aa:40:
6e:df:e8:27:b7:c0:a2:63:f9:5f:05:c6:58:78:5e:
26:ee:be:f9:0a:91:58:15:4f:7f:b1:16:8c:ea:51:
c1:03:ee:52:4c:0c:bf:dc:d1:18:67:b7:a6:ce:55:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:02:0B:AE:34:3A:01:0F:1F:23:42:8E:08:BD:93:E0:74:4F:52
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:db:8b:86:4b:24:84:7f:a6:ab:ca:47:1d:cf:a7:28:89:2e:
92:de:44:11:e0:09:1d:5f:96:09:76:77:5a:cf:d6:0c:cb:c4:
c0:52:8b:d1:2b:41:ab:bc:34:90:e1:ba:3d:43:2b:82:7f:52:
51:b6:16:a5:63:be:26:fd:c7:8a:46:b8:cd:50:6a:28:ff:da:
65:29:7c:72:d8:f2:46:d0:34:d7:7d:9d:dd:b7:9d:cd:dc:65:
62:01:ef:b9:70:da:1c:21:c0:6e:10:ff:69:0e:61:12:f0:f2:
58:ba:d2:d5:db:f2:ad:50:17:ca:b1:7b:36:e3:af:64:bf:74:
e1:ad:d6:ea:ca:2a:d6:1c:8b:61:28:82:14:bb:8a:8c:3b:5d:
90:c5:59:99:0f:81:16:76:29:dd:2b:8a:a2:ef:45:c3:b1:53:
c2:29:88:2b:21:97:de:50:0f:30:f1:11:71:5c:b3:fa:b2:05:
48:9c:71:e0:12:fc:2b:fa:ae:a0:b4:58:ea:49:c8:fa:2b:d4:
93:8a:c5:5d:6c:06:be:90:52:2c:9d:cd:bd:64:ad:e2:96:6f:
61:ab:bb:7d:a2:59:e1:c5:d8:c3:4f:2b:89:dc:6e:8a:bf:d9:
22:e1:e0:d0:b1:f3:5e:35:7f:37:1f:55:8d:38:bd:9e:7b:f8:
c0:bd:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:54:00 2025 by rpki-client