Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json)
Hash identifier: 4bNRvbCeW50WZAWcjiGDtHPZ5mX/uvkkE9VYnnQn10Y=
Subject key identifier: 9A:33:6E:9E:0F:88:35:22:D2:8C:0D:B2:CA:DE:75:F3:A4:D1:45:54
Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
Manifest number: 07CA
Signing time: Thu 30 Jan 2025 21:04:41 +0000
Manifest this update: Thu 30 Jan 2025 21:04:41 +0000
Manifest next update: Thu 06 Feb 2025 21:04:41 +0000
Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: AUxjVG/NdPdNWR62no+spEPJQTs8XqEs2JtUFofTFm8=)
2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233
Validity
Not Before: Jan 30 21:04:41 2025 GMT
Not After : Feb 6 21:04:41 2025 GMT
Subject: CN=679be969-845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:be:09:74:24:b4:ca:94:c1:fd:b5:b8:25:
bf:62:34:1e:75:b0:a0:31:aa:c5:81:54:55:ff:a4:
cf:28:04:f0:7f:4e:91:1c:27:0a:ce:ab:f5:aa:29:
2b:b6:61:73:0a:68:77:e4:cd:b8:dc:ca:04:77:ff:
bf:37:6e:17:02:4a:47:ae:47:c2:9c:a9:79:c1:a8:
c8:77:6a:8c:ca:ee:7b:ae:52:67:25:8a:d9:d4:82:
22:39:a2:a4:6e:e8:b5:86:2e:dc:21:24:04:56:0b:
51:4b:23:22:a7:13:77:93:c2:e3:b3:c3:06:e5:74:
a2:1a:3f:69:51:03:75:8e:ee:81:81:3d:6b:99:e2:
2d:d7:31:a6:b4:ff:40:38:c5:98:8b:6b:83:53:e9:
4a:12:00:11:ed:f7:66:35:17:9e:16:8c:b4:b3:3f:
1c:0e:73:d1:59:07:c8:cd:a6:41:ab:9d:78:40:eb:
f2:bd:3f:e0:e9:84:19:bc:2d:b0:4b:e8:e7:be:18:
fd:5b:37:39:bc:a7:07:3e:0f:fd:1a:05:c9:df:43:
f2:9e:ca:a8:1e:1b:a0:24:01:8c:3d:49:a5:4f:ee:
2d:d3:9b:66:cb:e7:15:56:1a:5c:2a:2b:de:39:b4:
d6:5a:6c:cb:23:15:4e:cc:93:41:bb:33:41:7b:b5:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:6E:9E:0F:88:35:22:D2:8C:0D:B2:CA:DE:75:F3:A4:D1:45:54
X509v3 Authority Key Identifier:
keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b7:cb:ab:b6:df:6a:bd:4b:fd:db:69:81:40:3f:a5:eb:df:
11:35:64:49:df:c9:04:9d:e2:cb:41:74:2e:f0:50:3d:c8:0e:
3d:bc:59:53:e2:e5:85:98:9b:33:be:08:21:f7:ab:1e:0a:f2:
b8:30:14:61:88:66:35:04:51:ea:96:17:97:2c:bc:3c:ad:a1:
2b:c8:6b:7e:36:9e:ba:85:60:bc:b1:04:e1:d5:88:19:7f:06:
6c:37:fa:14:4c:4d:01:46:b9:13:a9:8b:cc:df:3c:7a:1b:c1:
d7:a3:b8:a9:78:0f:1c:70:47:23:bf:b1:c1:ac:7e:ac:6b:50:
82:c1:6f:d3:4e:6b:08:63:42:8a:07:a7:d0:61:98:63:4e:98:
9b:27:2e:78:65:9e:23:7e:b1:2c:72:af:51:43:74:47:64:2d:
25:c3:3e:69:0a:5e:83:99:ec:bf:1d:6c:25:e8:4e:54:00:0b:
d6:c0:0a:5c:2b:de:08:8d:4a:4d:99:0f:8a:45:39:c9:38:7d:
2a:0e:d3:e2:5f:ed:4b:ff:76:0e:cd:8a:18:6e:30:1d:af:4e:
e2:4b:d6:9a:fe:98:29:29:ad:6d:cf:2b:6e:12:74:9c:3a:9c:
92:01:bf:50:f7:62:36:3c:bc:a0:dc:6b:10:a5:8a:46:20:6c:
c0:a8:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:18 2025 by rpki-client