Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier: AK3Jti1f3DsXWly45M4TB9yYa3gN3wxE5QR/OhtrQYc=
Subject key identifier: 9E:28:04:34:69:E4:51:99:08:F9:3B:F2:C2:1D:AC:BA:AE:4C:3E:49
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 07:01:56 +0000
Manifest this update: Fri 31 Jan 2025 07:01:55 +0000
Manifest next update: Fri 07 Feb 2025 07:01:55 +0000
Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: x5VmdQcB0Z6zQymBFjHEhEO4ZFZQ2Xel8CtMDMqtSOI=)
2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: 46zNjtnLZ5ywrRRPOzjWlNv+erVogDzKd0OwWv6xC4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Jan 31 07:01:55 2025 GMT
Not After : Feb 7 07:01:55 2025 GMT
Subject: CN=679c7563-2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:87:23:01:b9:f4:08:6a:cb:36:e4:ec:e8:
d8:cc:9a:61:4f:cf:8b:1d:2f:d4:a5:67:90:bf:bb:
fb:af:09:47:b8:6d:b1:4b:6f:87:7b:86:c0:c1:00:
e9:a8:d1:ea:97:f0:af:94:44:84:e6:d6:ab:6f:84:
24:df:4e:67:29:af:78:7a:9f:47:f9:e6:39:a2:d3:
20:8e:df:d5:d0:84:4e:6b:e9:73:b9:1c:08:f8:da:
2d:87:ea:96:93:bd:be:cd:41:c3:3f:e7:f7:dc:2b:
44:fb:41:cb:62:d7:8b:6f:fe:74:7e:79:3d:26:97:
49:44:f1:3c:91:f4:71:32:30:1b:bf:e0:e8:b8:59:
78:f3:6a:f6:cd:2b:99:28:ff:c5:8a:fd:8f:d8:f2:
26:4d:56:56:33:c0:6c:4b:eb:6a:22:b3:47:2d:bc:
b0:79:27:c4:f8:7b:53:eb:60:08:56:d0:f3:c5:51:
78:b5:ad:84:27:48:64:83:b1:7e:e6:0f:d5:6f:1f:
94:d0:f8:3a:bb:54:0c:8d:d6:c8:48:58:96:3b:a1:
35:e4:f0:06:d6:1a:af:25:f4:d4:3b:03:d4:20:92:
03:66:28:c9:ff:f0:16:33:54:a4:f4:4b:34:cd:c2:
a6:c7:13:89:89:32:43:5b:f2:87:e1:bc:df:8e:d5:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:04:34:69:E4:51:99:08:F9:3B:F2:C2:1D:AC:BA:AE:4C:3E:49
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:be:29:c7:02:08:26:17:76:72:75:ec:31:9a:ef:cc:7c:
5f:8e:8d:ce:54:6d:6f:09:04:0e:21:f9:ae:b6:6e:95:31:af:
69:45:bd:bc:3b:a9:28:18:2d:5f:e2:d5:c9:13:6c:64:57:7d:
1d:39:bb:68:6b:a2:53:b4:ad:61:db:90:f4:24:9e:57:4f:d5:
b7:86:db:d3:ef:d1:71:f1:a8:ed:7c:05:e1:8f:49:d0:f7:ba:
08:24:26:89:14:e3:67:96:a6:8d:8c:17:09:c6:68:24:c1:fe:
8d:83:2f:bb:80:a6:03:19:27:47:9a:fb:18:5d:93:22:81:0d:
32:32:5e:2e:d1:3b:1b:6b:ba:e4:15:b8:6a:f4:d2:1e:22:c4:
71:e7:f5:9e:96:1c:00:61:2f:54:2c:da:3b:18:7d:53:63:ef:
99:94:a1:bd:ad:24:ac:b3:9f:bf:12:66:cf:1e:1c:a3:2b:1e:
cc:22:3a:17:38:d1:ad:ed:83:d5:0e:7d:1a:f5:8d:44:21:1c:
d8:10:9c:84:e6:ca:68:cb:75:ef:8d:01:65:3e:f9:98:20:a5:
32:fd:90:9e:35:07:ff:b8:03:6a:fc:4a:1d:12:de:1b:b7:30:
1a:ea:3c:95:85:8f:5e:6c:a2:46:a4:26:72:77:d7:e8:3d:f6:
80:09:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:55 2025 by rpki-client