Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier: 9p9ti4HT7sNiwcHUf5u6v/gGzYwg5w3XN8AB1R2jYqs=
Subject key identifier: 86:DC:FC:83:E7:32:58:E6:80:41:5D:9C:8E:03:70:6A:9E:C3:9F:6C
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial: 0D50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number: 0D40
Signing time: Fri 31 Jan 2025 17:59:29 +0000
Manifest this update: Fri 31 Jan 2025 17:59:28 +0000
Manifest next update: Fri 07 Feb 2025 17:59:28 +0000
Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: ewuTMTfwBOulYUYn2J64IzIO4k/wyjoKst2j79M6OoQ=)
2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: VdJNFDaYIS+GL9qtkVFNMbcche+I8od1o1L3BRBSv5A=)
3: 8EB36E60E6FE11EE90BD3C1FC4F9AE02.roa (hash: JtyRZnFwPCNWdefnQqVRxz9abXZRf2IOClL/TIIj6MY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Validity
Not Before: Jan 31 17:59:28 2025 GMT
Not After : Feb 7 17:59:28 2025 GMT
Subject: CN=679d0f80-f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:7d:34:da:61:a0:af:0b:8b:5d:e0:a2:36:
8c:19:2e:a7:f1:d4:22:c9:a0:75:eb:ad:e3:57:6b:
d3:d4:f3:63:a4:31:f2:9e:2a:67:4d:f6:ea:79:95:
be:90:9d:34:41:b6:24:d6:ad:3f:bd:87:3f:b5:c5:
07:c7:85:68:fd:e7:ef:e1:a5:0c:1c:8d:d5:b8:ab:
9a:94:77:35:c0:94:2b:c3:fe:5a:aa:e6:11:5a:bb:
af:72:49:bf:6e:00:df:ff:e8:39:d0:18:30:6c:ea:
65:f9:2b:a2:3f:4a:63:58:d5:3b:28:0e:10:d8:20:
49:c3:9e:f1:4d:83:94:bb:28:e1:48:f5:fd:4d:bf:
32:5a:07:5d:59:81:06:a1:36:34:88:e8:6b:20:80:
11:1f:77:95:87:85:f7:7c:18:d9:97:3c:33:98:1d:
f6:11:02:b1:0d:b1:1d:ff:e8:3c:d6:d0:e6:50:22:
9f:78:d8:5c:fe:d9:9c:26:91:8a:6e:26:0b:08:dc:
14:d5:50:e8:bb:7e:19:09:35:2a:e4:0c:57:6e:8b:
e6:52:33:ad:d8:56:4a:06:f3:20:ce:0b:3d:5f:2c:
71:ff:07:f0:7d:a9:82:30:5c:99:71:0f:23:2a:07:
7b:57:0d:f4:57:e7:f8:e1:9d:a0:c3:a9:23:91:6d:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:FC:83:E7:32:58:E6:80:41:5D:9C:8E:03:70:6A:9E:C3:9F:6C
X509v3 Authority Key Identifier:
keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:68:6e:c9:d6:49:13:02:73:de:ef:17:03:54:79:a9:51:
d9:12:c1:15:33:eb:ca:f9:85:f5:6a:9a:b9:37:ca:8b:fa:69:
57:70:c8:45:d5:9d:62:cd:84:62:ff:0e:e1:3d:12:7b:bf:25:
14:e7:70:c8:23:9d:9e:fb:1b:fd:e9:97:cd:fd:f0:8c:60:2d:
e4:21:9a:39:fa:dd:88:ac:ca:4c:70:f0:9e:df:1c:ca:2c:d1:
de:ab:26:0c:b2:85:97:59:50:3b:d5:81:66:f8:ad:fd:4a:50:
6f:da:41:3d:11:cf:7b:54:1d:70:3d:6c:12:40:a0:e4:12:90:
d9:43:0c:a5:90:a9:1b:f8:30:27:08:b5:e3:6a:ea:10:69:d5:
9b:70:d3:93:d4:34:a5:b0:70:bc:7f:19:e3:a9:13:e6:68:94:
db:7c:b2:ec:c4:42:f5:6c:fd:80:46:ac:83:26:98:cc:81:95:
e8:07:40:e0:13:e8:73:a8:a3:45:5f:6e:58:cf:a7:83:a1:23:
a4:66:68:f3:ac:7c:71:95:ff:87:bb:10:b1:9c:3f:3a:f3:8c:
48:dc:bb:c3:60:27:a3:1e:56:4f:c0:69:d4:9f:6d:8c:8d:3f:
80:e7:91:ad:b1:9d:4b:2a:19:75:88:af:61:f3:af:65:54:8b:
28:46:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:30 2025 by rpki-client