Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json)
Hash identifier: x60ZMGr2Mgj6mgqVis9O0QeJE6h9PAGZZeNnDV6idTw=
Subject key identifier: DA:70:CE:28:82:5E:E9:4B:FE:06:B4:29:B3:4A:26:83:58:6A:31:06
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
Manifest number: C1
Signing time: Fri 31 Jan 2025 05:02:17 +0000
Manifest this update: Fri 31 Jan 2025 05:02:16 +0000
Manifest next update: Fri 07 Feb 2025 05:02:16 +0000
Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: xaQp8UXiFMuk3+4wOfR9LN2EAbyU1x3A+cLMGbQCQ64=)
2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Validity
Not Before: Jan 31 05:02:16 2025 GMT
Not After : Feb 7 05:02:16 2025 GMT
Subject: CN=679c5959-e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:b4:69:54:0a:32:0b:4d:0a:d5:f9:bd:29:
40:b2:ec:a3:74:da:3c:f1:06:7b:29:38:36:06:6a:
37:4e:e8:42:6d:ff:5d:65:39:72:09:92:4c:b1:b0:
b4:06:ae:55:34:d1:b9:31:4e:0c:58:8f:9a:cd:d6:
42:98:3c:3b:e3:31:5b:08:33:b6:32:a1:c6:af:d4:
35:8b:43:b6:c1:d4:bc:8d:98:5e:e1:53:d8:2f:e5:
d3:09:b3:09:fe:a5:82:28:bc:3e:1f:93:f2:5d:9d:
a6:64:4d:55:4b:61:82:ec:ab:8d:e5:b6:5c:06:57:
3f:84:e1:1c:24:29:9c:ac:78:6c:9d:5b:c4:60:f8:
16:a2:36:45:49:3f:bd:78:77:d4:8e:5c:37:55:34:
2d:cb:0e:28:cf:7c:1a:ac:9b:8c:1d:9d:04:8c:67:
f1:68:a4:e3:fc:51:51:18:d5:ff:f1:93:22:fa:4b:
16:0c:51:7d:49:1e:f7:d0:e5:02:c4:25:4a:cb:cf:
05:eb:3d:4c:d8:84:07:cd:dc:ba:f2:8a:a2:6a:8a:
3e:ff:ef:2e:51:85:c0:09:b2:99:f2:9c:90:9d:b5:
61:ae:7e:7a:40:f3:ab:21:b4:67:20:9a:7b:51:58:
c4:0e:e4:d8:53:93:cb:15:65:df:d6:c7:21:1d:07:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:CE:28:82:5E:E9:4B:FE:06:B4:29:B3:4A:26:83:58:6A:31:06
X509v3 Authority Key Identifier:
keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:af:ab:cc:8a:9c:5b:3c:07:43:f4:cb:0c:ab:29:25:24:82:
ce:2d:0f:ef:bc:47:b2:3d:fe:a9:2d:cd:ff:71:4a:5b:25:ae:
22:55:c0:68:2b:cd:b5:fd:43:38:6e:06:0f:e5:9c:0b:43:fc:
62:be:cd:fe:4d:ce:6f:66:02:6a:3d:2d:53:5a:2d:8b:22:c2:
f6:b0:a6:40:8e:f4:58:09:38:60:22:74:8d:2c:ab:29:17:28:
71:61:12:6d:47:6e:88:db:da:64:69:b0:3a:1a:9f:a5:66:30:
68:6c:c9:cd:31:34:f7:69:9e:e3:79:21:bf:29:33:88:da:49:
40:38:de:4b:a8:91:a7:95:76:d2:64:75:4d:90:02:cf:34:50:
96:fb:c4:cd:04:7b:53:b6:40:f1:07:25:e6:19:82:26:c5:ad:
8b:25:f2:21:e6:bb:6a:ff:e3:61:45:52:8c:e9:0d:f1:ac:ea:
03:35:e4:e9:9a:3d:ca:ff:54:23:25:73:74:6d:59:2a:8c:cc:
3d:2c:1e:a4:c4:a8:2a:49:53:86:a9:88:81:9d:74:f0:d2:ed:
ce:de:02:9c:71:0d:ae:b5:48:e0:fe:bf:99:81:94:70:3b:63:
25:22:0a:18:8f:77:54:0f:58:6f:61:24:6c:d7:78:4f:3f:a9:
fb:dc:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:18 2025 by rpki-client