Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json)
Hash identifier: 5AOPlXp2hA+boc06Z86R7x/6DnCuuh0htqXzGbOqARQ=
Subject key identifier: 7C:44:51:9D:85:9C:09:A4:15:D0:E3:36:90:15:86:23:18:90:2A:B5
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
Manifest number: 0346
Signing time: Fri 31 Jan 2025 01:07:45 +0000
Manifest this update: Fri 31 Jan 2025 01:07:45 +0000
Manifest next update: Fri 07 Feb 2025 01:07:45 +0000
Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: bIEY5xamtzWSwqLV5eE1+qrbe9yXGy3uU07DfiM2tyg=)
2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: qKwz8+c14WwjhtgoTFmPkHWwGU6d8jz1rJYBjBuoSfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Validity
Not Before: Jan 31 01:07:45 2025 GMT
Not After : Feb 7 01:07:45 2025 GMT
Subject: CN=679c2261-20cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:e8:86:ea:36:1a:b6:b0:1c:ff:ab:9d:73:
ef:97:ee:d0:81:70:ec:e0:1c:90:47:68:87:f7:57:
ae:00:92:18:89:1c:47:ae:1b:6a:4e:37:60:8e:7c:
fd:b2:a4:df:ff:c8:c5:2a:e8:56:02:2e:05:71:1e:
54:61:b8:c3:fb:2e:01:04:ec:44:5f:fe:c3:66:1f:
7e:82:43:91:51:e5:83:eb:1e:74:a0:6a:4d:6b:8d:
6e:2f:d8:cb:a1:aa:98:d0:8f:d0:17:e9:30:97:7b:
d1:75:d9:8e:f3:ce:f9:96:12:3c:1f:17:4e:94:39:
03:98:dd:8b:30:9d:a6:c2:ed:03:a5:f5:23:1c:85:
40:f5:2b:95:74:89:f7:bc:0e:89:29:fd:51:18:82:
1b:15:4c:28:3f:a2:96:2b:f2:24:06:ab:23:00:cf:
4c:2a:e5:89:6c:f5:f0:b5:79:bd:49:c7:e6:c5:73:
91:94:6a:40:ae:fc:be:f0:d5:6a:8d:09:b6:5c:97:
3b:0a:63:40:9b:aa:8f:02:d4:4c:09:f8:43:f4:92:
5a:4d:f9:5b:d9:35:4d:1c:74:34:90:a0:f3:d9:2e:
17:a6:11:79:35:30:f6:d3:fd:76:24:17:7c:86:81:
a1:29:96:44:94:71:ea:07:97:aa:27:9a:a5:e6:fb:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:51:9D:85:9C:09:A4:15:D0:E3:36:90:15:86:23:18:90:2A:B5
X509v3 Authority Key Identifier:
keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:eb:9e:45:1c:da:9d:20:0d:28:0f:21:16:7d:51:8d:1d:
78:69:cf:a8:83:5c:53:65:94:5d:30:03:02:e3:6f:ec:31:1f:
c6:0b:72:b2:f8:50:a8:de:27:53:12:20:95:eb:52:e6:48:4f:
32:4a:63:13:31:61:d2:2e:46:85:bc:0a:13:ae:08:d2:9a:37:
3b:ad:0e:de:fd:87:7a:4b:7f:d9:37:17:37:3e:c5:a1:e7:3f:
35:03:9e:0e:d1:7b:4e:de:01:f5:b9:79:e9:17:26:00:0c:dc:
47:7b:e7:e3:8c:d9:02:2f:72:6f:00:1a:e5:da:57:32:21:3b:
e7:1a:91:a7:a5:c3:0d:bb:d7:14:d0:75:c3:33:96:a6:e0:a2:
96:ab:f3:72:b4:a7:90:64:5f:40:8f:c7:6e:48:ca:cb:a5:4d:
32:13:19:69:7c:f0:fa:4c:e7:c7:46:1b:a3:22:a1:f7:3c:90:
a9:55:8d:ad:5f:4e:43:91:a4:54:5e:c0:14:80:59:54:dc:91:
75:06:dd:9c:ee:7d:ea:c1:bb:57:37:f9:26:d4:e2:4f:c8:4d:
69:3b:03:ad:19:f3:cb:ae:b3:a5:23:1b:1a:26:58:fa:0f:6d:
1f:30:db:cc:8f:be:52:9b:96:cf:2d:65:d3:b5:10:7f:45:f2:
68:e8:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:43 2025 by rpki-client