Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json)
Hash identifier: LYW+VmyuYqjYToNGE8Ui4S+effkMcny58dpmbSX7Gi8=
Subject key identifier: D6:EF:F1:A3:9B:0F:9B:84:6D:97:98:3F:33:53:46:F7:3D:CB:F7:87
Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Certificate serial: 3451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
Manifest number: 344C
Signing time: Fri 31 Jan 2025 14:45:29 +0000
Manifest this update: Fri 31 Jan 2025 14:45:29 +0000
Manifest next update: Fri 07 Feb 2025 14:45:29 +0000
Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: vwGupgIPUDY59mwBz4/EZjlMGDvQM4KQKXO9xyGpRlM=)
2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13393 (0x3451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Validity
Not Before: Jan 31 14:45:29 2025 GMT
Not After : Feb 7 14:45:29 2025 GMT
Subject: CN=679ce209-ce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:d7:17:f1:95:78:88:3c:de:84:db:98:63:
08:69:68:e8:40:7a:0a:ec:20:d8:35:c3:d9:d2:83:
8d:91:ef:46:fb:43:2b:5b:1b:31:ac:5d:0b:b7:64:
b9:93:17:ee:e0:3e:36:ef:2b:48:ab:db:4d:d4:ce:
06:e6:6d:d0:2a:4a:78:12:7f:e5:c4:cc:3d:9b:92:
d5:2e:70:c9:a8:42:1b:96:b4:21:90:c8:d5:72:23:
05:d2:50:2e:83:4f:70:77:89:81:17:a7:de:a1:1b:
1f:48:cc:d8:d7:7f:64:ab:4c:0a:5e:2f:a4:00:5d:
13:a0:2c:72:38:44:85:01:98:99:4d:4f:a7:56:20:
14:d9:72:8b:31:b6:b8:11:b4:9a:83:aa:7b:9f:8b:
17:ff:2f:d0:0c:0e:0f:50:65:2e:30:60:22:6c:19:
69:f7:c2:5f:a5:4c:26:d2:56:76:1e:27:3f:69:57:
3d:d7:c7:d6:74:2f:72:d3:cf:79:af:09:3f:02:83:
e4:dd:2b:b2:0e:50:52:4f:c3:7c:d7:44:26:18:f8:
28:3b:ae:f1:39:22:07:22:49:43:54:9a:a1:6a:9d:
b9:fc:c6:8d:d8:9c:f2:60:35:27:27:8a:78:2f:6b:
89:4b:a1:3a:84:36:55:eb:63:89:9c:d9:06:a5:55:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:F1:A3:9B:0F:9B:84:6D:97:98:3F:33:53:46:F7:3D:CB:F7:87
X509v3 Authority Key Identifier:
keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:59:7d:8a:51:c6:17:e6:1e:cc:79:87:d4:a8:02:05:75:41:
21:28:b1:ac:e8:6f:49:7a:13:61:bd:3e:f6:57:49:87:f2:53:
1e:aa:75:92:b3:0b:69:1f:84:55:1d:5a:ca:2c:b6:40:8b:17:
02:bd:62:44:29:64:f2:4a:55:25:cc:ee:7d:42:fa:09:e7:10:
f0:d9:70:47:59:8e:32:d5:8f:77:f4:cc:88:51:c4:fb:11:02:
28:e4:04:8d:7f:cd:1a:21:3b:2e:ad:77:91:d7:dc:7a:49:d7:
58:d9:81:02:c2:c0:c1:98:e4:65:b1:91:72:c5:cc:cb:35:a8:
2a:fd:41:89:c0:d3:65:80:27:ba:04:e8:13:8a:39:8e:a0:ad:
8f:e6:d2:4a:ff:0b:ff:f2:f8:5e:7c:c4:35:8e:58:e0:66:e6:
a5:14:d1:0b:d2:b2:64:72:dc:51:59:92:c4:7a:b9:bb:d2:b8:
69:86:3f:02:46:49:01:fe:8c:7e:fb:25:03:3d:79:26:5f:da:
87:f7:e0:84:9b:a0:cf:a3:11:e7:38:d5:21:27:e6:94:f0:51:
cb:f2:27:fe:6b:a2:98:66:10:31:e8:b6:06:84:4c:35:b4:5a:
f1:3f:2d:84:5c:0c:58:81:aa:ff:ce:6b:7c:3f:f4:6d:90:66:
8c:e9:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:40 2025 by rpki-client