Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier: LoR0zp3YCk/DGeIANjO+NECP+ylh3Vbx4AE2LNRqR1c=
Subject key identifier: 0A:E9:D6:F0:61:EA:7F:51:4C:37:1B:16:48:F8:3D:5E:8E:03:CE:EF
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number: 5D
Signing time: Fri 31 Jan 2025 06:10:53 +0000
Manifest this update: Fri 31 Jan 2025 06:10:53 +0000
Manifest next update: Fri 07 Feb 2025 06:10:53 +0000
Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: XsZqhLevKGp81OpepfQ192YoKL1kdxTpeKJBUL1+yTM=)
2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=)
3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=)
4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: Jan 31 06:10:53 2025 GMT
Not After : Feb 7 06:10:53 2025 GMT
Subject: CN=679c696d-9543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:4d:8d:8f:82:69:f4:3f:38:ef:72:79:b4:
ef:fa:b4:ed:31:74:5d:60:fc:01:25:a3:bf:d0:f8:
bd:79:5a:70:3f:ff:c2:b2:bb:27:80:54:a6:0a:c0:
f6:2f:75:72:46:60:61:c4:90:49:51:d3:d8:61:22:
32:08:d0:d6:69:03:d8:8d:c6:00:28:97:c4:3d:0d:
c7:11:a3:96:02:e9:b0:10:b1:63:52:73:59:33:5a:
3e:62:25:f3:8f:40:4a:1d:8b:01:c5:dc:da:2a:91:
a5:01:0a:e6:45:3e:34:81:93:ed:78:19:13:00:de:
e2:8a:01:1b:3a:20:11:29:d8:c7:17:a1:0d:f1:1d:
7c:ba:d7:09:42:d3:0b:7b:65:4e:da:cd:87:da:06:
e0:bf:0c:61:bc:5b:f4:5f:34:d1:46:c3:36:0a:ba:
fa:50:c8:51:e4:91:0f:04:47:f8:ca:13:96:30:09:
95:17:7f:00:3e:c1:b7:40:14:10:08:1d:1e:af:58:
97:19:19:9f:37:1d:e0:3b:a1:cd:f6:a8:26:9f:c9:
4b:2a:55:e9:21:bc:fd:98:ba:d2:3d:e5:5e:a7:7c:
30:93:3e:60:6a:55:0a:49:fd:3f:66:0a:ce:72:64:
7c:50:8a:32:e0:33:0d:40:53:25:11:40:54:8e:91:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:D6:F0:61:EA:7F:51:4C:37:1B:16:48:F8:3D:5E:8E:03:CE:EF
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:e1:7a:be:8b:fe:65:f1:3a:4c:9f:59:52:6f:25:ec:ce:
d0:b5:ee:ec:6e:b8:d3:db:d0:59:fe:c4:69:da:e6:e6:57:33:
c0:49:89:29:37:a5:3e:03:66:db:a3:e3:d2:e1:15:3e:1f:93:
bf:11:8a:bd:2c:5e:62:57:de:fd:d8:cc:f5:79:93:c2:d6:cf:
18:f0:67:09:42:3a:47:97:73:0c:b7:a3:ca:42:00:92:10:0d:
53:68:df:b8:36:7e:33:00:3c:c8:52:8e:88:fe:0a:53:4a:f9:
49:32:52:38:18:b9:94:5d:29:bc:d5:14:68:bb:98:c1:d1:4f:
74:68:a8:70:4a:68:e2:de:20:90:0f:8e:b8:93:a2:8f:bc:ff:
8c:55:23:16:76:b2:13:5b:fe:d3:1d:70:91:8d:c5:ca:56:ff:
dc:ab:8c:72:66:b7:34:e8:45:27:ac:b5:16:4b:13:b6:cb:de:
0e:b7:d3:d4:b5:ec:0c:eb:02:51:b3:17:2d:da:9c:18:b1:7d:
d1:ad:f1:28:19:f2:87:70:25:6e:30:e8:84:60:16:89:1e:ae:
ae:98:f2:6b:68:db:5c:cf:af:74:f6:24:eb:46:b9:46:1a:65:
67:8d:a7:8d:d9:14:9d:ca:58:00:c0:24:2c:3f:63:51:9f:fb:
69:78:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:15 2025 by rpki-client