Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier: FbIfoAQZPvPLkkv8Llhwbg/fTHMrrlFZbkBqFc2Sje0=
Subject key identifier: 09:5E:D1:F2:E2:C5:7E:81:01:3E:AF:73:A1:9E:46:3F:5D:59:C4:34
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial: 03D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number: 03CD
Signing time: Fri 31 Jan 2025 00:40:53 +0000
Manifest this update: Fri 31 Jan 2025 00:40:52 +0000
Manifest next update: Fri 07 Feb 2025 00:40:52 +0000
Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: qSsUf7qhIdUdMlWfDUp997VNUxczkXoTYmWXqe8Fuek=)
2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: lpgIVVU0cv+cmcURAn8z405VuRQu+P37Bg9Ma7ssqFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Validity
Not Before: Jan 31 00:40:52 2025 GMT
Not After : Feb 7 00:40:52 2025 GMT
Subject: CN=679c1c14-ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:89:59:8d:78:da:db:83:45:e4:b3:f7:c6:
bd:6f:99:ec:87:14:9a:16:2c:a5:e2:5a:e4:a0:c4:
a9:96:b4:3d:bd:d5:af:14:37:f5:39:d9:ae:b9:e3:
6c:73:da:66:b4:8f:e3:b2:f7:8f:86:5d:6d:0c:69:
82:7d:03:d0:ce:eb:ba:f9:2d:f8:6a:b8:45:13:2a:
63:5d:53:27:d1:6c:bc:49:9c:83:60:2e:ac:de:84:
c9:4b:ec:99:37:23:2e:fc:5f:7b:c7:35:6f:dc:28:
0a:90:32:69:cf:00:8b:12:95:20:a7:65:37:bd:b6:
cf:f7:09:ab:23:89:58:c8:b8:bd:de:54:24:39:80:
f8:7f:50:d1:cd:4a:a1:ec:96:8c:02:6b:50:dd:2d:
45:9a:e4:5f:68:89:d5:eb:67:56:0a:3f:b4:e5:bf:
e0:ea:d5:ea:4b:ca:fb:9f:37:a5:db:b6:2f:fe:7e:
3e:2b:dc:31:6a:95:65:29:b3:41:51:9b:f8:1a:51:
c8:be:c9:9f:cd:38:da:9a:65:27:f7:5e:5a:ab:2e:
73:31:15:c0:79:ec:f7:b7:a8:fb:b0:b6:54:95:ee:
fb:36:ee:97:9b:82:aa:07:83:49:2b:6f:1f:88:85:
8e:42:c5:da:72:f8:ac:d2:70:f4:7d:2b:00:61:21:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:D1:F2:E2:C5:7E:81:01:3E:AF:73:A1:9E:46:3F:5D:59:C4:34
X509v3 Authority Key Identifier:
keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:94:01:b0:68:4d:ff:31:d7:a3:73:57:8e:88:31:52:c4:
6b:6d:2b:f9:42:65:a2:b3:47:c8:7f:56:a9:0e:fc:a2:9e:25:
93:80:ed:e2:2c:26:0d:f7:e7:80:cb:f8:15:a8:67:73:47:ba:
1d:ac:67:76:20:65:9b:14:3c:45:76:f7:f5:4c:e8:af:e5:42:
db:44:62:0c:5a:90:45:ea:4e:de:c6:d9:7a:02:bc:75:a9:bc:
4e:3f:0f:f0:b0:22:2d:80:c5:4f:c3:9a:dd:a0:b4:9b:c1:e5:
cb:b1:45:e4:4e:63:45:e0:82:e0:7e:c0:71:ba:7e:58:20:2c:
d4:62:a3:98:e3:0d:b0:fc:29:d5:22:e3:a4:4a:01:63:61:7c:
37:36:4c:74:cc:8b:86:f2:7f:f2:47:51:c5:67:8c:27:80:27:
95:73:19:3a:76:32:dd:e1:c0:fc:74:4b:80:52:ef:0b:b9:10:
aa:4a:72:8c:82:7e:6b:64:85:83:a2:e4:b6:ef:02:19:f4:ae:
d1:bb:d6:98:02:9a:f0:1a:e0:0c:14:71:85:80:e2:8b:09:90:
63:93:37:1c:39:d1:93:36:b0:f2:89:49:d2:f0:96:cc:cb:24:
74:aa:54:d5:cb:d0:e8:9a:83:71:10:0f:c7:b6:af:d9:f7:39:
5c:97:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:26 2025 by rpki-client