Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier: t0L2bUCbY8xjVbYTwWUt5iBIlO4ytH9vebRzO9uhNzk=
Subject key identifier: 9E:1A:DB:95:D8:CC:BC:32:47:5B:19:C2:0C:5B:F6:9A:17:3C:1B:AF
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 04:56:54 +0000
Manifest this update: Fri 31 Jan 2025 04:56:53 +0000
Manifest next update: Fri 07 Feb 2025 04:56:53 +0000
Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: C5B/slQMmn5MPYAs/8iZrtJBSib3GFFhzJwPksIbWuw=)
2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Validity
Not Before: Jan 31 04:56:53 2025 GMT
Not After : Feb 7 04:56:53 2025 GMT
Subject: CN=679c5816-a277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:37:90:db:31:d3:f0:09:eb:ae:31:5f:27:
39:c8:9f:95:b5:e5:6e:b4:b9:fb:15:98:16:86:a0:
63:e7:d9:71:66:f4:69:e9:5c:47:8a:2d:17:33:55:
db:4f:56:f1:51:9b:e1:2c:2d:d7:7f:2b:d9:d0:09:
19:a7:22:47:33:e3:49:be:e9:e3:d2:aa:de:01:33:
da:c2:d0:42:8a:61:1e:b9:84:da:8c:fd:6b:d3:d3:
8a:1c:e4:6f:69:89:23:ce:92:87:ad:3b:2a:15:e3:
35:b3:db:62:35:95:c8:6d:2c:5c:84:a8:b7:a3:82:
c2:77:e7:e9:c2:ba:0f:27:f6:9b:a2:84:23:7f:02:
d7:19:a5:50:d0:df:01:7d:47:9d:d4:88:fa:29:10:
6d:e2:b4:de:b4:57:21:a7:3e:9e:4a:8a:ab:a1:d6:
d0:30:8e:89:69:dc:af:14:28:3d:80:c6:7c:8a:aa:
4a:35:cc:60:20:4e:2b:f7:90:6c:f8:52:10:b9:18:
39:7d:f7:c6:1f:f3:22:3a:d6:60:13:06:d8:a5:f0:
58:8f:94:42:63:d7:52:df:c9:21:5e:aa:3e:ff:2c:
08:da:87:d6:ea:6b:2e:3e:0e:8a:1a:77:25:f2:46:
1b:76:20:27:4c:81:00:16:11:3e:10:84:7a:4c:a5:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:DB:95:D8:CC:BC:32:47:5B:19:C2:0C:5B:F6:9A:17:3C:1B:AF
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:ee:71:4f:bd:0b:8b:ed:ae:73:a0:bf:3e:b9:1c:b9:2a:
0a:ce:e0:a8:a6:ed:b8:a7:a2:23:5c:7a:35:8f:48:9b:d1:c9:
7d:da:63:eb:24:be:5e:b2:78:f9:44:24:3f:ab:de:c8:dd:a8:
bb:f0:f6:7b:33:ba:39:14:72:56:22:ce:50:0c:c7:94:fc:65:
63:5d:b1:5b:f6:79:83:43:93:a5:13:b1:29:86:d3:0a:c4:7e:
ea:0a:0f:0c:95:b3:41:c8:ce:bd:a2:75:41:93:e4:7d:de:71:
8d:33:93:b8:a4:26:06:4f:15:9b:01:2d:ac:e6:56:24:d5:e3:
fb:1a:69:e0:36:93:e8:b5:ae:bd:66:9a:65:8c:0f:b1:87:a6:
9e:fb:b2:a8:dc:5b:e1:78:d6:fb:74:5b:74:9e:38:a7:fd:c4:
92:75:04:7a:48:02:ac:a3:eb:f3:03:73:cb:04:da:bd:28:7f:
80:f2:1d:24:a0:c1:0a:a6:07:1c:6c:6d:98:df:bd:69:1d:90:
f6:11:65:20:07:7a:ea:ca:4d:de:19:7c:6f:a4:b5:fc:b0:44:
fe:b6:d7:e6:fa:0e:1d:d0:89:83:55:7c:3f:66:5b:59:96:74:
bb:59:3c:ce:6b:22:7d:8d:70:d7:fd:b5:48:01:c6:3f:a7:61:
5b:9c:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:07:06 2025 by rpki-client