Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier: ThJmgfn9OkkLlMPJFa/DTg63RUr/UQ5FPkatRQqKNfU=
Subject key identifier: 57:1B:40:B6:92:DA:26:92:EE:F6:29:1B:72:E6:8F:8B:8E:8B:5C:02
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial: 344E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number: 3449
Signing time: Fri 31 Jan 2025 15:05:46 +0000
Manifest this update: Fri 31 Jan 2025 15:05:46 +0000
Manifest next update: Fri 07 Feb 2025 15:05:46 +0000
Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: pgTpQc+Q59dk9sOOMx3aQw0sQgDhhPZGJ1lEUZ6aYtE=)
2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: rKiJ/h4am+FFw7G2LT8pzc4HoVXZT8DnOASCeasqP8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13390 (0x344e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Validity
Not Before: Jan 31 15:05:46 2025 GMT
Not After : Feb 7 15:05:46 2025 GMT
Subject: CN=679ce6ca-f18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:dd:7f:fb:6a:02:2d:52:3a:54:d7:e2:7c:
6b:02:37:01:3f:16:f8:a3:8f:3a:92:06:f3:44:1b:
f7:42:bf:a6:25:b4:b1:7c:ac:d6:fe:6f:55:5d:bb:
6b:35:c2:e8:ce:aa:f6:93:ae:9f:00:ba:66:61:97:
22:db:20:a1:48:69:70:56:c7:a3:37:48:b6:0a:87:
39:1e:1c:8d:8c:44:94:cc:ed:81:dd:96:07:91:e7:
07:cf:fa:79:9c:f0:a7:6c:2b:cf:1b:ea:04:a5:d9:
58:0c:fc:d9:24:0e:dc:12:1b:5f:56:b1:ab:6f:b0:
a8:30:2d:1a:54:4c:28:93:59:f0:6e:f9:36:83:bf:
ec:a4:3d:6d:4e:82:da:5f:94:80:b0:76:ed:9a:7e:
7c:14:69:a3:f4:9f:5e:73:37:83:e0:49:d4:d8:79:
4d:aa:f6:08:16:6a:ca:8f:34:1c:ac:51:c9:3b:1b:
1f:e6:03:45:30:48:ed:64:77:f9:94:e9:ea:da:c2:
33:06:34:cd:39:b3:13:dc:a8:e6:9d:d0:4e:48:40:
d5:19:b9:58:f3:2b:cc:33:a9:3e:20:44:86:ae:d2:
05:08:21:1a:7f:41:81:0e:16:49:c1:1b:9a:d4:9a:
ce:89:65:0e:9e:01:f2:d6:26:06:8a:3b:91:ac:a9:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1B:40:B6:92:DA:26:92:EE:F6:29:1B:72:E6:8F:8B:8E:8B:5C:02
X509v3 Authority Key Identifier:
keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:5a:47:3a:a5:a1:00:18:d4:9e:c2:95:ea:04:f9:a2:39:
de:af:fb:c0:3d:38:38:09:bb:2d:d2:a1:e1:60:00:50:ac:24:
1c:ae:1f:97:a5:d8:26:7d:3b:e0:5d:41:90:21:37:b7:9d:e3:
a2:db:39:1e:94:db:a0:b8:aa:5d:b0:c6:6f:a9:d9:77:5e:8f:
a0:d7:e4:17:6c:26:b4:bb:e6:62:0e:bc:1f:e4:8f:8d:6b:e7:
95:61:66:95:89:35:fd:d9:52:2f:1d:e6:b0:11:b6:f5:f8:4e:
42:a2:a0:be:06:5d:cc:59:48:33:44:c9:74:52:f8:2b:c2:a8:
29:6f:3b:32:b5:06:b0:fd:3c:11:f6:73:15:e8:ca:ad:64:81:
cc:b7:79:bf:2d:13:ce:9b:ec:ce:92:46:68:12:ad:df:7b:5a:
e1:3d:9c:2e:42:6e:64:b4:6a:77:98:fc:0e:48:3a:94:5d:e0:
96:4b:80:03:10:3a:6b:cb:84:f1:40:b2:95:f4:66:75:45:53:
e3:21:fc:bf:1e:80:cb:87:b2:32:d1:d3:2b:66:39:14:0c:f7:
68:97:9e:36:42:31:38:29:b4:48:c9:29:e4:4a:29:bc:7a:91:
9e:2e:b5:0b:0c:49:8b:55:0f:2d:37:56:87:50:f6:14:b7:e1:
b8:e0:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:02 2025 by rpki-client