Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier: LqD+V3MWnclyJdZiBz6Tcn+uXe3aiAhbpY/6gb+FMzk=
Subject key identifier: 55:32:1C:EA:F4:EC:F7:EB:7C:4D:F4:D5:D9:A9:68:44:8E:E6:4F:82
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0C2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number: 0C23
Signing time: Fri 31 Jan 2025 18:18:09 +0000
Manifest this update: Fri 31 Jan 2025 18:18:08 +0000
Manifest next update: Fri 07 Feb 2025 18:18:08 +0000
Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: WMpjjLQ0/rQ8DxmH4jIWU4IwMpXOKA5HkmbDCOj8FB0=)
2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: wgxBqTOXaVBqDTXi3QmSfIMhu4UE3inSSK8gOm0zVzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: Jan 31 18:18:08 2025 GMT
Not After : Feb 7 18:18:08 2025 GMT
Subject: CN=679d13e0-d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:1a:7d:40:6d:8a:58:2f:b4:08:31:95:68:
1c:22:ea:e8:85:e9:33:e9:42:09:87:2d:b2:f4:25:
8f:ee:55:4b:15:fe:c7:68:9a:8a:50:5f:ef:98:20:
61:7a:d4:e0:0c:89:8b:13:95:85:af:01:0a:98:56:
4d:79:a2:bd:3a:2e:61:4d:db:15:3f:37:ed:b8:ef:
f0:fa:8f:6e:71:b5:de:a3:00:6a:c3:bd:90:fa:fa:
ec:e6:c6:12:88:4a:56:ed:85:c0:28:35:53:1e:4e:
5d:44:f9:51:06:be:51:be:b0:67:1c:65:9a:53:e4:
ea:79:50:d5:80:91:da:42:c5:2e:d6:65:25:81:4d:
be:5b:8c:2a:0b:49:f4:9c:c5:ee:8b:ef:4c:b1:69:
24:ad:ee:f6:e0:c6:e8:44:85:67:71:c4:d8:4a:71:
30:b9:57:4c:1a:87:bb:be:f6:a9:d1:1d:cd:f0:1c:
49:65:01:62:d3:1a:90:a0:6c:4e:7d:18:58:7f:8b:
14:a1:b2:2d:da:88:42:94:fa:aa:be:a7:18:5c:fc:
ff:06:63:9e:cf:54:70:56:3a:c4:d6:35:97:40:84:
c6:fc:da:a5:ea:6f:59:72:7f:b5:5a:0b:57:c3:9a:
d6:fb:e1:84:78:82:54:b1:3d:0f:06:09:c5:97:58:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:1C:EA:F4:EC:F7:EB:7C:4D:F4:D5:D9:A9:68:44:8E:E6:4F:82
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:62:0d:59:e4:50:c4:94:26:0f:7a:54:9d:15:72:fc:c3:
ef:bb:cb:94:e6:bd:ec:ba:d1:80:1d:15:a2:a2:ed:40:a7:4b:
19:59:c1:6f:4f:71:bc:44:f4:31:68:12:3e:e7:c0:c8:24:d9:
e0:80:32:7d:44:fe:12:6b:14:ce:64:1b:17:e2:52:86:ea:a4:
f6:db:ef:0e:f8:fc:54:31:90:28:fa:97:a8:9f:3e:e7:a5:4b:
62:a4:07:f5:87:e5:d1:a6:b6:cb:cc:02:c9:30:f2:4d:a2:99:
e3:45:5f:2a:b6:2f:7a:e8:1c:b0:b6:8d:66:b8:b6:f2:95:e6:
a3:a0:4c:76:f7:2b:55:0f:39:2b:2c:cf:8b:65:76:90:e4:65:
f6:8a:a1:a8:7b:a5:17:7b:2e:d4:9b:f8:b2:a5:5e:1b:a6:84:
0a:d1:45:69:c2:04:e8:b8:cf:a0:12:9e:90:52:fd:5f:51:3b:
71:60:ac:0d:ba:4f:09:ba:06:23:5a:cf:70:54:c0:4a:f9:87:
be:0c:e3:fa:09:38:dd:41:ea:13:a9:7b:bc:30:61:33:3a:e3:
96:df:3a:ab:48:93:cb:48:da:6f:49:9d:eb:8b:91:4e:0a:da:
f6:b8:8e:98:59:d2:f0:2a:5c:90:92:80:eb:74:ad:0a:24:30:
ca:7e:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:27 2025 by rpki-client