Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier: QUigf0nRyKZSr+X0DuAeJmkHDGoX+2npPrci3oEfr4w=
Subject key identifier: 96:01:29:4C:A4:8F:D2:D2:2B:67:EA:9D:71:79:58:C2:D5:7B:BD:2E
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 05BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number: 05A8
Signing time: Thu 30 Jan 2025 23:12:03 +0000
Manifest this update: Thu 30 Jan 2025 23:12:03 +0000
Manifest next update: Thu 06 Feb 2025 23:12:03 +0000
Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: aLtmZxHvzQTBpJj9RGRqQgl92z5O6aSPZupdyUdZoeU=)
2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: j3fOTU+ZyDH2gWmIOUvIDKynWCWvx/O+tM8FAKYOeY4=)
3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: P6xYLGWZasAZ0O0GYyx/cUS1pnfp7Nbv28TT3E9ue6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: Jan 30 23:12:03 2025 GMT
Not After : Feb 6 23:12:03 2025 GMT
Subject: CN=679c0743-da59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:ad:15:7e:1c:25:7e:a4:9c:66:02:ca:b2:
a8:36:41:54:97:b5:7e:43:0c:5a:09:0a:a2:48:c6:
fe:1d:e8:24:e2:3a:f6:dc:fb:7a:c2:dc:42:e6:d3:
a3:1f:7f:04:e7:9f:7e:10:86:bf:6d:8d:6d:52:58:
30:6a:6d:33:9f:63:1c:72:07:f6:89:a3:b2:a5:d1:
37:47:eb:4a:5e:54:f1:f4:2c:1f:c3:05:72:6f:0e:
dc:81:72:84:05:56:3d:1b:1c:6b:72:9e:a1:0c:71:
18:37:79:d7:07:77:b8:42:49:04:1d:4c:f7:41:bb:
b0:e0:3e:be:9a:10:bd:62:39:52:82:77:5d:c6:71:
f5:b3:65:6f:04:be:ef:6a:ad:3b:40:dc:6b:12:9b:
6e:8b:33:51:ce:d8:f2:31:49:0d:d0:cb:59:88:6b:
8b:c0:d6:ef:60:79:f4:1f:37:a0:dc:6e:8f:6c:ae:
d0:d3:50:39:b8:04:90:83:73:42:07:c6:b6:9e:c8:
55:21:d6:11:31:a3:c1:e3:9c:8a:4a:88:07:ae:a9:
11:4a:67:a5:bf:fb:95:25:94:5c:e5:08:7b:49:74:
41:58:29:4a:99:6e:98:de:d6:3a:ba:13:fd:d0:cd:
ca:91:26:bc:2b:4c:e1:4d:bd:d9:9a:40:8f:89:21:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:29:4C:A4:8F:D2:D2:2B:67:EA:9D:71:79:58:C2:D5:7B:BD:2E
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:9e:bb:0c:f9:c1:b3:2b:c3:6e:6e:fb:21:74:74:0c:5c:65:
6b:c3:52:74:5d:5b:1c:67:b3:95:d5:01:23:55:3a:2b:09:04:
22:7f:6a:22:7c:f8:5c:4e:22:d5:62:da:71:1c:e2:d9:68:56:
e1:bc:a1:01:f2:0d:40:ce:6e:8b:74:23:1d:68:d5:9f:06:15:
3d:98:a2:7c:de:f7:8b:91:a2:ef:f8:05:66:ac:d0:06:f4:50:
0e:7c:08:a0:f0:de:cf:23:5d:06:16:99:63:48:4e:d8:8f:0c:
30:8c:cc:18:d9:46:fa:5c:f5:97:67:12:74:cf:f0:4f:a6:a4:
7a:7e:8c:1e:2e:02:f4:5e:69:0b:95:bc:f0:08:94:59:23:b9:
2b:4f:e8:88:38:bf:3f:2b:eb:01:09:f8:bf:43:93:f6:5d:a8:
d4:e3:6a:07:42:2c:c1:ee:15:cd:4f:a8:a3:fd:a5:5c:2d:e8:
05:79:88:5d:03:45:09:fb:24:a0:33:17:54:1a:2b:cd:96:5c:
be:e9:c3:f0:d9:a0:80:b3:84:fa:d1:b0:92:0c:db:e4:d2:75:
3e:62:4e:71:e1:49:a7:60:2c:1d:74:33:45:03:5b:5c:27:44:
5a:03:c5:5a:af:4b:4e:9a:40:88:ff:2d:9e:80:63:5f:4c:9e:
a1:be:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:34 2025 by rpki-client