Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json)
Hash identifier: FJxDyOQIXtrabV4pYrIteufphMdH2QEeOLjZlHLL98o=
Subject key identifier: 6F:F7:39:5D:B1:08:8C:F2:A6:FA:EC:38:10:FD:DC:53:58:2D:1B:7F
Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Certificate serial: 0C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 18:19:29 +0000
Manifest this update: Fri 31 Jan 2025 18:19:29 +0000
Manifest next update: Fri 07 Feb 2025 18:19:29 +0000
Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: rEpS1TSYKpzimBggGIwYuAJnNX4a4G/xq4g008s26CE=)
2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Validity
Not Before: Jan 31 18:19:29 2025 GMT
Not After : Feb 7 18:19:29 2025 GMT
Subject: CN=679d1431-64fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:58:dc:ae:84:a6:4d:8f:0f:ba:96:70:f2:
af:0c:39:e8:91:4f:29:cb:a6:ef:13:e6:ab:50:0b:
60:8f:1a:ac:78:62:e5:c1:e1:ed:c1:94:72:9d:c8:
23:48:91:0f:9d:75:42:0e:ef:70:86:ac:78:4e:60:
47:11:3c:03:5d:5a:73:94:5a:fa:01:62:a5:13:6e:
9c:6e:ea:ba:63:5b:a2:65:e6:2e:2f:21:4d:36:93:
cc:d7:17:87:79:5f:92:26:1d:d4:4c:90:03:3b:3a:
3c:c3:98:64:04:b4:2a:f4:6a:06:63:a0:a0:57:83:
dc:28:8b:5d:f3:58:94:33:c7:17:a0:78:6f:83:7d:
eb:f2:91:b6:86:a4:ca:c7:6f:69:e2:b3:92:8d:1e:
3f:bd:f5:f3:7e:ad:1a:fd:a1:f3:47:c7:a2:65:dd:
23:9e:7b:ed:cb:07:b0:c0:06:60:88:eb:f1:12:b6:
5f:23:50:ff:44:e1:15:a6:66:5c:d4:06:a5:08:8c:
12:86:5f:32:24:46:a5:05:46:0d:9a:71:49:cb:c0:
e1:c1:cd:43:b4:81:38:e4:01:a3:2c:f8:c7:0a:e7:
34:8b:fa:61:36:ab:d3:a4:3c:60:1a:16:c1:2c:b3:
29:ed:8b:c5:9d:40:78:6b:5d:66:4c:e9:df:08:e7:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:39:5D:B1:08:8C:F2:A6:FA:EC:38:10:FD:DC:53:58:2D:1B:7F
X509v3 Authority Key Identifier:
keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:f6:52:df:1a:da:d5:d1:75:93:5a:9d:f5:28:c5:da:46:
f8:40:0e:d3:bc:5d:c4:58:e3:42:2b:99:10:02:e4:be:ed:15:
05:a8:91:72:e4:9c:5f:fe:21:d2:d0:af:c5:df:12:62:b5:ea:
00:ef:09:b8:56:63:55:55:12:26:77:ec:f2:61:ba:c1:20:91:
51:40:f4:20:11:2a:26:37:d1:fe:10:6c:ec:96:a3:31:2e:d2:
ee:07:24:da:90:47:95:50:0b:c7:36:bb:de:34:64:79:b1:8f:
a4:46:ee:69:e6:58:0e:4f:d6:bc:c9:0c:c9:c6:6a:39:18:30:
df:f2:df:e9:6c:76:eb:e2:02:a4:72:29:a6:eb:4f:28:14:4d:
57:34:95:0d:40:e2:1e:50:6b:fc:fd:fa:4b:1e:e8:d7:43:b6:
c8:4f:ba:45:f5:61:b2:c8:be:a9:07:7a:51:28:ea:15:44:40:
31:a5:93:6c:95:86:1f:07:13:ad:9b:a9:57:74:c5:c0:c4:0f:
04:80:53:5e:8a:8b:bf:4e:b5:e9:17:2f:14:95:d8:05:e8:ab:
d5:95:c1:9c:16:4a:00:9c:87:4c:e5:1a:d6:78:a6:d5:69:f1:
eb:f7:6a:a9:4b:e0:a4:a0:59:23:d8:c5:04:5b:e1:74:ea:e8:
5a:19:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:50:35 2025 by rpki-client