Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
File: vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json)
Hash identifier: E4x/8YyjNeGX3H6zEQeuFCyt+cfEPY18l4ELe9UjMAw=
Subject key identifier: 2D:E8:5E:3C:70:13:11:7F:59:4B:CC:E6:A4:2E:77:CA:97:D0:D4:89
Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
Certificate issuer: /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
Manifest number: 0383
Signing time: Fri 31 Jan 2025 01:39:35 +0000
Manifest this update: Fri 31 Jan 2025 01:39:34 +0000
Manifest next update: Fri 07 Feb 2025 01:39:34 +0000
Files and hashes: 1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: sQWDVpURzPxEGfU6wldlrauWn4AfBZ72POfTEqlDEHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
Validity
Not Before: Jan 31 01:39:34 2025 GMT
Not After : Feb 7 01:39:34 2025 GMT
Subject: CN=679c29d7-2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:37:81:ad:1c:b5:07:bb:43:e9:f9:65:d2:
5d:cf:7b:63:cf:64:94:2c:a5:12:99:5b:d0:a0:4f:
47:3b:c8:6f:4d:7a:fe:0e:b6:dc:6b:4c:73:28:68:
9d:94:53:af:55:a8:65:9c:2f:5a:11:a8:f2:72:03:
57:54:d7:6d:68:be:5d:a9:13:07:68:85:fb:89:af:
6d:a3:c5:00:1d:0c:2f:d3:fa:62:d1:b4:4e:b9:13:
9f:9a:c7:2b:0b:01:25:76:14:f8:88:62:09:11:d2:
c7:50:51:80:43:74:ff:95:3f:70:12:b6:da:d1:e6:
a0:c3:8b:f0:1c:c2:17:7e:51:8e:5e:cb:dd:b7:31:
4a:da:53:cc:6c:eb:5a:b3:0f:00:34:e0:42:62:41:
70:e3:c5:97:37:52:dc:d5:38:12:90:fa:25:d9:2f:
13:23:4a:dd:d8:9c:56:e8:9f:9a:70:d1:6d:05:3d:
17:43:00:73:cb:01:85:0a:e9:9a:e9:54:3b:cf:de:
4e:d3:ca:bf:62:c3:39:ef:82:a1:5f:20:df:52:b5:
0f:0d:a3:4b:14:8d:85:19:75:10:d0:22:18:1c:e9:
4e:18:bd:b3:7c:e9:36:0a:94:35:9b:7f:2b:a8:f8:
f9:0a:b9:8f:22:6b:60:32:15:ca:92:b9:ef:85:68:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:5E:3C:70:13:11:7F:59:4B:CC:E6:A4:2E:77:CA:97:D0:D4:89
X509v3 Authority Key Identifier:
keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:1a:d7:c7:74:82:80:42:ad:69:96:28:f2:4a:d6:9b:5b:
56:8e:40:51:c9:7b:64:5a:bc:3c:a4:af:21:a2:ef:89:43:17:
5a:c9:d2:83:5d:81:94:15:c0:f0:1e:d9:e1:6d:c5:00:81:a9:
73:c1:2e:4f:6a:e7:57:34:ec:22:cc:7c:3e:40:5f:75:b3:e6:
83:d3:6b:9f:ab:24:29:2d:c3:ea:67:6d:f0:76:c4:4b:b1:16:
fd:3d:24:74:2d:86:ee:8c:d3:79:8c:df:15:b1:2c:d4:d0:2b:
c4:2a:89:a9:00:1f:13:7b:35:84:ab:32:6d:00:55:db:13:7d:
79:9e:9c:82:39:d7:1b:71:b2:5d:f4:c6:12:5a:b5:14:60:c1:
25:1a:61:c8:02:a8:a5:38:83:0a:8e:3d:a8:05:b1:10:c9:3d:
41:82:50:aa:af:bc:2d:b8:02:c7:66:3f:28:4b:76:68:41:e5:
1e:9d:92:6f:5c:bf:ec:7c:d8:ec:d0:cb:b8:25:fd:06:92:dc:
d4:5e:78:db:20:f6:f6:f9:fd:c6:85:11:35:ea:3b:bf:08:cb:
9d:69:e7:87:e6:75:f2:af:82:0b:a4:ea:71:c3:bb:4f:03:45:
b0:6b:75:77:b4:2c:fb:1e:ef:6f:a8:2d:39:d9:d3:85:fa:95:
b8:89:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:56 2025 by rpki-client