Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier: 4AdKgAnf3FE8n5zvpAspG5t0LC6XC+hK0IOSRpaHrP4=
Subject key identifier: 82:38:B4:6F:99:92:79:27:CF:4C:3C:FA:95:CD:9A:88:F3:60:83:A6
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number: 34D3
Signing time: Fri 31 Jan 2025 14:32:12 +0000
Manifest this update: Fri 31 Jan 2025 14:32:11 +0000
Manifest next update: Fri 07 Feb 2025 14:32:11 +0000
Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 9aJf75lU1GNrVaLY/F1djssQDd7GbtxmVSH+2fVwBG8=)
2: 3D3992E4ACB011EF93B03779C4F9AE02.roa (hash: zdDN02dBztIgz2GaNIFuw7NWZgWGHf+eRrHCe9PeiYM=)
3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: uP3i0qS5LluMvfR2PfesmPxlO4qRQ5bVxk7dZvX0wPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: Jan 31 14:32:11 2025 GMT
Not After : Feb 7 14:32:11 2025 GMT
Subject: CN=679cdeec-ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:42:bb:39:27:9e:4c:98:24:fd:9e:41:1a:
2e:48:c2:40:24:98:5f:46:1b:a4:fa:e8:2f:9d:fd:
87:93:11:0a:c1:e8:e1:e9:3d:4c:1f:5d:0d:1f:55:
80:18:13:fd:40:69:b5:f3:8f:75:a6:5c:87:20:b6:
5d:94:2d:37:37:64:70:2e:3f:27:9f:32:51:da:60:
d9:ba:2b:2e:ac:7a:4d:87:c0:c9:9d:3f:0d:84:ec:
c0:b9:0c:de:d9:91:b5:cd:97:7d:9a:f5:9e:74:31:
ca:0b:d6:9e:01:29:e7:fc:70:07:6a:df:57:e9:48:
1a:b4:47:46:25:59:5f:6b:2d:f3:c2:8c:1b:08:cc:
d3:53:ff:77:cf:07:25:4d:0f:de:7e:e1:21:b0:d5:
2c:15:64:31:05:d9:f0:e7:f9:31:51:a7:d6:94:36:
68:a7:fa:55:59:b5:0c:57:cf:32:52:50:58:23:30:
ac:55:f8:c4:2c:46:33:e1:21:bd:8a:9d:62:23:f2:
73:3b:81:4e:97:2b:bf:d0:8e:62:9a:4a:6d:93:19:
cd:03:aa:ab:fd:2f:ed:13:0f:59:f1:17:65:fc:98:
dd:bc:af:d8:b7:fc:0d:2b:0c:b9:63:c1:0f:4a:93:
22:04:5f:5c:df:65:53:bd:6e:ec:36:1f:bf:e5:38:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:B4:6F:99:92:79:27:CF:4C:3C:FA:95:CD:9A:88:F3:60:83:A6
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:eb:a1:57:ab:d4:62:a8:bc:ee:d5:ee:40:e9:6b:99:15:fa:
34:a4:32:1a:00:96:8a:e2:77:99:26:a4:11:b8:d6:fc:ec:12:
43:14:d3:89:9f:84:52:55:ef:0d:73:18:67:98:9c:5f:7d:b9:
92:32:b1:0a:83:62:08:0a:7c:ac:d8:34:d6:0c:5e:2e:e6:bc:
67:32:64:40:f4:bb:44:19:14:8b:95:cf:18:0c:c2:58:24:20:
75:8a:12:40:d8:a8:41:fb:d1:dd:ad:e5:30:02:18:4c:1d:d5:
fe:ba:03:2a:cb:c8:28:c6:20:65:f2:c6:4e:c6:9a:44:63:79:
44:0f:a2:9f:d5:42:91:47:89:0a:1e:d0:43:96:10:28:e1:b3:
cb:f5:34:44:61:08:67:e3:60:c1:4a:9b:de:3b:d4:82:96:6b:
d4:a6:7b:a5:b9:e3:3d:ef:d9:dc:55:0c:66:d1:f6:ac:78:63:
86:5c:49:18:55:e8:e3:c4:b6:22:96:86:34:01:36:90:11:c8:
70:e0:e0:97:c8:95:06:ef:76:8c:6c:9b:ab:15:ac:6c:9a:33:
69:30:55:3a:87:6e:d6:fb:a5:4d:dc:6c:87:3b:2d:af:98:fb:
9d:6f:59:c4:87:7c:df:21:9a:4a:79:f2:cd:32:62:b7:98:6e:
b6:1e:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:03 2025 by rpki-client