Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File: VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier: JKZyPECgBgJ3GKY8NCKYNOV/HtHnrSc+Gn6Djo7xN6E=
Subject key identifier: A0:A5:D7:FD:61:1E:FB:2B:4B:99:5D:AF:E9:A4:B8:72:3A:DD:DA:FE
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer: /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial: 0562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number: 0560
Signing time: Thu 30 Jan 2025 23:22:18 +0000
Manifest this update: Thu 30 Jan 2025 23:22:17 +0000
Manifest next update: Thu 06 Feb 2025 23:22:17 +0000
Files and hashes: 1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: Khvq11sLna7AcktINzGV5DBp2pLBSV0EU/H6+Zyk3O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Validity
Not Before: Jan 30 23:22:17 2025 GMT
Not After : Feb 6 23:22:17 2025 GMT
Subject: CN=679c09aa-99e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:fe:a1:fc:16:69:57:0c:86:a3:2b:af:8a:
56:7f:0b:97:b8:38:a3:15:b1:a3:c3:12:0b:49:d0:
2e:0f:90:bc:46:d1:29:0d:ee:52:79:9e:5c:0e:3b:
d9:42:dc:40:83:32:ee:c4:30:4a:fc:d3:76:31:47:
38:c5:fd:03:2c:f0:0d:d5:b5:f8:b0:4d:de:6e:86:
54:12:ea:f0:1e:75:db:27:53:c9:10:28:fa:8a:ff:
b9:17:d3:64:58:fc:ca:33:d0:76:28:20:e7:f8:cc:
86:1c:9b:10:44:7c:47:b9:2d:06:46:83:18:a1:ba:
fd:d1:d6:74:2f:98:37:5b:27:c7:e3:bd:0b:ba:22:
87:fd:0d:65:e2:08:f9:e0:5d:36:d3:8f:4b:cf:33:
37:ad:3d:2b:1b:b7:85:dd:03:97:db:8b:82:9e:4f:
d7:19:bc:62:ec:4d:12:a7:6b:6a:ef:55:c6:71:e0:
d5:c4:7b:71:18:4b:ce:c5:1a:38:d6:77:77:81:b4:
cf:13:b2:4f:8a:42:ba:35:9a:b8:6f:3b:83:c6:65:
ee:dc:23:fc:5f:2e:02:74:7b:ed:67:ed:0d:cd:3e:
7e:50:d0:60:c4:be:97:5a:f5:ce:d6:af:09:20:a2:
fe:07:c2:72:28:87:ef:56:b7:52:a5:72:0e:99:4e:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:D7:FD:61:1E:FB:2B:4B:99:5D:AF:E9:A4:B8:72:3A:DD:DA:FE
X509v3 Authority Key Identifier:
keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:90:37:b4:e7:9b:46:33:07:0b:7c:ad:d6:65:bb:22:a7:
19:b2:1b:66:3e:9d:74:48:83:ac:90:a2:51:c9:00:ae:8e:4c:
d9:b7:dd:7e:ab:e2:4c:c4:68:89:af:62:cd:56:1e:4f:38:46:
99:7f:43:bd:ac:3c:ac:ae:8e:ed:3f:10:f9:77:d5:29:fe:de:
f6:c3:4a:5b:21:e0:f8:94:4a:d6:94:1c:ff:1f:1e:a8:79:53:
df:0f:9e:13:31:2d:ec:d5:b4:f1:3d:40:6d:a8:d6:3e:8c:2b:
44:ff:58:46:bc:56:77:58:c4:02:26:da:24:b3:62:70:16:86:
ff:58:2e:68:e3:e6:9e:93:4a:23:49:03:44:66:9e:2d:41:6f:
ce:59:58:f2:ca:09:a6:53:ed:d9:8f:d6:ee:1a:7d:a8:3d:cb:
1a:81:95:c4:f5:ff:9d:73:ca:1a:17:f6:3c:ea:26:13:6e:c5:
27:f2:9b:75:73:d1:d6:0c:d6:67:93:b0:86:d3:00:70:8a:40:
c2:7d:cf:00:c9:3e:f3:4a:c0:30:a4:a0:8b:91:4f:5c:37:6c:
92:0f:17:ec:25:78:b1:a7:c2:5f:0e:ca:aa:0d:24:82:39:1c:
76:a4:f3:83:48:8f:4b:c6:61:68:fd:16:1f:da:b7:05:af:4d:
c1:92:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:19 2025 by rpki-client