Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
File: vc-jy52E0VT-MqVOm0uJXlyNWR4.mft (raw, json)
Hash identifier: N3WA63V+Pa0Qi/W9HG1PiiCIhd7IdQEOCCSveze3RXg=
Subject key identifier: D2:EA:35:1E:0B:88:BC:64:26:91:4B:AA:EA:B5:A6:57:03:9E:77:38
Authority key identifier: BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E
Certificate issuer: /CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
Manifest number: 24
Signing time: Fri 31 Jan 2025 06:53:02 +0000
Manifest this update: Fri 31 Jan 2025 06:53:01 +0000
Manifest next update: Fri 07 Feb 2025 06:53:01 +0000
Files and hashes: 1: vc-jy52E0VT-MqVOm0uJXlyNWR4.crl (hash: 9DfBJGlqgoxWofqdUW3Fj8d9mh54dVTG3bwn1fBu0s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
Validity
Not Before: Jan 31 06:53:01 2025 GMT
Not After : Feb 7 06:53:01 2025 GMT
Subject: CN=679c734e-b8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:97:5d:97:aa:d4:9b:a3:cc:31:9e:83:dc:
0c:12:66:0d:e1:60:a1:e9:77:8f:9b:f7:79:0c:ff:
3f:42:de:1f:f2:1b:cc:0d:29:43:26:9b:91:ea:db:
d0:fb:e9:16:ff:1e:3c:24:32:be:a8:70:25:0d:f4:
2e:8c:12:04:6f:57:9e:02:44:ac:43:53:f1:b8:75:
cb:27:1f:fc:6e:30:f1:d1:c6:3f:1b:e0:81:55:a8:
19:e0:54:79:b2:18:cf:48:47:d9:07:ad:e8:ec:6f:
61:28:09:13:15:9c:d5:08:84:a1:19:55:a9:67:a1:
d7:20:28:53:94:af:40:54:3e:3b:f4:c4:09:8b:7a:
21:51:2e:9b:be:8f:1b:89:be:bf:2a:66:c4:26:db:
ea:a7:b5:e9:85:89:20:a0:e5:8f:d1:9b:11:4d:3c:
c0:eb:5a:61:dc:f2:4b:6b:9c:d2:a6:44:39:65:93:
b3:8e:5b:b0:8a:5f:c7:64:24:56:78:2c:8d:ac:40:
b6:6a:31:88:a3:aa:15:21:cf:05:a2:d1:01:33:68:
30:83:c4:ee:38:ab:79:41:e4:51:34:f2:e0:13:d7:
72:94:ac:f9:fc:d1:3d:9e:aa:97:22:51:0c:3a:33:
3f:38:e7:4f:c9:bc:ca:d2:52:a7:9c:30:59:b9:71:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:35:1E:0B:88:BC:64:26:91:4B:AA:EA:B5:A6:57:03:9E:77:38
X509v3 Authority Key Identifier:
keyid:BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3e:dd:15:ba:41:47:da:1b:69:65:fa:86:9b:0e:e0:13:9e:
b0:2c:18:f8:8a:21:09:dc:11:7d:8c:64:71:d4:66:d1:95:ea:
fd:84:d9:82:b1:8e:39:26:a2:fa:78:9b:7b:78:75:ec:b8:82:
9c:ba:ce:ea:60:a5:0d:50:8d:79:2f:0a:9c:bf:7e:ff:36:9c:
68:c8:97:e9:e3:bb:13:5f:19:63:03:45:b5:c5:89:01:60:9b:
4f:a3:f3:1d:4f:b0:22:c5:41:af:d6:10:8a:38:ca:bd:e8:84:
ff:14:8e:8f:87:76:9a:4a:48:b2:db:10:bf:f8:19:27:82:95:
69:2f:ed:bf:02:d8:fd:78:6e:93:83:d6:cc:7f:73:40:56:8b:
07:b0:6f:ab:2f:33:f4:f0:b3:8d:87:04:dd:64:88:86:f0:43:
53:ac:e3:2c:bb:43:3f:c3:1c:00:cf:fb:91:30:3a:aa:e8:06:
0b:bc:f8:eb:4a:60:90:e5:dd:c6:6b:c7:4c:fe:3a:6d:f0:28:
33:6b:8b:3c:6a:8f:5d:5c:f4:34:0c:76:67:ff:13:5c:d3:57:
a9:f3:68:7b:ea:d5:12:d5:3e:ff:e4:b3:16:3a:27:f0:b2:5c:
53:53:6f:11:3c:1c:90:c0:19:0d:63:7e:bf:6a:c9:6b:86:54:
02:16:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client