Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier: gWOa569s7Bhn/lhf8WA0tISiF7dr4AiIVQfRh3CKVPg=
Subject key identifier: 22:83:29:B1:3B:8C:64:9C:11:E2:74:E9:B8:29:01:97:B5:2E:65:26
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:04:24 +0000
Manifest this update: Fri 31 Jan 2025 15:04:23 +0000
Manifest next update: Fri 07 Feb 2025 15:04:23 +0000
Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: CUlcyvoOPGgX6RIFu/mTniht9tG12Jx9cK3GAmzRg9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Validity
Not Before: Jan 31 15:04:23 2025 GMT
Not After : Feb 7 15:04:23 2025 GMT
Subject: CN=679ce677-4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:07:fa:2c:5f:76:10:cc:46:4f:bc:df:e2:
e0:69:51:24:ec:da:04:f9:80:24:f0:79:ad:61:b3:
89:97:a1:70:e8:82:80:72:20:4e:d5:82:d1:83:58:
e3:73:a7:07:12:b7:72:f5:32:b8:9f:96:6f:e7:0a:
0e:a1:01:38:65:ff:1a:b5:3a:6b:bf:90:53:3a:10:
39:25:cc:1b:68:6b:71:a0:df:11:7b:af:8c:28:ee:
0f:a3:fa:8b:98:dd:26:e3:b0:13:2b:30:69:1e:3b:
d0:e0:28:54:94:aa:e5:6a:b9:79:77:d2:e6:7e:d1:
52:c3:ad:11:7d:d8:05:1f:d5:c3:f3:11:83:7c:a8:
99:5e:70:1f:23:c7:ee:ad:07:91:cc:f8:1a:18:f8:
9d:b6:52:da:ef:f4:0c:d6:f7:9b:a9:df:08:0b:d7:
0e:72:fb:0f:7a:83:07:6a:15:79:5e:9c:f6:ca:e3:
2d:2c:6a:1f:bf:7b:c6:73:91:5b:f7:08:77:24:56:
a1:e7:dd:ee:9a:e9:f7:a5:45:ee:d2:5e:c4:45:97:
15:ba:f4:3a:fa:0f:9d:7e:08:9e:9f:43:07:77:c3:
98:98:b0:7b:f3:18:0d:96:eb:cd:cf:f0:62:95:4d:
d2:de:68:6f:ce:c8:dd:8f:80:21:18:0a:14:bb:01:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:29:B1:3B:8C:64:9C:11:E2:74:E9:B8:29:01:97:B5:2E:65:26
X509v3 Authority Key Identifier:
keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:47:85:75:b1:e7:4c:e0:08:8a:bc:21:8c:cc:ba:2f:9e:44:
5c:f7:9e:c7:b2:68:c4:54:55:b3:72:e2:84:6a:ff:9f:33:01:
40:fa:6c:e3:4b:66:ab:5e:9f:d5:51:48:f2:d3:37:0c:ae:84:
05:f2:1c:24:89:0d:17:e8:67:da:1f:f4:34:37:bc:bb:12:ed:
ed:52:5f:e2:1b:86:7a:58:f3:37:31:b8:4a:cc:5c:30:5c:4d:
9c:1e:3e:d9:08:69:e1:b1:cb:8a:6d:59:f3:1d:12:31:8b:0c:
65:98:64:1c:99:28:3c:9d:65:33:ea:f7:b7:9e:4f:af:48:71:
12:21:e2:4b:00:29:22:53:30:a3:61:0e:e2:1a:4b:43:93:46:
ed:7b:87:3d:c0:44:93:ce:72:fc:bb:54:1b:d5:83:e4:e8:3d:
96:f3:1c:5b:f5:af:16:2a:5a:68:bf:ee:d5:58:26:53:d5:34:
b5:ee:b6:35:e3:65:c0:52:a4:2f:3e:9d:06:a0:fa:c4:87:e0:
e0:e7:83:b5:c9:c2:42:e2:7d:fa:b3:c3:e1:b3:a0:72:e6:6e:
45:1f:6b:bb:09:e4:6b:09:20:11:9f:c0:ec:35:d5:ab:0b:9a:
a2:f4:74:de:00:86:b5:0a:b6:f7:45:85:d0:41:6a:fb:19:c0:
4b:3e:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:04 2025 by rpki-client