Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier: eaauMmdPyYX8CSRr6eCT+A3CrVZAfyLotasOBnoXJS0=
Subject key identifier: 0F:0A:50:8A:50:66:AF:F8:A2:A8:CD:1E:78:65:38:46:F5:BE:04:D5
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number: 57
Signing time: Fri 31 Jan 2025 06:16:10 +0000
Manifest this update: Fri 31 Jan 2025 06:16:09 +0000
Manifest next update: Fri 07 Feb 2025 06:16:09 +0000
Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: mBsmqvSn5pQ4wAiIzCfafg7LRAv/yvpOdusghCHQ9I4=)
2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Validity
Not Before: Jan 31 06:16:09 2025 GMT
Not After : Feb 7 06:16:09 2025 GMT
Subject: CN=679c6aa9-9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:ca:fe:04:f5:1b:1d:dc:18:7a:3e:a6:82:
0a:2b:05:24:14:4c:ab:b2:72:e9:18:c1:07:a9:45:
9d:c2:5f:95:7a:95:8c:1f:92:56:78:a7:58:e6:ec:
e5:7d:9a:5a:c3:63:e5:09:55:be:4b:b4:45:04:55:
d5:b6:a1:2f:ba:3a:77:ff:6a:4d:97:b6:29:ee:c7:
68:06:50:15:a9:f8:98:a7:b9:39:25:9c:e4:10:9e:
a1:6a:21:49:d0:09:4c:ee:70:8d:20:11:e8:d2:9c:
99:bd:22:fc:cc:bb:d4:e6:71:bf:6e:12:e0:a0:76:
c2:e9:d4:a9:ee:8e:e2:31:d8:85:7a:5d:eb:31:8e:
d7:3c:2d:43:d5:67:f9:b0:f7:b0:ee:98:da:7b:e1:
90:25:ea:11:12:f5:d4:a6:40:7d:3f:96:c8:6e:45:
5f:e5:02:d0:68:b0:92:57:2d:07:d7:43:dc:31:1b:
9f:92:78:18:91:cb:1e:f8:ce:ea:8a:3a:60:a1:42:
f3:a0:d2:b8:c6:47:8d:67:d1:1f:0e:9a:97:0c:a5:
fe:fe:a9:8a:16:d5:bd:2a:ea:64:32:38:30:1d:bc:
22:62:73:b9:38:cd:b9:4e:71:ff:27:53:ac:54:f5:
f4:04:cb:40:ef:74:80:a8:5e:8c:c5:64:e5:49:22:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0A:50:8A:50:66:AF:F8:A2:A8:CD:1E:78:65:38:46:F5:BE:04:D5
X509v3 Authority Key Identifier:
keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:d1:e3:1d:a4:8d:33:05:0d:50:ad:5e:17:15:5e:67:45:
77:38:a9:22:90:e1:44:bd:fd:ab:b2:7c:42:46:53:ab:cc:7a:
ae:3e:5e:3d:8a:84:cc:9c:87:b4:61:a6:42:a5:30:df:e7:c1:
da:80:b3:51:ba:2d:c3:f3:36:c5:26:c4:c0:70:7b:4e:58:1f:
11:9b:25:78:dd:2a:dc:14:c6:31:10:fc:18:e7:fc:a0:04:3f:
35:e1:13:24:b9:02:5e:b4:1b:ff:e6:f8:69:5a:5e:83:18:bb:
1e:87:df:8a:b9:7d:22:e4:20:05:f6:a7:46:e1:f9:6f:3a:04:
14:15:cd:cc:83:df:79:e8:2d:40:27:c5:c3:c7:70:33:c6:5b:
b1:4c:a8:03:e6:97:07:66:16:0c:e7:47:6b:0a:3e:46:20:81:
6f:cd:be:59:0b:4b:62:c4:f3:66:8e:e2:3c:d4:81:12:ce:b7:
71:4e:96:0a:a8:a6:21:93:b4:2b:02:af:07:fe:d7:3d:a4:1a:
fc:19:a7:ce:89:a6:a9:de:f3:4f:73:02:90:70:a8:69:29:6d:
84:3e:a3:13:6b:56:3d:8c:f0:f9:f5:48:c2:07:6d:80:6a:e8:
45:cc:4c:5e:04:54:65:02:ef:be:b3:6d:9e:7f:ec:b0:75:52:
08:3c:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:24:18 2025 by rpki-client