Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: vM4RpHWC3sAIhvCHPi4ZxHFpl91JwOJKyKtEcpMIu1k=
Subject key identifier: CA:90:46:47:74:89:A2:C1:85:38:E0:66:1B:48:8B:2E:EC:5F:1C:D6
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 8D
Signing time: Fri 31 Jan 2025 05:34:31 +0000
Manifest this update: Fri 31 Jan 2025 05:34:30 +0000
Manifest next update: Fri 07 Feb 2025 05:34:30 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: PLLz5OXIx8Q+gkIX/xe8lzOf4R5aFQSpAN/+ZLJCTFE=)
2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: PGS5VhTr1DCXehAFd1ANgs/kmJnDFu9yzCbFFpOqU30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Jan 31 05:34:30 2025 GMT
Not After : Feb 7 05:34:30 2025 GMT
Subject: CN=679c60e7-2218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:91:b0:59:a1:c9:f4:59:b8:83:62:6b:eb:
12:ec:61:53:9a:d0:d1:e9:2b:b9:7d:18:9e:77:db:
20:80:04:31:e7:d1:82:a1:f7:d8:e5:d1:6d:05:71:
f8:ee:81:d0:ef:52:31:ae:97:34:67:5d:a4:be:e6:
02:a5:f5:56:35:2a:da:62:3a:f2:ec:32:d9:50:cc:
ed:ea:90:a5:73:de:08:46:39:de:af:a9:0c:fe:90:
a0:94:64:25:d5:79:89:16:db:da:28:d8:e7:a8:31:
de:c7:35:13:8f:15:5c:96:14:17:a7:77:2f:bb:fd:
3d:b4:31:0d:65:4a:7e:90:8c:c5:d7:21:e0:6d:94:
10:e0:47:92:bc:3a:e1:14:a2:0d:cb:4f:b8:56:ba:
ef:f5:24:98:de:c1:8e:61:b2:ef:1c:33:d7:05:ce:
ef:be:59:ab:e7:8b:28:74:ef:87:1d:d5:95:6a:4a:
be:c8:79:ed:a8:46:96:8b:20:1d:bf:87:9b:5f:4b:
cd:30:b8:bb:a3:8d:d7:fc:e7:ab:e4:50:24:04:ad:
89:06:28:8f:a7:74:ba:a7:47:69:17:81:1e:8d:8a:
f0:95:ec:9d:9a:ed:d7:95:8b:21:f2:ac:4b:3d:55:
af:27:fd:66:68:eb:dd:b9:74:7c:a3:7d:79:fc:0a:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:46:47:74:89:A2:C1:85:38:E0:66:1B:48:8B:2E:EC:5F:1C:D6
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ea:82:6c:2f:41:12:c6:f8:ba:31:df:93:42:14:3d:cf:bb:
83:61:e5:97:01:82:53:e8:9b:7b:17:f7:b1:1f:88:85:59:9d:
99:95:ef:3b:55:ff:34:ee:48:37:7e:82:6a:c8:24:84:79:12:
5d:9c:a4:d8:67:85:c5:9b:f4:a7:21:4c:f4:e1:38:c7:54:91:
53:f2:3a:05:9d:8b:79:bf:f6:4b:3b:cf:4c:2e:5a:d3:1f:2c:
a9:7a:05:8d:4d:60:56:dc:17:39:c4:16:42:1b:86:d6:f6:0f:
43:70:3b:bc:18:d1:bd:62:59:21:0d:bb:4c:d7:0c:a7:4f:47:
04:80:15:fb:ba:63:6f:3c:5f:25:35:ed:e3:37:a1:99:04:a8:
f9:42:d9:8c:d7:e4:0c:e2:4a:2a:68:cf:8b:90:f5:93:14:ca:
7f:38:d1:82:3d:f1:ff:44:52:32:d9:ea:d9:df:9e:6d:da:52:
a6:73:72:f8:c5:c4:ca:22:85:f5:46:49:b0:49:2f:cb:48:64:
dd:55:26:8e:e8:68:da:69:ab:e2:e0:61:09:c8:c2:ca:0f:28:
d1:04:f4:e3:fa:a9:de:8d:1f:68:f2:e5:23:93:99:1a:cb:3c:
52:d1:a7:87:f0:22:d7:82:3b:fb:ae:d6:de:c8:15:82:f0:b4:
39:b7:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:34 2025 by rpki-client