Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier: CCXIlshbGP5Yqg8Gg66MhIA2jfJLjnsGtqHjQIiYsIo=
Subject key identifier: 77:13:E9:72:92:86:5A:03:9B:13:67:AA:32:C1:54:02:45:AA:4E:47
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 052D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number: 0511
Signing time: Thu 30 Jan 2025 23:42:25 +0000
Manifest this update: Thu 30 Jan 2025 23:42:24 +0000
Manifest next update: Thu 06 Feb 2025 23:42:24 +0000
Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: RoIw0fCN+1k3x8YSY5wjBVgoQHR+TRX4mr5kSS4fsPw=)
2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=)
3: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Jan 30 23:42:24 2025 GMT
Not After : Feb 6 23:42:24 2025 GMT
Subject: CN=679c0e61-88e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:8d:c7:07:f5:8f:6b:e2:65:06:43:2e:50:
62:59:b7:55:9e:d7:6d:49:35:da:7b:25:16:8c:ee:
85:de:04:51:6d:e6:26:89:55:cd:6d:1b:a9:82:6e:
6d:9c:eb:48:7f:7a:ff:86:d9:57:b8:9b:18:c8:d9:
42:f1:90:e2:56:4c:07:6c:23:cf:a3:ee:8f:5f:ec:
32:10:15:27:04:92:82:14:0d:7c:8e:bf:0e:20:a7:
93:21:9e:12:9a:0e:f3:d2:09:14:c4:85:1d:de:35:
12:74:f4:07:64:2d:14:67:2c:f3:b0:ab:e3:9a:57:
18:6f:cb:7a:21:2f:f0:01:6c:69:9d:47:9e:b7:29:
5d:42:9e:5d:c9:74:56:d9:fc:03:32:01:eb:c1:d8:
c9:28:06:70:2a:9d:c3:16:80:1d:99:08:ee:f3:89:
d6:af:d7:6a:6b:f6:39:a8:34:54:f1:66:26:98:74:
8c:61:0e:04:f8:91:b3:04:2d:dc:ca:47:72:c4:94:
5a:51:5a:1f:a1:24:0d:07:59:21:49:ee:8c:08:e9:
c0:65:1c:e0:0b:a7:e3:6c:31:4e:aa:d9:54:62:7c:
c5:07:a9:70:6d:e7:57:80:41:bb:fe:1d:39:91:d0:
ee:ad:2c:34:b0:f9:ea:00:96:5c:8e:cb:68:fa:8d:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:E9:72:92:86:5A:03:9B:13:67:AA:32:C1:54:02:45:AA:4E:47
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:b9:23:3f:d5:9f:fc:54:f1:16:62:6f:79:80:7d:58:37:
e5:29:35:99:97:3e:6c:9b:77:bf:24:c0:e1:42:5c:fa:5c:9c:
e3:d1:8d:a0:58:50:43:47:49:99:10:1f:d2:f5:44:d1:d7:4b:
de:db:8e:81:32:29:74:b2:90:cc:7a:3a:50:33:40:bd:1d:07:
e1:28:b3:ec:41:df:16:2f:76:2b:97:54:37:d0:9b:7b:f7:c7:
3a:c3:a3:98:67:be:2b:de:c1:5e:16:70:fd:0e:42:04:35:01:
ad:13:c5:36:23:0e:25:6c:5c:b4:2d:b8:1f:ec:0a:69:52:f6:
16:0f:d7:71:55:8c:32:c2:db:31:1d:4c:24:11:5f:5e:eb:50:
01:78:4a:74:01:af:2f:ca:6b:bf:53:03:69:cc:37:7b:11:4b:
1a:2a:3a:f0:7b:ff:cf:b7:93:e1:6f:c7:2d:28:30:9e:87:57:
03:45:0b:e4:54:90:c1:f8:c1:fa:98:27:16:0e:7a:fa:58:ff:
b8:ff:df:f4:29:71:91:a9:3a:88:f3:d2:13:e7:1f:38:55:1c:
96:7c:fb:b4:51:31:ad:68:7c:82:d5:cc:5c:8a:91:5a:2c:1b:
0d:f8:aa:8a:5e:aa:d4:a3:e8:2e:13:02:fc:ad:fc:b6:1a:01:
07:9b:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:26 2025 by rpki-client