Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier: NeykCbPAsQhj4uVfkpIA4iDA9Etiim+XzxN1rpeEfMs=
Subject key identifier: CB:D1:B8:6B:55:08:8A:05:05:85:A0:C5:C0:4F:7A:F8:E4:62:52:FB
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number: 0989
Signing time: Thu 30 Jan 2025 20:39:26 +0000
Manifest this update: Thu 30 Jan 2025 20:39:25 +0000
Manifest next update: Thu 06 Feb 2025 20:39:25 +0000
Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: UPfmZoEF0s43Onc0z46MyiSVvsrVVssHS2PL3Ixq3+4=)
2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: C0N61U0YEOhXRTQRllW2NuUOi6qXdqTI0gAe9H3eVh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Validity
Not Before: Jan 30 20:39:25 2025 GMT
Not After : Feb 6 20:39:25 2025 GMT
Subject: CN=679be37e-8736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:60:28:0b:8d:7a:14:23:58:82:fc:e7:45:
66:7b:7a:ca:11:27:3d:c2:00:18:5d:1d:06:96:a7:
a0:2a:59:ac:af:cd:62:cc:ec:46:f8:7a:28:67:2b:
89:02:b4:35:49:05:25:9f:7d:3e:9e:10:1c:a3:2b:
4f:17:32:8f:a5:89:8b:d9:15:d8:17:5b:64:be:88:
48:5a:a7:d8:6c:76:d1:26:30:06:5b:bb:67:e1:0a:
f9:fb:15:8c:43:b1:6d:01:32:f7:91:eb:d9:e0:55:
ae:13:72:83:d0:fb:fb:74:44:ee:14:61:22:a8:40:
5c:f0:86:1a:b8:49:a4:da:26:70:58:81:5c:df:6a:
95:60:0e:fc:3e:8e:d4:74:96:2f:83:24:50:5b:fb:
1e:aa:33:c7:a6:d8:63:b5:c8:bd:03:04:ea:19:6e:
d9:d1:6a:b3:48:e8:b5:95:dc:76:45:85:fb:16:44:
75:fc:8d:87:67:bb:f2:39:35:ea:4b:9f:2c:fb:82:
ab:96:c0:e3:e8:79:d1:55:28:83:1c:6b:ac:6c:b9:
3c:a2:11:d5:0c:82:f7:6e:57:ff:90:54:74:e0:62:
83:a3:70:bf:fe:6d:69:94:0e:70:40:8a:97:fa:ae:
84:1c:3b:b8:03:ce:fb:06:a6:5b:a7:f7:17:6e:c7:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:B8:6B:55:08:8A:05:05:85:A0:C5:C0:4F:7A:F8:E4:62:52:FB
X509v3 Authority Key Identifier:
keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:46:8d:82:a6:91:46:7c:90:dd:1a:24:7e:db:77:c8:aa:
26:06:d4:e5:45:77:de:dd:5a:a3:9e:10:23:da:93:8b:f1:52:
bd:71:3e:09:67:5a:78:ad:26:35:a1:8d:cb:96:f4:f3:c7:95:
3f:b0:c5:4e:2e:9e:58:0b:b7:fc:b4:e2:5f:91:ff:06:73:f6:
8c:a0:64:46:fc:58:89:e3:e8:51:6e:15:dc:c7:3e:4e:14:04:
36:5a:cc:80:92:89:36:c1:93:d6:6d:03:46:66:f4:07:d5:fc:
c5:8f:03:e3:13:93:b3:2b:e7:08:9d:9a:f8:3a:24:52:74:f3:
3f:c0:f1:4a:d5:01:f3:28:a9:47:b0:29:10:67:b8:d7:59:a0:
df:eb:2f:86:31:ef:ba:4f:6f:5b:1e:50:9b:47:13:54:d6:79:
e2:65:d9:25:1a:a9:13:29:bd:6f:61:82:1e:d9:dd:7e:f2:68:
af:b3:62:28:1a:5f:b3:b2:82:60:f5:17:c6:b3:50:60:1a:6f:
07:12:f8:72:a1:d9:2b:3c:de:67:e5:55:05:3c:91:8a:9f:d1:
c6:4e:0e:f8:ec:56:57:d5:82:66:8d:d6:10:21:96:a8:ea:99:
9d:cf:2e:72:53:e5:2c:bb:44:ab:9b:75:04:d6:a7:56:e0:4a:
37:b4:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:06 2025 by rpki-client