Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier: 4zjdVzqV5KZ39ZGKE4KRSYPpdTT/PJLuM8MMgJavmQU=
Subject key identifier: 22:8F:7A:89:D1:C4:92:6A:71:E9:5C:4C:3B:C0:B2:D2:69:F0:50:73
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number: 52
Signing time: Fri 31 Jan 2025 06:16:58 +0000
Manifest this update: Fri 31 Jan 2025 06:16:57 +0000
Manifest next update: Fri 07 Feb 2025 06:16:57 +0000
Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: EUDGnvPpGE8rs3Mpg+tvS5W5EiNECbKbCE0lZR/BZ2k=)
2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: Jan 31 06:16:57 2025 GMT
Not After : Feb 7 06:16:57 2025 GMT
Subject: CN=679c6ad9-8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:86:da:ab:50:d4:dc:cd:d4:6c:6c:39:97:
87:d7:3e:33:cc:83:18:76:a5:c2:fd:2a:c4:bb:1a:
f0:3a:84:74:b6:e2:64:a2:85:a4:8c:75:3d:d5:a4:
ae:0d:74:11:a0:27:93:5d:83:d2:d8:21:fb:ff:92:
0d:9e:aa:a1:ca:1d:64:77:13:97:7f:6b:1c:c5:b0:
1c:72:7a:04:70:8e:99:75:4d:4f:87:8b:7e:97:eb:
58:83:e2:b3:b7:c4:3c:8d:94:be:d6:1c:7f:9e:40:
b2:9b:e5:99:d7:c8:96:53:64:33:10:51:26:8a:7e:
cc:a3:2c:31:3c:b4:6b:06:4c:7d:20:b2:90:e2:89:
a4:21:e0:fe:2a:c0:d6:ad:66:cf:4c:05:f9:c3:25:
7b:6d:6c:5a:97:53:50:a9:9b:cc:ee:8e:3a:66:00:
c6:7f:c2:ab:d2:73:21:8d:4f:27:0e:83:e5:bd:4f:
a5:86:2e:7c:ce:a1:69:ba:d6:d6:2b:61:6e:ca:ed:
35:f5:cc:be:4e:22:c2:2a:12:48:a2:c4:41:48:b8:
ed:4d:19:e7:06:3b:d4:2c:a2:85:b9:4f:d0:b4:6a:
44:f5:c3:4f:79:5c:21:4c:1c:c2:e3:94:86:89:8f:
99:0c:d1:fc:e6:f3:15:b7:3e:9c:bb:9e:f0:a6:67:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:7A:89:D1:C4:92:6A:71:E9:5C:4C:3B:C0:B2:D2:69:F0:50:73
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:5c:0b:b7:87:5c:c9:ec:17:e8:4b:b2:55:5b:f6:46:b2:
77:11:0d:82:e0:ad:bb:06:b9:98:d2:20:57:8d:b0:7b:38:32:
78:3e:ed:70:52:02:ae:a6:64:65:d8:1a:b6:56:cf:2c:09:68:
ab:bf:df:10:aa:b8:61:1c:7f:af:06:34:ed:12:47:6a:b1:f0:
50:a1:99:c7:af:a7:e9:d0:27:6c:61:fc:ae:b5:33:a3:11:65:
b3:0c:54:d9:45:14:1c:d7:df:ed:9c:f3:bc:58:c1:38:c5:1e:
ef:17:77:8c:80:5c:31:fe:e4:51:ce:a9:4f:0a:60:c6:7a:dc:
28:1e:84:32:c4:9a:5a:3d:58:ca:6c:f3:46:61:33:e7:19:b6:
9c:78:db:6f:af:f1:a2:ce:af:4f:17:51:7a:57:a6:e6:21:24:
27:1a:64:a5:88:fa:18:9f:7b:f4:2a:e0:41:96:0b:09:d8:33:
be:71:44:f1:0a:0d:9d:78:77:6a:64:02:88:83:d0:f5:45:cc:
42:61:50:ae:06:5e:45:c9:6d:40:f4:07:0d:d3:83:12:c5:3a:
26:3b:28:fd:ca:fb:e3:94:ad:35:12:8a:43:bb:bc:7a:ed:03:
70:0d:30:b8:64:f5:fb:15:e3:0b:fb:4a:e1:5b:c3:8e:fe:d5:
7c:e0:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:41 2025 by rpki-client