Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: xDuykwykA+I5SPGdkCV2++mS1hfHZ7l+chGszmkZl1o=
Subject key identifier: C4:B6:CB:B5:F7:BC:20:28:4A:7B:35:30:BB:32:6B:88:02:A6:54:BD
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 0119
Signing time: Fri 31 Jan 2025 03:59:43 +0000
Manifest this update: Fri 31 Jan 2025 03:59:43 +0000
Manifest next update: Fri 07 Feb 2025 03:59:43 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: fT9cBQ/HW8Y8s0GgVsYPg38/odw8xRT4DOM3DUqqIQY=)
2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=)
3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Jan 31 03:59:43 2025 GMT
Not After : Feb 7 03:59:43 2025 GMT
Subject: CN=679c4aaf-425b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:38:c8:1d:d8:5f:11:d3:da:25:a4:9d:e3:
c8:fd:c2:f1:67:51:3a:ef:a7:85:c2:67:d5:e5:34:
d3:64:25:ef:19:76:74:59:29:e9:05:17:37:c0:61:
a9:7f:68:d2:ab:98:9d:fe:bb:7c:19:3c:20:82:fe:
50:ef:ec:5a:c7:61:83:a5:c8:ce:cd:2f:2d:50:20:
73:1d:a2:ec:f6:0c:7a:86:db:0c:4f:6a:63:c2:ce:
a6:88:69:0d:2a:1b:df:a1:05:f8:3a:1b:65:b7:54:
48:ed:34:81:bc:76:ab:7e:7e:fb:2f:1d:5e:f3:69:
5a:fb:b4:78:2d:73:65:fb:b4:f4:63:9c:04:f9:b2:
df:8b:73:aa:41:6a:be:9c:55:3b:22:a3:3e:4b:51:
5b:e9:29:a3:62:6d:f4:05:94:8f:27:af:07:f8:06:
d1:ca:fb:64:24:c0:45:70:6f:0c:c1:80:2c:1c:82:
da:ba:f4:7c:31:c6:a0:82:ca:ea:79:f2:77:56:ca:
72:ac:09:f4:7e:a0:90:18:d4:bb:2c:85:ff:3b:44:
6e:c3:19:05:6d:c7:42:98:13:26:e6:7e:bd:fe:49:
c3:e5:bc:fb:4c:c7:95:b3:bd:1e:6e:ea:04:05:00:
12:dc:ef:4c:af:83:1c:4a:e5:fd:a2:14:a1:82:0e:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:CB:B5:F7:BC:20:28:4A:7B:35:30:BB:32:6B:88:02:A6:54:BD
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:fa:b4:25:fa:21:88:52:2a:b8:43:6e:98:42:2f:43:7d:5c:
76:68:f9:ab:c8:b8:f4:cb:c1:f1:6c:e3:53:17:c2:7e:56:a9:
ff:7e:a6:e6:fa:85:e5:e2:ae:e5:6e:ba:34:84:1a:52:9e:e3:
7f:14:0f:8c:ef:a2:02:04:05:a2:45:b9:35:7f:27:c4:4b:a3:
8f:f1:8e:9c:01:af:4b:c3:43:ae:6b:10:80:95:ca:92:45:d6:
23:16:43:36:b0:17:2f:11:8a:b4:c1:68:c2:15:99:15:de:cb:
12:69:70:da:a1:6f:38:37:52:d5:82:7f:f3:35:3b:4a:2d:88:
85:29:88:17:2c:fe:38:c7:91:d0:dc:bc:a9:02:f5:4d:7b:53:
6d:66:ba:9e:b5:27:5a:e8:65:69:2b:22:b5:81:27:72:a0:d0:
3f:13:10:4d:31:aa:64:85:ed:d4:35:f4:03:c6:c2:25:59:f0:
f3:08:9b:42:14:f6:2c:f0:7c:3e:99:2b:13:94:84:73:d7:51:
a9:6c:47:33:55:75:b5:7c:39:88:69:c4:80:5f:3f:b0:97:ce:
51:ec:8c:25:d0:be:ab:6e:2d:60:e8:10:1f:e1:9c:a7:a7:3b:
cb:ab:92:ea:5a:c7:10:fd:32:72:f5:81:52:bf:07:75:3e:f3:
5a:e3:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:16 2025 by rpki-client