Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json)
Hash identifier: u0TEHUbt+oJKHk6y5LsCV4Bj3W00/1A3+cKqfFSWP08=
Subject key identifier: B4:F5:CF:7F:01:81:27:54:14:E8:19:0F:5E:12:AF:0D:28:7C:FF:90
Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93
Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
Certificate serial: 075B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
Manifest number: 0731
Signing time: Thu 30 Jan 2025 21:51:42 +0000
Manifest this update: Thu 30 Jan 2025 21:51:42 +0000
Manifest next update: Thu 06 Feb 2025 21:51:42 +0000
Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: L4MyNMGyatJMmEhfpNcq1n8yaHYSwQ9DWuALYp/wLeQ=)
2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: j3Mdp3VdpFJP8qi33NyGvoVivwkHNNacPK2sV9tj6Kg=)
3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: AQgiwzW9jceFccX6zBisJvL/Ao6lPHGS3Rx++rG7HtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493
Validity
Not Before: Jan 30 21:51:42 2025 GMT
Not After : Feb 6 21:51:42 2025 GMT
Subject: CN=679bf46e-58db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:86:a7:5a:ce:6d:c9:95:39:9b:7e:e6:4f:
c4:1e:5a:b6:85:97:c7:5f:dd:b3:01:56:3d:30:fb:
e5:d7:93:77:3a:d1:19:96:14:0c:32:b4:c2:19:51:
58:73:d2:91:d0:69:ee:f6:39:6f:d9:76:15:e2:d9:
97:cb:31:a2:ec:bf:cf:36:41:f3:0f:99:7e:23:8a:
e8:c4:08:71:bb:ca:ac:af:55:9f:a5:11:21:d3:30:
db:8f:43:bf:66:7a:2c:4a:d5:09:d7:fb:4e:17:02:
09:5c:44:78:bd:66:6c:d2:91:47:3c:c0:07:39:a8:
5e:fc:23:ea:6d:b2:27:27:ae:e1:25:e2:ea:28:b6:
0e:18:ad:40:33:73:e9:a8:4f:a6:38:fc:bd:6b:a8:
ba:49:f8:e9:18:a8:40:f9:13:95:d3:28:5d:b3:44:
9f:f9:57:97:7e:f2:1b:e6:9b:ce:58:56:9c:02:a3:
8b:7e:07:61:95:87:1a:b8:c3:36:93:48:85:a3:fa:
c2:2b:54:b6:d5:65:8f:c9:d9:e7:74:35:a6:0b:62:
ec:8e:ec:84:9d:43:c9:4c:92:3d:47:94:9a:c7:4a:
3f:11:bc:29:ec:49:1c:7c:cd:5e:34:ed:5a:02:85:
33:08:25:34:0f:0a:0d:be:a7:4a:5e:72:1d:ab:d9:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:CF:7F:01:81:27:54:14:E8:19:0F:5E:12:AF:0D:28:7C:FF:90
X509v3 Authority Key Identifier:
keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:89:11:d8:93:f5:73:66:f7:f4:86:3c:a7:e3:9d:e9:5c:34:
6c:72:40:6a:6d:75:97:c1:41:bc:a4:38:46:f7:10:2c:c6:02:
8d:c0:0a:55:61:aa:9b:09:7d:da:c5:9b:30:e9:9b:3c:55:e7:
15:d2:00:1e:24:90:bd:d3:dd:c3:83:10:ff:d0:86:e4:2b:fc:
74:ae:be:43:62:bb:53:8f:bd:d0:45:f3:14:0f:f1:5f:00:cf:
5a:b1:24:69:8d:1e:53:e4:c7:bf:ae:9e:1d:73:ae:77:70:6d:
cf:a6:bc:3b:50:c9:d8:5e:6b:c0:d6:84:06:c6:a7:e5:fa:5c:
2d:45:98:05:c9:04:35:c6:b0:b9:76:75:77:c0:b8:d5:17:9f:
e6:b1:df:df:44:83:14:a7:36:5f:f2:ce:5c:78:7d:4e:a4:97:
7a:6b:28:80:3c:0d:84:3e:d9:6e:6b:ab:d9:f6:8b:95:7b:80:
16:13:fc:02:c0:01:c6:91:13:25:38:f6:58:7e:5c:17:3c:c3:
11:94:d0:e8:c4:9f:f4:17:f5:77:d8:fa:ea:f0:58:ce:d9:5a:
be:1d:6f:65:f0:fc:81:44:08:cc:c8:ed:b4:61:3a:82:ba:8f:
1d:69:82:3b:37:f9:17:30:e4:0c:55:65:70:e6:0b:e1:3d:97:
a8:d1:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:06 2025 by rpki-client