Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: 9346O2/Iag/moyuRWjM2V81RLKMCzb6oV8zR03KCBFE=
Subject key identifier: 88:96:4B:71:1E:47:59:6A:AF:47:5D:B5:7F:7A:9E:59:78:C0:C1:E6
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 100D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 0FDA
Signing time: Fri 31 Jan 2025 17:27:35 +0000
Manifest this update: Fri 31 Jan 2025 17:27:34 +0000
Manifest next update: Fri 07 Feb 2025 17:27:34 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: RYaqq/qa30F4U1wnuSvUoyp9dOQNO4GfKEuFWbzzg3g=)
2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E=)
3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=)
4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: 3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=)
5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=)
6: 6007188446B111E98B793856C4F9AE02.roa (hash: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE=)
7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: +BIl0WRLfLsKpfnz3iZ4Rc3b06FaqG+le22fYJBc22s=)
8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: l97Qx+I5/FSi2nPuMo4C+TzlRFSgb0mZdEVP8fFlEzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4109 (0x100d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jan 31 17:27:34 2025 GMT
Not After : Feb 7 17:27:34 2025 GMT
Subject: CN=679d0807-3d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:ba:29:8d:40:72:88:70:25:45:8d:96:1c:
4f:c0:02:9a:05:35:96:c3:61:76:a4:2f:da:a8:9f:
8d:bf:db:27:44:a0:2d:b2:c3:1a:5a:fa:d4:da:00:
97:01:21:9d:1d:22:3f:49:c1:c6:86:7c:32:5b:55:
c4:b9:86:14:84:bb:41:40:09:c2:d4:e6:e9:fd:54:
8d:a6:db:72:6a:9b:71:cc:11:0e:ad:74:1e:57:bf:
e8:4c:b7:2c:f2:ac:17:f5:46:0d:6e:27:48:5e:20:
35:fd:c3:80:43:7e:50:d0:36:0a:08:4e:b3:25:04:
ea:82:ca:2b:ab:fe:5f:db:cb:86:a7:86:53:81:6c:
43:f8:37:79:01:5e:c1:59:d4:98:a0:97:89:9f:3a:
f0:ca:43:5d:9e:6d:8c:2d:e6:ef:72:ae:65:f8:80:
e3:8c:f9:23:08:33:9b:33:34:95:19:db:ec:2d:da:
df:03:c9:e0:37:1f:04:c6:2c:91:7d:76:7d:19:e9:
79:5b:11:c8:27:06:42:00:fa:cf:8c:05:9f:2e:32:
74:59:93:ce:f1:af:dc:2b:41:4f:17:c3:2a:89:a7:
0b:f6:d0:58:18:3f:d2:92:ec:ad:53:b8:e5:b0:3d:
c5:49:2c:21:3a:7d:2f:71:2e:c1:49:cf:b2:2a:0b:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:4B:71:1E:47:59:6A:AF:47:5D:B5:7F:7A:9E:59:78:C0:C1:E6
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:25:b9:ca:05:18:b1:ac:6f:28:08:cf:ab:4f:ea:f2:9d:
51:78:80:83:a5:af:56:80:f1:10:85:fe:8c:c8:dd:ee:a1:91:
99:70:4d:a7:22:0f:6d:ac:2a:78:8a:18:4d:8b:c1:0f:ed:75:
42:0a:f4:b1:89:d4:5e:ec:ff:77:9a:55:e2:9c:28:ec:00:13:
e9:b9:20:2a:bb:3f:b9:43:2b:65:91:a3:7b:a8:5b:41:73:2e:
eb:c0:3b:53:47:82:69:f3:7c:d4:46:8d:43:01:44:e0:3e:e4:
80:fc:fd:a9:94:29:54:c1:cd:c5:c4:c0:94:a9:a1:31:df:69:
19:c1:1c:84:ea:8a:1c:b2:a7:6e:c9:a1:33:79:fe:8d:33:91:
6f:e8:c2:0f:fd:17:97:0e:cd:d0:5f:0f:bd:5b:db:1f:3e:57:
93:bf:2d:6c:70:94:ab:a8:79:39:0e:84:06:cf:b2:2c:cb:1d:
88:19:17:1e:3d:a7:51:04:80:48:03:2d:6d:19:68:fa:85:c1:
14:5e:be:71:b4:5f:98:1b:65:64:73:21:71:0d:00:93:2a:54:
c6:ad:b6:24:29:ce:9f:61:3a:04:dc:15:aa:de:e0:d1:1a:9f:
8c:cd:ac:ba:72:03:45:71:0b:a0:7a:f8:6a:0f:54:d2:41:eb:
3a:d4:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:05:21 2025 by rpki-client