Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: VizzJeXj5E7LUfSXTptwifkL6+jcrT8djVH0oW/24fQ=
Subject key identifier: E4:0D:1A:8D:B7:FA:50:9C:9F:F9:17:5C:16:6F:C4:69:76:45:B0:CA
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 1394
Signing time: Fri 31 Jan 2025 18:29:56 +0000
Manifest this update: Fri 31 Jan 2025 18:29:55 +0000
Manifest next update: Fri 07 Feb 2025 18:29:55 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: MDI15qD7mcflrDbOzcyUhdvFJzcfDTDwgSNygROq+Gg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: Jan 31 18:29:55 2025 GMT
Not After : Feb 7 18:29:55 2025 GMT
Subject: CN=679d16a4-8156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:13:0e:be:8e:73:1e:52:e5:2d:14:ef:66:
54:83:c4:18:87:df:c8:92:d8:7d:5c:2b:9b:c7:8d:
40:c4:76:0a:ef:24:0d:ae:7f:68:d5:80:e0:39:d9:
0e:56:c1:06:e1:6b:40:70:6c:e6:6f:6f:b3:f1:36:
c0:9c:c0:90:fa:19:c1:7b:f8:11:a8:ae:ea:42:a7:
21:fb:1c:c7:e3:f7:b7:8c:39:c9:8d:e1:e2:2e:93:
d6:0d:02:fe:52:3d:97:0b:91:6e:a7:39:e2:82:c9:
08:8a:80:4e:10:9e:01:36:be:ae:89:71:7e:b1:df:
5f:17:93:eb:e2:15:9c:78:d9:82:73:0b:5d:3b:a9:
a4:20:34:3e:14:43:79:25:1d:a9:4b:bc:cd:41:65:
fc:53:e6:1b:4d:8c:e8:05:a6:27:52:b0:85:11:ba:
6f:ac:8d:ef:9b:c9:b0:7c:c7:86:aa:f6:a6:16:63:
76:89:2d:56:3e:27:ec:e8:95:13:08:bd:22:08:fa:
9c:6d:06:e0:87:7a:6b:63:69:08:b9:9d:b5:30:72:
9a:50:1c:ca:27:a8:6f:5a:ac:c6:46:ef:a3:26:94:
a7:6e:6d:78:e9:37:ce:f8:8f:9f:35:ed:4a:16:b2:
94:b9:df:3d:d4:7a:d0:3b:e2:40:e7:a6:b6:f8:8f:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:1A:8D:B7:FA:50:9C:9F:F9:17:5C:16:6F:C4:69:76:45:B0:CA
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:51:4b:23:aa:80:4b:d9:70:4c:1d:5a:64:bd:bf:d5:08:
b6:e2:a1:5f:38:db:2c:4e:5b:a7:30:d2:2e:c8:9f:b8:5e:46:
09:9f:0a:4b:8e:e1:68:86:95:f5:d5:72:91:99:3a:04:10:54:
b2:29:97:4d:f6:00:9b:98:8d:4c:c3:8e:b8:33:f8:6d:85:47:
73:21:07:ca:d9:b2:8f:db:3c:d2:45:56:cc:8f:a4:7e:48:4a:
42:02:3c:2d:5d:83:af:c9:ee:03:2f:33:be:5f:74:46:81:34:
fb:3b:2b:b4:86:9f:b3:2f:14:f9:91:1f:0f:bd:50:27:c3:50:
e5:10:a9:73:ce:4d:75:af:4d:d6:45:33:24:33:d6:f4:dc:30:
c1:6b:db:d9:12:52:8b:db:e0:37:6e:ea:e0:48:08:47:f1:6b:
d5:a7:cf:64:aa:22:f6:be:42:b8:fc:95:c7:1c:ee:7b:7a:80:
6b:a7:34:05:8d:27:87:85:80:39:0a:eb:01:91:d0:66:fe:97:
9d:3d:ca:52:40:9f:eb:c2:d3:4f:d0:64:60:bc:83:5a:33:67:
ee:ef:bf:ae:c2:bc:b7:e1:e8:cc:8f:9c:af:1f:5d:fc:d0:13:
a5:02:b4:63:15:fe:33:bb:cc:72:dd:bd:01:4f:f3:a2:a4:67:
48:6e:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:32 2025 by rpki-client