Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: vQTXRGBajbp2qkMY9y1+aG9oPZPHcHzG0dIdRIIXGas=
Subject key identifier: 10:BB:AD:5F:33:D8:1C:F5:40:09:4C:E5:0B:66:D9:0D:30:08:2F:5D
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0CF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0CE8
Signing time: Fri 31 Jan 2025 18:03:47 +0000
Manifest this update: Fri 31 Jan 2025 18:03:46 +0000
Manifest next update: Fri 07 Feb 2025 18:03:46 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: CaNyWY6k79gzu7VBo06BAT33qf1zoauF88pZOGhTyf8=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: 8eP4hTFPvkA+DZka7Owe6Pw6H4BJETlKYc1wPRQQyeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Validity
Not Before: Jan 31 18:03:46 2025 GMT
Not After : Feb 7 18:03:46 2025 GMT
Subject: CN=679d1082-4c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:d1:fc:38:7d:f5:a0:02:25:44:14:d9:41:
af:a7:e8:75:d8:e6:20:0d:e6:f7:69:af:3d:8c:ea:
6b:1e:dc:62:47:6a:46:9d:7c:52:02:d1:d7:c2:48:
27:c4:8e:c1:c0:e0:98:65:ed:53:3a:fd:7b:95:be:
93:01:dc:d3:a6:14:7b:fe:da:07:f3:5e:29:59:77:
20:4b:d8:a3:8a:4c:8c:08:f1:4b:dd:57:6f:7f:46:
e6:22:6c:af:42:a5:82:39:fa:bc:e6:18:d4:b2:4b:
1c:47:78:24:41:7a:44:9a:ba:f0:c1:6f:dc:b9:94:
99:01:30:8a:79:20:37:0c:d9:29:6f:1c:3d:d3:3e:
99:62:2f:9c:ed:ba:49:56:fd:81:93:d8:9d:19:73:
f9:a3:ad:1c:0b:a5:ae:0a:9f:75:a3:88:af:1e:93:
a8:c8:1b:35:bb:8f:a6:8b:47:62:e4:88:6d:57:2e:
19:3a:9d:6c:fb:08:b7:a4:fc:97:fa:92:25:95:f2:
a4:e7:2c:76:93:3c:f1:47:b9:cd:10:81:aa:00:1d:
0f:5f:8b:3d:74:de:9b:49:90:d4:81:3c:37:55:da:
05:9f:07:bb:76:58:ba:97:93:94:2c:2b:3a:7e:00:
08:ba:f8:66:5f:cb:34:29:ec:e3:6d:53:01:e7:66:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:AD:5F:33:D8:1C:F5:40:09:4C:E5:0B:66:D9:0D:30:08:2F:5D
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f9:97:08:89:c1:af:6a:45:a0:1e:1b:5c:fc:59:02:dd:4f:
50:22:f0:ed:1e:87:63:19:7c:cf:09:52:5f:c9:de:7e:82:2b:
c8:ec:5c:c9:37:58:28:1c:85:b4:c1:95:af:35:ae:a9:c6:1b:
d0:a3:35:e7:3f:c4:68:cf:70:9e:c6:7a:9e:b8:0d:69:19:35:
10:f6:b8:c5:8c:0c:7e:bc:d8:54:3b:b3:5e:c6:71:0c:59:8f:
de:b6:1b:43:d1:e5:a8:21:ed:ab:84:fd:d3:ce:9a:44:46:ae:
ee:64:43:50:90:13:a5:7d:4b:6f:d2:ad:79:6e:c8:34:57:31:
38:d0:7e:42:cd:48:4d:17:4c:45:7d:cd:94:54:af:2c:5c:e6:
ce:a1:4b:62:4a:c8:b0:86:9c:72:e5:5f:e7:b1:d5:14:b7:90:
c2:8c:f6:00:c3:b2:1e:79:64:00:c0:ce:92:75:07:ca:ae:d7:
b7:bd:17:e3:8b:f5:17:41:80:40:e8:e7:68:f3:e8:3e:23:23:
c5:07:16:cc:3f:68:d4:cd:bd:8a:29:db:3c:88:3e:fc:44:01:
87:ef:4f:c2:9f:ac:dd:1b:83:25:fe:e7:b5:64:1a:80:54:12:
6a:35:96:2f:85:20:37:8e:23:8a:01:d2:9a:d8:43:c8:c1:2d:
e6:d7:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:53 2025 by rpki-client