Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier: ozRc3CS3wBv234p2cLC0WS6NqAroNZTmQt7ZupM4G5w=
Subject key identifier: 02:BB:3C:A1:AA:3D:B8:BE:44:67:B2:5E:64:BB:59:70:72:CB:B0:F4
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number: 3453
Signing time: Fri 31 Jan 2025 15:05:15 +0000
Manifest this update: Fri 31 Jan 2025 15:05:15 +0000
Manifest next update: Fri 07 Feb 2025 15:05:15 +0000
Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: NK6zEzsxoklMwEofj/6E1D/SQ2fqMLTub41RUFn/+es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Validity
Not Before: Jan 31 15:05:15 2025 GMT
Not After : Feb 7 15:05:15 2025 GMT
Subject: CN=679ce6ab-d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:54:70:d5:ad:f3:e1:be:03:ad:57:cb:a1:
a3:82:db:ce:95:6d:c6:42:56:f3:58:2c:ce:33:b9:
9a:9a:f7:ef:52:b1:09:35:24:64:c3:48:ae:ed:04:
e0:b4:39:56:dd:5f:60:08:74:0b:1e:a5:05:18:b8:
34:16:90:2c:af:b5:9c:df:3b:ca:d5:ac:69:5e:a8:
d9:9c:a3:cd:c2:2b:91:d5:7a:15:12:1c:e5:d4:b4:
5f:3a:56:a2:fa:60:28:37:c8:53:42:ba:a0:cb:13:
3d:85:61:e9:8f:22:e3:4a:8a:3f:a6:bf:53:97:4f:
18:28:34:55:70:98:60:52:6b:f8:33:81:1d:fc:29:
46:b9:7f:4d:66:19:f4:e1:dc:d1:59:ce:2b:4c:32:
62:25:8f:34:42:e6:c1:fc:c4:b7:55:88:4b:35:4b:
01:17:3f:41:0e:c6:53:b1:8e:db:72:b8:23:c4:c2:
65:f5:60:44:ba:8f:f8:98:aa:d9:e4:9d:a9:60:7e:
16:f4:35:92:d5:8d:c6:34:4a:d0:a4:3e:39:9d:3b:
47:79:21:9d:76:26:ff:b0:fa:9b:33:5c:f3:9d:cf:
06:cd:43:cd:9b:85:4a:39:b6:c7:d3:6b:8b:f9:21:
72:89:57:7e:68:c6:a9:e9:0f:99:93:a0:bb:9b:07:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:3C:A1:AA:3D:B8:BE:44:67:B2:5E:64:BB:59:70:72:CB:B0:F4
X509v3 Authority Key Identifier:
keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:b3:e8:06:a1:92:91:f1:ad:7b:1f:7a:2a:cc:06:2f:66:
3d:ab:e9:1b:b5:c9:09:fb:27:8f:a3:44:b7:4a:a9:92:35:cd:
8d:84:5f:bf:f6:21:da:95:0a:bd:da:87:c5:9d:c2:06:a6:e9:
4e:b5:93:d7:ed:b4:97:b9:9e:5a:df:7d:f7:be:40:e3:38:e1:
7d:0c:1d:ed:59:2b:ef:f4:49:30:86:74:19:a1:77:56:e7:1b:
61:4b:1d:a4:32:40:5e:26:2a:36:dd:20:33:04:b6:a9:2d:90:
19:7e:8a:86:11:ac:cb:d6:5f:91:5d:79:83:c0:0e:61:34:95:
b9:5e:26:8a:91:6b:aa:0f:81:e6:15:e6:81:38:d7:21:7a:09:
81:aa:56:c2:a8:b9:e0:ca:de:91:b4:87:5d:ba:ef:70:8f:e3:
2a:f3:72:d7:9d:a6:49:c3:08:de:2a:54:7e:3a:cb:ea:99:ad:
c4:12:25:47:66:7c:22:11:8a:fa:80:ca:86:25:56:ff:46:4a:
51:2b:2f:2a:d0:35:a0:4d:22:a2:ff:33:0f:56:e2:85:ab:db:
6b:ba:75:64:f4:e7:ce:5a:72:bb:ed:10:93:fc:62:8d:7f:ed:
c9:a6:d2:7d:d0:18:eb:af:95:b2:38:23:7c:aa:93:b0:30:79:
f6:0d:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:07 2025 by rpki-client