Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json)
Hash identifier: LtJqcaBxKpMOH0pjZVzgz0qlNCYzshdPR4sCc9tBe3o=
Subject key identifier: AD:DE:77:1E:AD:E5:50:46:59:B4:36:D1:C3:62:7A:1D:DD:23:05:C4
Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 05:02:24 +0000
Manifest this update: Fri 31 Jan 2025 05:02:23 +0000
Manifest next update: Fri 07 Feb 2025 05:02:23 +0000
Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: 542ElYRfZO7nknXQpyx7HWOxedWS5eKraNkYmFk3DtQ=)
2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: CHWwiBoqVfGSoUjKXV1vohV3Io3pYex631KwXmxz4bs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Validity
Not Before: Jan 31 05:02:23 2025 GMT
Not After : Feb 7 05:02:23 2025 GMT
Subject: CN=679c595f-005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:b3:85:ca:8c:35:18:16:15:8d:aa:67:ea:
83:0c:54:75:82:2d:de:33:23:0f:db:b9:c9:a4:b0:
81:1d:69:9e:17:b7:ec:a9:b0:fb:7d:12:c5:98:f6:
40:de:f1:ee:b6:fb:dc:82:ac:72:22:35:2f:2a:a1:
26:7b:32:eb:f9:37:d0:38:b6:33:b7:08:34:ca:b2:
de:b6:bc:db:ad:99:d4:3d:73:d5:6e:24:8c:b3:b9:
be:b9:36:e9:8d:92:83:ca:22:af:72:a1:3b:08:d8:
b5:24:f6:ce:e5:af:cf:af:73:23:3c:ba:0d:f9:46:
1c:18:df:61:7a:41:d4:5d:7c:80:16:be:3a:7b:3c:
1a:a7:45:92:89:93:d0:6f:7f:ac:88:91:f1:7a:2f:
b9:e8:30:b5:3c:52:de:2d:16:5c:f0:b4:5c:19:00:
16:0f:67:11:d8:77:1d:53:f9:f4:a8:fc:24:ed:51:
71:82:de:51:f2:92:8f:28:4e:be:54:03:97:02:28:
7d:16:e1:80:85:71:1a:1e:8d:8b:91:d5:0a:d1:69:
f0:52:d7:18:d7:10:8c:53:0c:4c:77:18:0a:8f:86:
78:95:49:46:b3:9b:0d:13:e6:6f:f0:95:c3:2e:33:
5b:06:f7:d3:ae:32:33:25:c3:d6:9c:72:81:b0:ad:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:77:1E:AD:E5:50:46:59:B4:36:D1:C3:62:7A:1D:DD:23:05:C4
X509v3 Authority Key Identifier:
keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:93:2c:9b:ec:77:f1:e9:99:6d:0f:ff:b3:cf:99:0d:47:66:
c7:ea:fe:aa:c9:11:b5:a5:a4:fa:89:ed:10:6d:db:ea:1c:96:
5c:44:4a:ff:fa:5c:96:af:3e:02:28:de:dc:bf:7d:cf:49:6c:
ae:a3:75:1c:9a:88:2b:56:72:71:b9:73:32:36:fe:8b:06:8f:
aa:db:4a:28:8c:58:16:2c:5e:48:c2:93:75:b8:b7:10:b2:b1:
f1:2a:42:31:44:5f:1c:62:f9:9e:86:ef:cd:61:39:01:1b:82:
9d:6d:da:2a:a9:2d:c0:03:5d:78:26:3a:51:6d:2d:18:7a:8e:
a7:33:c3:fa:3c:37:5a:62:5e:fb:d7:76:ce:2b:cc:64:95:b7:
67:00:d9:a7:3e:39:5a:5f:41:db:42:9e:a5:aa:62:0e:f8:fa:
1d:0c:39:41:27:d3:e4:7c:a9:5d:55:8e:83:cc:20:80:55:c7:
96:82:28:9b:cc:b8:c1:ea:41:74:19:8e:cc:79:85:11:f6:a8:
52:9f:7e:68:d2:2e:89:fd:d5:83:cc:28:65:b7:35:37:73:2f:
fc:90:83:5d:73:60:75:7f:d0:cb:3b:b4:23:8e:75:fd:8f:5c:
d6:08:38:fd:92:a1:0b:9d:dc:e9:1a:e6:fd:1f:3b:fc:4e:6c:
52:ae:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:18 2025 by rpki-client