Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier: dYucdQNe7zpVUEBoiJM5ro+xdc7Chhtz36rBp33gDKI=
Subject key identifier: 66:DF:B5:1C:D0:D9:55:B5:DC:3F:AF:7C:70:9D:5E:8A:97:11:8A:E3
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial: 2243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number: 2208
Signing time: Fri 31 Jan 2025 15:53:46 +0000
Manifest this update: Fri 31 Jan 2025 15:53:46 +0000
Manifest next update: Fri 07 Feb 2025 15:53:46 +0000
Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: QaRFYs9eaoSAJyHhHnTQgPLn7xM8kF5wIxIOhbUqe5g=)
2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: S63Oxee1UbGeUPi4S36EtuT4tk3HjaeKeahILvMpTdM=)
3: 815465903EB511E9881B6529C4F9AE02.roa (hash: 7ddAjFS1pF9X1ZGgoVI2gdAs0bfs8rSNCFogYcRbEf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8771 (0x2243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Validity
Not Before: Jan 31 15:53:46 2025 GMT
Not After : Feb 7 15:53:46 2025 GMT
Subject: CN=679cf20a-605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:47:1b:c7:40:b5:dd:d1:f6:f2:0a:43:d9:
1e:59:4d:f5:18:d7:79:c3:44:29:d4:03:d4:f4:33:
21:d6:57:43:f4:44:8d:d9:28:c5:b4:51:15:2d:f1:
04:fd:a7:53:1e:09:fc:61:66:94:ea:66:79:8e:ea:
6c:4f:d9:c0:11:6a:0b:9c:2c:94:8f:34:0e:82:9e:
dc:74:b3:43:2d:05:1a:05:9e:4d:dd:17:6f:00:e4:
21:6a:79:39:a4:67:4d:53:67:ee:37:5c:ee:30:13:
53:01:f9:48:60:d7:09:08:08:aa:89:69:ec:4f:db:
56:c1:bb:28:a0:75:9c:a4:f9:05:81:d5:d7:b2:c0:
63:e7:c8:b3:5b:1c:72:08:2f:75:63:ae:f6:d4:2a:
41:c7:6e:6b:80:23:b9:f8:3c:6d:10:d4:12:45:30:
2e:11:ce:4c:12:c4:b6:02:83:85:4a:b1:2e:03:55:
52:c9:94:fe:e8:a7:bd:6c:8b:97:15:6b:70:db:79:
c1:bd:27:48:ae:3a:f1:77:f4:70:f6:07:c8:b5:cd:
9e:c7:a7:21:fb:a8:f5:f3:33:e7:70:20:31:c9:28:
ac:9e:51:d5:c2:2d:26:1d:40:ff:0b:11:47:86:11:
7d:a7:4a:98:ca:89:44:f3:0b:51:f3:ed:95:1f:1c:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:B5:1C:D0:D9:55:B5:DC:3F:AF:7C:70:9D:5E:8A:97:11:8A:E3
X509v3 Authority Key Identifier:
keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a7:59:a6:cc:13:c7:02:cf:a9:32:59:c4:2a:e6:a0:9d:0c:
ff:a5:58:5e:ef:79:b7:1d:1f:5f:b1:f5:11:ed:9a:21:8b:bc:
fe:68:a8:40:3d:79:90:16:74:d8:55:7c:45:a2:97:2f:97:d6:
00:7f:b8:27:c4:84:cf:b1:c9:5b:96:9a:74:ab:c7:0e:4c:43:
cf:fa:85:7e:a1:f0:d5:59:85:03:90:61:02:d0:91:33:20:0a:
de:fd:8a:a5:4d:2c:77:8f:1b:5f:81:3e:fd:19:73:83:f6:32:
96:fb:16:16:cd:7c:f1:d8:24:84:64:c2:e8:32:cf:93:54:8a:
72:47:75:a2:e1:e4:fb:7e:77:fb:81:37:f5:b7:98:1f:aa:13:
a2:ef:1b:32:bb:5b:ed:24:15:eb:09:2a:ac:b4:af:18:fc:4e:
ac:57:38:cb:29:15:5d:31:8d:9c:46:05:f3:e7:f4:21:58:0c:
80:c3:cc:f4:3f:4a:5d:81:31:8a:05:69:bd:3d:e4:49:1d:09:
51:7c:3b:10:81:9e:5c:51:de:b6:fb:b6:fc:ec:3d:ad:ab:f6:
4f:55:b5:73:09:b3:50:b4:4e:6d:90:18:f6:61:44:ea:1c:95:
f6:8f:bc:19:36:15:47:41:9b:cc:43:4a:c6:45:d7:43:0f:fd:
90:43:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:52 2025 by rpki-client