Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json)
Hash identifier: PTRzEkhn82G14so9BU53FwkabC4N5EZ3fwZq5AyETtU=
Subject key identifier: 93:A3:0A:73:ED:EB:F4:6D:E3:4F:F4:C2:C2:5F:30:C1:73:74:6B:A2
Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
Manifest number: 0CC4
Signing time: Fri 31 Jan 2025 18:05:54 +0000
Manifest this update: Fri 31 Jan 2025 18:05:54 +0000
Manifest next update: Fri 07 Feb 2025 18:05:54 +0000
Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: QBzcG4kANWt1Hc8cFsoY73hZMoOHFXDsysCPs2uPbII=)
2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 50X2YknGPNQ7f3oYcKge6hlv5pd3PV5tqtttq6Hz8zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678
Validity
Not Before: Jan 31 18:05:54 2025 GMT
Not After : Feb 7 18:05:54 2025 GMT
Subject: CN=679d1102-7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:71:23:e8:48:f8:79:a6:77:14:d3:37:09:
c4:69:e4:ae:91:27:97:3b:66:0a:2e:88:5e:dc:de:
1b:63:0f:a8:76:77:0a:17:84:87:f7:6c:65:3c:ad:
b8:df:50:e2:fb:71:76:96:2c:66:1c:e3:f9:ad:53:
2f:61:d1:e8:ca:95:04:a3:89:82:27:63:25:5f:59:
3e:6f:22:ce:8f:43:c2:66:a7:89:26:ba:3a:a8:f0:
01:32:cd:4e:06:36:a0:1f:f3:f6:b3:62:81:76:43:
9e:b8:96:e1:ba:86:73:31:f7:56:c7:9c:94:2c:78:
47:1d:56:ee:80:85:e7:43:92:e2:fd:16:a5:52:02:
e9:6b:e0:75:7e:a5:6b:1e:e1:48:66:7e:85:2e:4f:
68:d0:c2:fa:3a:0b:92:a5:54:5a:b1:16:20:54:6c:
d6:78:90:1a:a9:e7:b2:77:c5:03:83:9c:a2:c2:10:
06:93:7b:52:d3:a8:8d:6d:a7:7d:70:45:9a:da:51:
7b:63:c5:22:63:5e:9b:e0:ca:a3:91:44:34:3b:e2:
83:5d:c7:10:27:af:21:98:23:2c:30:6d:dc:11:34:
5c:11:04:d1:5d:07:56:d7:52:40:63:09:9c:2b:4f:
b9:43:77:55:63:f7:35:36:71:72:bd:42:5b:d7:79:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:0A:73:ED:EB:F4:6D:E3:4F:F4:C2:C2:5F:30:C1:73:74:6B:A2
X509v3 Authority Key Identifier:
keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:a6:b5:5f:2f:dc:cf:67:bf:4b:99:bb:ae:71:dc:1d:a5:
e3:d2:3c:65:9b:e3:7d:25:f0:0e:c5:26:a8:69:67:17:d2:bf:
c2:cc:5a:05:84:dd:05:9e:d4:bb:66:68:2b:59:67:71:64:aa:
78:dd:c5:64:75:d5:d3:25:53:92:e1:41:48:93:f6:3f:9e:1c:
1b:50:4d:fb:7b:7b:4d:30:5b:60:62:65:da:a6:13:fe:5c:91:
ca:cd:a5:e4:df:78:fb:9f:1d:fa:a0:25:4d:05:61:ac:9f:76:
e5:b3:89:2d:95:dd:95:11:5c:71:45:c6:70:c7:ed:f6:2c:69:
12:9a:f0:97:d8:47:0d:09:91:db:5d:0c:30:9d:bc:3e:d1:77:
42:29:32:c1:f0:bf:3b:3f:00:90:d9:3c:ab:d1:d4:c5:09:0a:
c9:77:c6:3c:8a:6b:05:f4:88:d1:81:1f:c4:4d:4d:37:f5:02:
ba:51:53:e1:15:8f:2c:df:41:ef:48:25:8d:22:5e:3d:64:fe:
d3:2a:e7:37:cd:ac:a7:0c:f1:8d:48:04:c8:9d:47:6e:b4:6d:
f8:98:c5:07:2a:62:47:83:31:d7:9f:f0:d3:a1:af:20:f4:9e:
68:b1:08:53:65:61:de:4e:5d:2e:c7:35:b9:3c:a7:8f:47:4c:
d1:be:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:03 2025 by rpki-client