Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json)
Hash identifier: UqjtYetFwWIvhxPh+fvyPJkuolw3NEIjEeL/Y4FFXL0=
Subject key identifier: F2:85:E5:71:E4:DC:DB:46:14:C0:C6:AE:79:3D:CA:B7:57:D3:6F:04
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
Manifest number: 083D
Signing time: Thu 30 Jan 2025 20:48:46 +0000
Manifest this update: Thu 30 Jan 2025 20:48:46 +0000
Manifest next update: Thu 06 Feb 2025 20:48:46 +0000
Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 5OxKAgvsMjBXKh0V9epzOxhQCdBMNt4lHA+c7D1mHrI=)
2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: C1ZgQz60lAzJ/pUgilayEtzS5Rl0aKnA28InX9MzEYY=)
3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: mBsQp19MJChPAh0neRjuRaTqTqqlhbgiZ+3pPDgiX8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Validity
Not Before: Jan 30 20:48:46 2025 GMT
Not After : Feb 6 20:48:46 2025 GMT
Subject: CN=679be5ae-d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:dd:9f:9f:b1:f0:83:d9:99:ac:74:2b:9e:
1a:00:26:a2:93:61:5c:e8:e8:4c:89:64:73:cb:b5:
c0:e6:3a:a4:4b:20:d7:b7:a4:68:6f:c4:3e:4c:c7:
6a:e7:f4:87:1a:64:ad:0a:70:c6:49:5f:f0:b1:23:
31:62:ca:93:0a:f9:e2:8f:66:54:50:7a:9f:b4:9e:
47:45:11:18:5b:d7:74:18:df:d4:19:6b:c7:51:72:
0e:ba:ff:fa:a7:e1:78:33:c6:ce:e3:91:c2:11:88:
61:10:40:95:cb:8b:37:d2:f5:27:cd:0a:43:d3:f3:
db:ec:84:29:e3:5d:e1:b5:0c:34:3d:bb:26:50:cd:
58:b2:e3:e9:0d:10:17:0b:22:63:8f:6d:8f:f1:ad:
f4:6c:53:6d:42:d8:4b:f0:53:80:5a:a1:38:4d:59:
63:64:2f:e5:55:93:10:69:42:04:55:03:32:91:26:
a1:c8:29:ea:e5:7e:0d:d4:43:9a:f7:4e:22:b0:57:
cc:ea:eb:a7:21:17:18:27:e6:4e:d1:c9:21:5e:fd:
73:fb:7a:97:be:73:b8:32:fe:d6:28:c6:fb:23:09:
d2:2d:70:59:fc:47:ac:78:67:e5:f7:a1:7e:af:1d:
b8:32:10:c7:ab:48:55:17:dd:da:33:23:cd:9a:7d:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:E5:71:E4:DC:DB:46:14:C0:C6:AE:79:3D:CA:B7:57:D3:6F:04
X509v3 Authority Key Identifier:
keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3e:c3:23:38:b2:28:c3:fa:11:ca:c3:7f:80:99:8f:fe:d2:
90:f5:ca:1d:16:63:45:0b:4d:77:11:4e:b8:f7:b0:f1:e5:a5:
46:ea:b7:ec:03:d6:70:75:52:17:6a:c6:22:28:6a:52:b2:88:
de:31:85:d1:ee:bc:e3:21:47:d5:75:cf:e1:bd:72:27:f1:16:
c2:16:32:f8:23:a9:47:3e:3f:62:92:f5:c9:b4:15:f4:2c:a3:
48:42:8e:6e:90:a0:bc:6a:ae:93:3c:d2:b9:b5:38:75:d0:8f:
8c:f3:2b:9c:0c:d8:a1:cf:81:76:0f:ef:ca:f1:14:eb:7f:54:
a1:39:5c:f6:0b:c1:79:99:4a:20:a6:81:40:db:84:97:5e:97:
0c:d2:ba:f7:bd:bb:1d:e1:e7:ea:2d:2a:eb:99:ed:bd:72:9e:
5b:4f:b6:f7:fb:48:9e:fb:4c:cf:c8:94:91:d1:92:88:c8:ed:
15:b1:fb:96:cf:9f:0f:6f:47:d5:d7:c7:7b:48:5c:f7:42:ed:
8e:12:dd:cf:70:e4:48:ad:c3:d2:78:87:ed:a1:5d:45:2d:aa:
a8:15:19:b5:01:e7:2b:6d:b9:9b:22:84:29:e3:a3:95:24:9f:
d2:50:0b:16:d6:5b:b6:cd:b6:ad:ca:60:77:78:4f:63:02:7e:
8f:7c:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:40 2025 by rpki-client