Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier: AcMqlVhF2PbvJYphnruzcUSG9+o3FUarQLs0qnRfr+Q=
Subject key identifier: 0A:0A:AB:59:23:9D:A0:61:E7:FD:3C:61:6C:10:D5:7F:E0:CA:99:CC
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number: 0375
Signing time: Fri 31 Jan 2025 00:56:40 +0000
Manifest this update: Fri 31 Jan 2025 00:56:40 +0000
Manifest next update: Fri 07 Feb 2025 00:56:40 +0000
Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: aWO2QtCg5Y2f4wSWyrF9hMpzzFkx8MLxFLD2FV+Ytu8=)
2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: HQbxIpWcedK5+bgfWJhbfwDuzgKpxhexN3JOo2oh/fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Validity
Not Before: Jan 31 00:56:40 2025 GMT
Not After : Feb 7 00:56:40 2025 GMT
Subject: CN=679c1fc8-611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:da:9a:6a:56:11:c9:f6:21:f9:eb:0e:0d:
39:77:7b:5f:02:02:6d:05:b7:70:8b:f7:9e:02:1d:
8d:63:c0:4e:95:c1:a4:5e:e3:4f:db:32:48:42:bc:
7b:cd:5e:e3:80:b2:87:b1:92:c4:45:66:08:46:bf:
32:bf:4d:d2:a4:5b:12:43:e0:f5:74:4b:de:57:eb:
e0:65:31:cf:55:ff:a5:cc:2f:f3:17:ef:2f:98:4d:
aa:de:fb:9c:f5:25:0f:bf:7f:c8:25:36:54:0e:d1:
ee:bc:48:27:3b:18:68:c2:6d:42:73:ed:9d:8c:c7:
31:df:ec:6c:31:5f:bc:b0:2b:56:46:08:7e:b9:3b:
cf:62:1d:e9:af:ac:d5:d7:af:9e:6b:ed:bc:2b:ec:
93:7e:70:c5:df:df:e4:f4:7e:12:7b:1c:b2:7c:31:
27:93:97:49:d3:30:46:01:61:ba:a2:60:93:89:a6:
6c:e2:c9:41:56:57:4d:12:84:0c:cc:01:1f:f7:be:
a7:2e:82:89:55:2f:77:a6:c3:30:54:2f:d2:b8:12:
6b:a1:37:29:f8:73:7d:09:c8:7c:2a:cb:95:91:20:
b8:38:a8:bf:31:82:f1:b9:15:b9:e5:4e:6d:0a:33:
98:6b:3e:24:29:cd:82:c7:28:8a:c5:9d:e7:69:1a:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:AB:59:23:9D:A0:61:E7:FD:3C:61:6C:10:D5:7F:E0:CA:99:CC
X509v3 Authority Key Identifier:
keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:05:03:74:7e:83:aa:ee:81:a8:39:a6:c7:c8:28:4e:cc:
f2:f0:36:f1:78:6c:a3:93:19:51:9c:35:4b:e5:dd:c5:c9:f5:
19:dc:61:01:66:f3:ee:ff:a0:59:60:0e:f0:1b:51:d1:e3:8a:
06:7d:bb:e7:0a:f2:a3:41:56:c3:80:82:2c:62:8b:d8:5d:3b:
72:33:ab:f5:e1:9a:88:f1:8b:eb:48:0a:bb:4e:28:ed:54:83:
c4:11:7b:d9:44:64:ca:32:67:e2:46:b5:c7:03:f4:ff:ec:40:
b7:9f:09:e0:bb:e5:cf:c5:ae:1b:09:42:ce:9f:2e:ee:03:92:
f0:54:91:fa:d5:3e:fb:81:71:75:75:6d:c1:70:c5:cc:30:4d:
df:05:49:70:63:6e:c8:4c:d1:e0:b3:86:66:f3:23:cb:6a:fa:
e4:e1:17:8a:1b:f8:50:e5:79:cf:da:5c:af:1a:67:9c:32:4d:
1e:15:b6:20:f2:96:c2:38:45:1c:6f:ac:c2:3a:56:74:b4:df:
02:f7:8f:d5:ec:a3:82:fc:db:67:fd:bd:ba:ee:2c:d8:4f:5a:
24:67:0c:5c:28:c7:76:a2:23:1a:e1:2d:e9:42:df:f8:91:4b:
63:cf:22:7f:10:3a:10:b8:19:10:a1:ce:4d:3e:ae:11:15:00:
48:ba:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:33 2025 by rpki-client