Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier: kDmbErSN/mlb+b4xDhAre572zYgkyp1AsuzOgnw8NuA=
Subject key identifier: 88:E8:85:19:8B:7A:09:ED:DB:30:67:39:E4:6A:34:79:54:E5:6D:C8
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial: 1C1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number: 5060
Signing time: Fri 31 Jan 2025 15:19:13 +0000
Manifest this update: Fri 31 Jan 2025 15:19:12 +0000
Manifest next update: Fri 07 Feb 2025 15:19:12 +0000
Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: UurRJwlUqB6/oGQUOARmJzozQBjRCWghnq3CNBz1TrM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7197 (0x1c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Validity
Not Before: Jan 31 15:19:12 2025 GMT
Not After : Feb 7 15:19:12 2025 GMT
Subject: CN=679ce9f1-a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:7f:7f:c0:7c:3d:15:23:a4:03:50:06:84:
a3:71:33:76:7f:14:42:ed:d3:54:5f:12:9b:33:66:
36:9d:f6:bc:d2:c8:6a:35:f1:bf:34:5d:8c:c6:63:
e4:d6:17:d7:df:71:c0:e5:39:c2:8b:39:53:9e:b0:
b4:95:58:71:2a:a5:4a:63:28:d8:4b:e4:2b:93:60:
35:74:6c:94:00:cb:5b:e0:5a:22:df:d3:21:66:bc:
10:a1:c0:7c:f6:f8:fb:e2:a4:82:b4:62:9f:19:0f:
ad:c0:bb:2c:f8:9d:61:06:a9:48:ca:4b:d9:29:25:
fe:3a:51:a9:5b:0e:26:da:49:7b:4a:e6:e9:a9:89:
69:c1:cf:6b:09:5d:e4:b7:32:da:39:65:6c:af:8e:
6a:0b:9c:50:c0:e7:5c:f4:10:72:27:3d:e0:d6:b2:
23:d8:7b:d7:66:bc:75:5c:32:1c:34:33:ab:18:12:
37:21:57:fb:10:3c:31:52:dd:9f:5d:5c:37:0c:3e:
c8:27:8c:c9:a8:a8:f2:15:b5:05:2d:73:c5:48:61:
e1:7a:d8:df:25:ae:99:4b:f5:b2:31:6a:60:bc:43:
1c:36:21:7c:e2:55:a8:6d:71:e0:ac:20:ce:74:83:
dc:b2:e3:a9:a3:cb:a2:74:3d:06:ee:68:3c:f9:a7:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:85:19:8B:7A:09:ED:DB:30:67:39:E4:6A:34:79:54:E5:6D:C8
X509v3 Authority Key Identifier:
keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:34:62:b8:e6:9a:31:01:11:18:21:a5:e8:07:69:f8:4f:
93:53:3d:82:e8:04:5c:60:4b:af:ff:15:31:cb:14:fa:fa:26:
8d:fa:f1:36:f9:ae:dd:7c:08:5f:75:df:cc:c1:d5:57:b5:c1:
49:20:59:c2:a8:77:21:4a:89:aa:ea:c2:17:a7:14:d8:93:15:
09:50:81:32:3b:2a:09:61:35:a2:28:27:c8:4a:40:3c:3d:62:
c5:74:3c:5e:fa:31:e1:eb:79:65:d1:d5:ae:89:98:e4:dd:a2:
cb:ad:c4:21:12:68:c4:23:52:e6:c5:94:29:01:b5:6c:7f:ba:
50:3a:eb:12:4e:c3:c1:c9:0f:22:b7:d0:7a:ef:d1:13:66:e7:
96:ba:4c:08:21:4e:7f:25:14:46:34:ce:75:fd:6c:39:4b:a7:
8d:b7:2b:e8:3d:4e:51:5d:18:64:95:c9:72:ba:92:d7:14:63:
78:46:8b:c4:f9:65:91:32:10:c5:3e:79:2f:4c:de:bc:2a:6f:
ff:f3:bc:47:2c:8e:e4:b6:ee:60:50:11:d6:c4:47:fd:44:df:
43:45:0c:f3:15:b3:f8:20:0d:b0:79:3b:7e:ce:f6:87:30:6a:
bb:7d:a5:aa:eb:b7:2a:d5:17:79:2a:e7:6c:42:f0:23:dc:70:
8c:2b:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:30 2025 by rpki-client