Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier: xaU8Pi8MCuDrXWwSPfAAIT92/TCudpBop5Lao8IcV3w=
Subject key identifier: 41:5C:EF:7A:12:FA:41:FC:AD:0C:DD:D1:3E:FD:8B:4C:68:AE:E1:5F
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial: 0C06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number: 0C00
Signing time: Fri 31 Jan 2025 18:28:46 +0000
Manifest this update: Fri 31 Jan 2025 18:28:46 +0000
Manifest next update: Fri 07 Feb 2025 18:28:46 +0000
Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: tdd7V82j3k5py24m5LPZj/TWjHoD8gUVozTR/HrMo7Q=)
2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Validity
Not Before: Jan 31 18:28:46 2025 GMT
Not After : Feb 7 18:28:46 2025 GMT
Subject: CN=679d165e-635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:92:94:d2:78:50:0b:93:9b:fa:68:ee:28:
c4:25:23:0c:91:6e:c0:44:d7:73:4a:0c:35:c0:4f:
aa:37:65:30:93:0d:36:01:a5:a6:af:65:fc:e8:41:
c8:fb:57:f8:cf:05:19:de:1a:96:e8:f1:fc:cf:52:
11:38:50:f7:53:70:e6:74:1c:e7:5f:58:3c:19:57:
52:2f:d9:b8:b0:6c:92:1c:ac:a4:b8:97:a2:5c:12:
d2:70:2d:97:cb:d7:2e:b7:64:77:26:cd:37:4b:c1:
a1:a1:0e:a4:d7:d1:b2:25:95:75:a8:5a:e8:af:6d:
2e:e3:39:34:83:d4:42:d0:e2:ba:e1:6d:7a:c6:b2:
41:bd:64:61:63:2e:be:c1:e8:25:d7:1c:2e:1f:eb:
8e:06:e7:1f:75:d2:1f:49:9d:96:c9:17:61:cc:0d:
a7:03:92:26:9f:ee:a0:f3:c1:22:2a:da:c5:30:97:
16:f9:6f:61:d3:92:1a:59:03:06:a3:f4:cf:0e:be:
94:db:72:cf:4e:6a:4d:3d:69:80:b1:52:8d:fa:46:
69:a3:ef:a7:9e:19:08:1d:ad:43:e4:75:f7:53:7a:
29:59:60:45:36:bc:16:00:d6:2e:a2:aa:f4:ac:67:
fd:b9:5e:9d:5a:30:3d:54:ff:ed:f5:89:6d:ea:d0:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:EF:7A:12:FA:41:FC:AD:0C:DD:D1:3E:FD:8B:4C:68:AE:E1:5F
X509v3 Authority Key Identifier:
keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:76:f9:15:90:0b:21:a9:cf:0b:3b:00:f5:b3:ed:30:34:be:
4f:83:54:87:cf:e4:ea:e1:44:a3:d9:e6:c1:08:ff:c7:b4:d9:
c8:aa:71:e1:fb:66:08:47:01:a2:c0:2a:da:dd:9a:02:d9:53:
1e:16:21:fd:d7:a6:b5:cf:1b:c0:36:0d:3f:2e:b8:d8:b5:db:
74:3e:bd:56:81:b1:39:1b:c8:59:7c:08:34:fc:aa:d9:f4:d2:
8b:d5:b0:59:5d:3a:e3:b7:10:95:b2:73:62:04:9d:8e:fc:6b:
be:5b:bd:a9:8c:03:7c:33:8f:f5:e4:91:0a:df:27:b8:46:8e:
a3:e1:c9:3f:99:0f:be:1f:e5:6c:14:44:8d:77:40:20:93:db:
92:43:41:4b:c1:82:c2:d7:93:01:00:d1:ee:0a:bb:3c:cf:60:
36:84:d0:0d:87:b7:3c:77:ba:0f:a9:65:ff:49:54:7a:b1:3e:
76:be:05:92:99:cc:83:7e:11:78:e4:35:8e:f8:ff:f1:b5:36:
71:dd:08:80:55:33:08:10:cc:f3:93:f8:59:b9:76:fc:bc:68:
f3:f5:bf:95:d6:7c:79:00:22:59:c0:1a:20:ed:5d:c3:1f:c8:
8c:f4:eb:1b:6a:7e:dc:8e:49:3f:00:fb:47:7e:59:b0:09:73:
21:2e:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:10:52 2025 by rpki-client