Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File: vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier: oM7NJDeS6M5lmzsdijiWa0J6XUofj5Gll5JZtqjkNR4=
Subject key identifier: 3B:B5:E2:A1:0C:D4:BF:8D:F0:2C:02:A2:3B:A1:88:6A:98:AC:34:24
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer: /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial: 346A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number: 345A
Signing time: Fri 31 Jan 2025 14:58:29 +0000
Manifest this update: Fri 31 Jan 2025 14:58:28 +0000
Manifest next update: Fri 07 Feb 2025 14:58:28 +0000
Files and hashes: 1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: kG9dvL2WEbOyGSu3/+O0/EIDXbWrjGDMQpFyDL09btM=)
2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: rK0c8XECyvN9kLfaJ8Yz0Teq8RiIt0v2rBtEKSM98ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13418 (0x346a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Validity
Not Before: Jan 31 14:58:28 2025 GMT
Not After : Feb 7 14:58:28 2025 GMT
Subject: CN=679ce514-4b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:40:4b:77:c5:17:06:ae:0f:c3:32:01:4d:
91:18:2a:e1:34:28:10:07:e5:9b:89:8d:15:1b:d2:
f9:89:b1:71:d7:e6:e7:02:9d:47:b8:44:b6:15:ea:
ae:99:ca:42:01:a4:39:d6:e5:24:10:24:2a:d5:3a:
9c:9d:7b:b7:54:f7:1b:03:d6:71:09:7d:ab:a3:a3:
f1:cb:cf:0d:cc:43:30:23:cf:6b:0a:46:c1:8c:b8:
92:f0:39:3b:50:00:3c:6c:34:1f:6f:21:d1:a5:38:
89:b0:e1:08:0e:7d:30:0e:44:99:6d:36:17:be:90:
87:c5:27:51:40:c4:6d:14:99:0b:d4:4e:9b:ed:de:
ec:80:82:53:68:5a:c2:43:fd:34:ba:16:5d:25:d5:
1c:51:0d:92:b2:a6:f5:dd:b8:97:5d:ab:51:98:53:
71:af:88:81:cb:ac:1e:7e:a1:4d:66:4e:77:85:ae:
fa:70:ed:83:10:0e:6b:6d:78:54:5a:e3:f7:b0:6c:
11:8c:90:42:58:d1:25:e7:3b:ab:86:7d:47:db:95:
f0:6c:60:c6:dc:ec:ce:59:2d:6c:5f:05:c2:ea:cb:
81:14:28:38:47:c5:f2:7a:09:f6:01:e4:62:9f:b1:
67:63:d5:d5:2a:12:d4:5c:fb:7a:f1:90:26:3a:4a:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:E2:A1:0C:D4:BF:8D:F0:2C:02:A2:3B:A1:88:6A:98:AC:34:24
X509v3 Authority Key Identifier:
keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:1c:3c:88:a6:36:0d:0d:7a:46:8b:06:08:eb:9f:a6:17:
67:a7:ad:6b:ed:a8:0e:04:6c:29:36:c3:b0:79:80:11:00:ec:
ef:59:0d:a1:d5:34:a0:58:90:a0:bf:dd:56:a6:04:6d:47:8c:
da:3f:e4:e4:39:8f:3d:8b:0b:12:49:ea:a1:d7:a8:b1:c1:8d:
9e:21:7e:7f:dc:5c:62:59:74:29:20:b5:28:7f:6e:ad:f2:ae:
0a:f7:f0:10:7f:91:fd:fa:08:e6:7c:2b:7e:0a:b4:85:3f:bf:
5b:c8:93:53:67:4f:ac:d3:d3:22:e3:c4:3d:a6:6a:f9:2b:31:
28:29:e5:27:40:5d:53:f9:7f:6e:77:0d:65:81:20:cd:f2:db:
00:9b:d6:bb:4b:7a:d1:fa:51:b8:f1:10:e2:57:1e:e2:93:5f:
ac:27:ec:f6:31:62:eb:e0:f0:83:f8:f1:c3:13:24:94:d5:a5:
57:8c:47:12:a8:68:fd:a2:53:70:a7:93:6e:d7:75:81:75:c8:
45:19:c9:c2:b4:c9:ad:d6:a7:17:f4:d7:a7:c5:f6:30:fc:72:
dd:8c:0f:9b:ce:aa:c4:03:36:ad:1c:64:30:cd:09:2d:97:3c:
e9:0b:5e:8c:3a:23:ea:11:ed:92:fb:73:98:7d:b0:ab:06:a0:
86:19:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:20 2025 by rpki-client