Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: 09iN9hWIsh6u80sK2ynb+q9R5Cu/+1rIphjoCxpF31E=
Subject key identifier: E4:91:7C:91:11:A4:1B:9E:AE:FB:07:D2:98:0F:0D:39:76:EA:1A:C8
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 06D3
Signing time: Thu 30 Jan 2025 22:00:09 +0000
Manifest this update: Thu 30 Jan 2025 22:00:08 +0000
Manifest next update: Thu 06 Feb 2025 22:00:08 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: 5YNK2pgrtJpekpJFoke3DfpZWxFhOhmm+ZPkEfrWKfw=)
2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=)
3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Validity
Not Before: Jan 30 22:00:08 2025 GMT
Not After : Feb 6 22:00:08 2025 GMT
Subject: CN=679bf668-38cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:9b:d9:71:23:c7:ee:6b:5b:e1:16:87:a9:
f7:d1:50:2b:66:d2:ae:78:db:be:8b:c3:9e:35:e9:
2f:84:f5:c8:64:63:bd:8d:c3:3b:69:fd:47:48:97:
1d:2b:6d:c0:00:0b:86:30:95:13:7d:ae:69:90:74:
6f:54:a6:9f:48:94:ca:04:d2:f1:bc:ac:79:83:19:
d8:b2:31:30:9c:49:e1:5d:e0:ff:0a:56:c8:bb:c7:
c0:81:44:d9:71:d2:79:cf:67:e8:0f:38:f3:d3:9f:
9a:13:c6:7c:b2:1b:fc:4d:73:ff:53:90:61:06:c9:
c0:ac:a6:0f:04:08:63:ee:54:54:c5:db:c1:d7:15:
fb:e3:ee:28:c4:1c:20:ac:77:b0:26:3b:17:37:fa:
18:d8:16:cc:60:d5:82:32:fe:65:eb:ee:76:66:f3:
da:b5:11:91:9f:b5:4f:57:cd:af:11:67:ad:7a:47:
0a:2d:7f:99:f5:16:a7:e9:2b:a3:1f:40:42:c2:4e:
7f:61:f5:c2:c4:34:f1:2c:bf:7a:5b:20:d5:bd:c4:
b8:22:c9:87:2c:ef:e3:a4:f9:15:50:9d:87:4a:2a:
df:b8:0b:a7:69:5c:06:39:ce:5c:9e:fb:b4:47:8a:
e9:0c:2f:17:c1:29:5b:0e:76:d1:74:ac:99:ea:08:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:7C:91:11:A4:1B:9E:AE:FB:07:D2:98:0F:0D:39:76:EA:1A:C8
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:96:68:8c:f6:76:16:09:3c:29:42:a6:84:5e:57:03:1f:
0a:43:69:56:90:fb:90:36:5b:9f:23:86:b2:29:c8:0c:09:e4:
bb:f9:17:1a:42:8c:59:87:a3:6c:0e:60:b1:60:13:fd:cf:a0:
af:f5:5f:e8:0a:de:e6:82:c8:d4:5b:16:ea:f3:19:84:23:82:
d8:b8:ee:55:76:02:5b:63:60:13:c5:5f:88:a1:e4:a7:cc:6f:
2d:bb:ef:af:52:d5:84:1a:55:85:3e:33:c3:da:36:f2:82:5d:
e4:08:bb:46:02:09:75:08:b7:b3:d3:38:51:ea:6a:e9:4c:e6:
56:55:85:87:81:53:e5:c0:8e:2e:86:4b:be:63:8b:40:ac:2f:
11:08:34:a0:2d:1d:c6:77:8f:c2:47:d0:97:b9:67:52:ad:f4:
0e:c1:27:18:31:8e:8a:5b:e5:5a:0c:b2:e2:aa:ab:8e:1a:32:
76:7f:b4:3b:47:19:bd:a0:d7:9a:14:ae:1b:98:f1:81:42:2a:
00:41:04:da:f4:2c:cc:9c:3d:5c:18:d5:03:48:6f:7a:8e:c8:
7c:fe:7a:0d:a9:6a:ae:f6:01:50:8f:92:4a:2f:3b:93:06:08:
8a:05:b6:d8:d6:82:78:d1:dc:9f:61:d4:aa:7f:f8:f6:c2:da:
52:b5:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:27 2025 by rpki-client