Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json)
Hash identifier: xImcxvf1zlN4vIvtpIujIFgbsFy/1o37x+dvzbc6Ns0=
Subject key identifier: 26:40:FD:FB:2A:2A:BC:F0:D4:56:77:73:22:66:09:39:A9:51:9F:5B
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
Manifest number: 031A
Signing time: Fri 31 Jan 2025 01:19:24 +0000
Manifest this update: Fri 31 Jan 2025 01:19:24 +0000
Manifest next update: Fri 07 Feb 2025 01:19:24 +0000
Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: EbBdwLJ+Z8HaANa1mueHp7dj05xdcYpj8q8ue0rFF64=)
2: BA8AEE92855911EF98B6893DC4F9AE02.roa (hash: WaRPndP38AV1hNfFujEh/fXC/q58PMXeV99u5Lpy6cE=)
3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: L50TXgQGGNXzGsHqoJEimM4jJEFNI8bEmFRT7Mc7Ypc=)
4: 75A75BEA797E11EEB4FD0975C4F9AE02.roa (hash: HC3L7DwzvREUVNA/r5ctsM72LRWw4/Ml5kTbPPiUYrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Validity
Not Before: Jan 31 01:19:24 2025 GMT
Not After : Feb 7 01:19:24 2025 GMT
Subject: CN=679c251c-fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:3e:4a:47:a0:bd:0b:a1:e8:49:df:52:8c:
2b:6e:1f:59:6f:72:b5:db:93:e5:c5:90:d0:69:3d:
7e:43:dd:66:2f:87:0e:54:91:ad:01:9d:eb:97:49:
77:7b:07:bf:e1:69:48:64:c6:56:49:a8:e4:fc:be:
2b:32:8a:69:b4:6a:0f:7b:e2:62:2c:1f:4f:99:69:
91:cf:8c:5e:63:36:a0:c9:1c:96:56:9e:12:b3:32:
8c:6f:72:c9:1b:71:81:38:15:4e:f5:99:79:60:22:
b0:e1:a0:b5:39:4f:58:70:78:cd:ea:6f:8b:41:bb:
ec:78:1d:e5:6f:c8:7b:f8:e2:59:38:3a:2f:67:d3:
dc:7e:37:79:52:cf:10:be:f5:0a:c8:4c:73:e0:8e:
67:50:36:b4:85:0e:f7:59:94:e7:e3:ed:e5:34:e8:
79:b5:a4:17:d7:8e:ae:76:00:01:aa:74:94:81:5a:
b7:e3:ea:af:f0:a5:44:44:a0:de:12:62:51:83:ae:
22:98:66:6a:b8:b4:28:c7:6b:70:6b:05:31:8d:46:
1a:cc:a1:e2:4c:c7:d0:48:4f:b9:56:ab:16:3e:98:
be:41:6c:8e:93:9d:bf:ab:58:de:47:ae:14:94:f0:
31:6e:4b:5a:ef:57:b9:97:57:23:66:a0:15:25:d5:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:FD:FB:2A:2A:BC:F0:D4:56:77:73:22:66:09:39:A9:51:9F:5B
X509v3 Authority Key Identifier:
keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:09:1a:40:88:b6:e7:6a:f7:0c:f3:7e:cf:c9:73:d1:bb:a6:
4d:de:3d:6c:aa:8f:4a:f2:5b:84:bb:fc:c4:68:14:61:d3:7e:
e1:f2:d1:0c:19:c3:cc:c8:72:1a:94:2c:75:89:8c:7c:17:fe:
08:a2:47:64:d9:38:f1:9f:b3:85:3a:26:46:97:f4:4d:c1:06:
44:f1:a6:c7:41:11:5d:bf:7d:86:81:e7:8c:76:b1:cb:df:c8:
32:cf:a5:92:ee:ec:9c:70:98:ad:4c:89:8c:bb:60:bf:0c:d6:
8c:7b:1a:f0:b6:eb:2e:f6:58:65:f7:5c:ae:0c:78:df:63:b9:
2e:82:8e:5c:8e:61:73:03:c4:18:31:d4:89:8b:ba:66:12:90:
ea:a6:7d:65:cd:4b:80:cd:db:67:35:b2:ac:9c:3e:d4:91:0c:
0e:82:f3:6b:b9:61:d9:b2:4b:1f:c6:3a:c1:b1:ad:fb:92:09:
d8:b1:8c:77:33:66:20:29:66:ed:d9:2a:ed:11:a0:63:32:08:
31:eb:fb:3f:03:28:80:4a:66:6b:ea:2f:62:91:52:86:7c:e0:
74:ef:3f:59:c4:1f:35:c9:2d:2f:1b:69:29:cc:7f:f6:04:d6:
02:96:e0:7d:5c:59:dd:57:f1:e3:41:61:4f:57:2a:13:a4:5f:
42:02:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:37 2025 by rpki-client