Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json)
Hash identifier: 2zX7K0dGi/raoVpjiylwkOGwzq2V23iFyYZPNpLDjiE=
Subject key identifier: C7:6F:FE:8B:F2:3D:B2:0E:D2:90:37:64:42:99:5E:E5:5D:59:1C:90
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
Manifest number: 0129
Signing time: Fri 31 Jan 2025 03:46:09 +0000
Manifest this update: Fri 31 Jan 2025 03:46:08 +0000
Manifest next update: Fri 07 Feb 2025 03:46:08 +0000
Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: 8Of1mrvNetRksSEmWUqA01zkD0SAxbKkwws0JiiRHt4=)
2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: GBMicqxqWJGllSCeNaCG3fJSPAOHIQZXCyZq5HgUNnQ=)
3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: Zdv05MwdqY6/OABs/FWqaeUs/E7iyDc64LmUs67RP4Q=)
4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: HITqvsOV8NXEevbID5wWbEGFWpToE66JO9d/dCgPkiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Validity
Not Before: Jan 31 03:46:08 2025 GMT
Not After : Feb 7 03:46:08 2025 GMT
Subject: CN=679c4781-d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:ed:01:a5:3a:91:b4:32:f4:66:1d:93:60:
63:ea:80:cf:9b:14:0c:f4:f3:e2:c3:70:35:02:9a:
ab:2e:a5:35:e0:d0:22:15:59:93:6b:ed:50:9c:f4:
1f:45:f4:9f:eb:f9:7a:18:82:91:bf:e4:04:85:6c:
4e:1c:57:ab:aa:4c:1c:6e:58:d0:6a:a0:53:81:9b:
74:1f:1e:50:b7:cb:2e:bc:66:01:19:8f:f1:88:65:
8d:32:c4:14:0c:4a:1a:80:01:68:35:ce:39:14:69:
00:d5:40:ad:09:03:0d:30:c0:e8:ff:bb:1a:e1:b6:
44:bd:8a:15:49:d3:6e:ee:0c:55:ef:16:9b:4b:9a:
3d:d9:d0:62:6c:55:b2:d7:db:2e:b6:6d:66:29:55:
26:ca:ac:75:7c:d6:7f:ef:16:da:f5:2a:3e:de:1f:
70:72:3e:32:61:58:60:b4:81:fb:13:c3:a1:b0:d3:
d5:52:33:6d:5d:fd:31:4d:e8:90:4c:de:4c:26:54:
e7:ab:85:a8:a5:06:a4:2a:e2:c7:45:0e:a7:40:11:
24:15:84:66:68:8b:ba:f5:ee:6f:e4:1e:12:79:dd:
78:32:52:13:b7:9f:f5:e5:72:0b:83:42:ef:6d:b6:
93:e2:ae:8c:81:45:24:55:d3:f1:10:d3:69:c9:fb:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:FE:8B:F2:3D:B2:0E:D2:90:37:64:42:99:5E:E5:5D:59:1C:90
X509v3 Authority Key Identifier:
keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:eb:e2:77:7f:91:f5:60:9d:07:72:f5:6f:b5:27:72:c1:a6:
24:8c:93:0f:6d:21:58:2c:a4:af:6c:a1:74:bb:c7:68:e5:8e:
21:0d:60:12:cd:13:43:96:73:a8:f9:c4:fe:1b:3d:9b:e8:b4:
e8:e6:13:b1:9b:32:e7:b1:03:71:a1:90:7d:5c:27:cb:8e:13:
28:2c:7e:7a:c9:59:94:60:78:e7:44:a1:24:32:c0:8f:50:c4:
fb:78:fd:df:20:d6:7a:5e:36:a6:ba:c4:69:c9:4d:48:23:db:
4c:9b:98:6c:3a:8a:bb:fe:48:8a:af:2c:89:d2:ce:44:5c:27:
f6:ef:35:8a:15:41:09:fe:2d:26:73:5d:86:89:60:7d:e4:5f:
da:fc:20:6f:51:11:72:5d:9e:54:26:f0:f5:6b:89:66:1d:62:
e2:5d:ba:05:e5:33:b9:52:5d:87:67:14:e9:f4:0a:c3:a8:01:
4f:c4:71:f5:b0:2a:70:6a:1f:a9:11:ad:cb:11:46:5f:3d:4b:
2f:f9:59:f9:04:d7:95:98:51:2c:dc:76:87:ce:91:b3:99:d4:
e2:34:e7:59:e1:27:6e:98:4e:a5:93:c4:29:27:b6:d5:4a:92:
7b:06:04:4b:95:d1:4f:b0:d5:7c:44:0a:9c:19:6f:f1:aa:3d:
aa:0b:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:21 2025 by rpki-client