Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier: Hnr0R5K7m5FzML4OYMsOiKUE1k12I0ucIbb5LHL/tyM=
Subject key identifier: 94:D8:31:8E:A4:66:1F:53:4B:F2:1A:FE:B9:ED:98:A6:C3:18:CF:92
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 050B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number: 0501
Signing time: Thu 30 Jan 2025 23:41:07 +0000
Manifest this update: Thu 30 Jan 2025 23:41:07 +0000
Manifest next update: Thu 06 Feb 2025 23:41:07 +0000
Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: 9oDEUaP4EQwaT8p/RWUJd8apDDA8le97ktS2EyCDo0s=)
2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=)
3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Jan 30 23:41:07 2025 GMT
Not After : Feb 6 23:41:07 2025 GMT
Subject: CN=679c0e13-bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:dd:28:eb:ea:b2:0b:e1:24:b2:e5:2f:62:
c6:80:1b:4b:72:ef:19:71:d9:3e:05:fa:3d:74:44:
3a:19:a4:a8:04:89:bb:91:cb:ce:95:8d:1d:98:38:
c3:99:04:51:47:3d:b2:b0:6a:e8:98:bf:78:50:41:
e9:6b:20:da:3d:8f:d1:3b:13:4c:53:e3:01:ae:e9:
be:25:5b:5d:6f:de:d6:31:20:8c:a5:d6:be:4d:21:
b3:b8:e5:64:7c:27:2e:e3:9c:c7:a3:54:8d:2e:a8:
6a:2c:b7:4a:9e:c5:45:21:f4:57:7b:71:54:6d:6d:
b5:b9:d7:7f:0f:ef:e2:7a:85:d7:78:ad:97:66:6f:
37:c0:9e:33:3a:b0:36:36:ab:05:c7:69:77:a9:bc:
90:56:d1:57:c4:a8:a6:9b:6b:b8:24:c0:2c:55:05:
7c:cd:fc:77:12:6d:97:4d:53:75:a1:85:68:dc:1d:
db:af:76:3e:14:06:73:36:19:2c:4b:61:ae:af:67:
69:85:22:07:f6:bd:6f:46:b5:17:d3:bf:8d:4d:7e:
5a:13:f1:9f:ec:94:a6:a5:08:17:7e:86:8b:e1:22:
b3:04:9f:9a:b4:c8:96:9d:b8:09:6f:04:4e:eb:4c:
fe:75:32:f9:a4:28:8d:ac:22:cf:3c:c5:12:c6:be:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:31:8E:A4:66:1F:53:4B:F2:1A:FE:B9:ED:98:A6:C3:18:CF:92
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:97:c7:7c:bb:b6:35:ba:49:bd:1e:1a:fe:98:53:ae:43:6c:
c6:7e:ea:0d:3b:2e:16:71:e1:b9:f1:01:9b:f6:34:1b:e0:48:
48:5a:82:e8:39:21:d6:b9:da:3f:14:e6:af:8e:6f:a7:c0:21:
87:64:df:3d:62:61:f7:09:e5:98:4d:f3:d5:22:2b:2f:c2:e8:
e1:93:75:4d:b0:7e:86:d5:7a:18:2e:e2:f3:45:7b:90:14:d1:
c7:cb:70:c4:b2:42:52:9a:3d:72:6d:19:ac:49:85:c6:74:ff:
4c:ce:64:14:7b:99:87:bd:ee:a3:74:b8:61:71:77:b1:e4:3d:
4d:dd:d4:9b:55:fb:1e:4f:db:50:5c:e6:e0:31:6f:8a:48:75:
83:f3:a8:9a:a8:15:bf:ac:3f:f2:2c:8d:0b:97:a8:20:fe:69:
9b:4f:ec:d0:2d:b4:8d:f8:7d:d2:ae:00:ca:a2:4c:9c:5c:85:
98:3f:ed:df:a8:db:25:1d:10:3a:b1:15:c5:08:95:e9:1a:56:
e6:08:69:0e:d6:66:15:e4:c3:d8:f7:3c:c0:6d:a5:66:e4:b6:
a2:3d:5a:dc:4f:db:4c:5e:44:1a:8a:5b:2a:2e:a4:19:71:16:
eb:b8:b6:07:28:e9:f1:e6:9e:52:6a:9f:b5:5b:d2:75:53:82:
9b:2c:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:57 2025 by rpki-client