Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: a1aYRPdzzGL3IE/Ua2vN+QIma/DSwD1shcAokKjehIg=
Subject key identifier: 63:C7:35:4A:18:D7:24:D0:10:D2:6C:26:9F:0C:01:5C:6B:CE:AC:79
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 0201
Signing time: Fri 31 Jan 2025 02:11:30 +0000
Manifest this update: Fri 31 Jan 2025 02:11:29 +0000
Manifest next update: Fri 07 Feb 2025 02:11:29 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: r9jm6J801sb9zLQrqx8okM7G8sGr3w+jTz19vIRldMA=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: IKMSMoP4FZHtjcEKMqFnrIo38xV8+ALkLijv5FtXb3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Jan 31 02:11:29 2025 GMT
Not After : Feb 7 02:11:29 2025 GMT
Subject: CN=679c3152-c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:ec:c1:90:56:65:a9:d2:c0:ad:ba:f1:7c:
b4:a7:25:0a:5e:3a:64:5a:45:e2:c6:46:58:4e:94:
82:c9:d3:c7:78:56:fa:44:16:52:2a:3a:e9:f7:d6:
29:ef:39:d7:af:ce:44:e4:98:9f:be:c9:a5:aa:a9:
69:4d:41:09:01:20:79:a6:c9:34:9f:f1:65:0a:25:
2b:87:6b:62:ac:1c:d9:68:73:ee:c6:82:0c:90:e7:
8e:3c:15:1a:f5:d7:a1:cb:fd:77:79:47:8a:2d:91:
ba:89:52:4b:d9:c3:f9:fb:b7:55:05:86:0d:f2:ea:
08:b8:3d:1c:85:65:9d:34:31:a4:11:62:01:0b:e0:
e6:51:01:e8:40:16:8a:e9:a1:8a:21:aa:f8:7d:35:
6a:58:b5:33:5d:77:80:4a:13:91:1c:0d:8a:ee:d8:
a7:84:f4:cc:84:0e:26:5b:4e:d7:ce:98:45:19:c1:
47:1b:d4:c1:03:a8:f2:95:ef:21:d3:13:87:75:8f:
45:fd:74:61:e3:c5:d7:78:81:3c:25:b7:7b:a8:4c:
89:95:72:54:f3:fc:40:83:e3:3f:cc:98:f5:1c:63:
81:9b:3a:af:08:17:ee:da:3c:90:96:5c:e3:14:44:
17:cd:12:14:89:32:44:e1:8d:1b:62:9a:35:88:4a:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:35:4A:18:D7:24:D0:10:D2:6C:26:9F:0C:01:5C:6B:CE:AC:79
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:39:df:94:e8:f3:57:a4:9e:e5:54:e3:56:3a:44:2b:b1:99:
71:79:d3:85:5a:d8:1a:6a:df:3f:73:a4:60:49:45:26:ed:33:
e4:70:94:ba:b5:76:04:cd:a7:ef:bc:8b:a0:f2:d3:2f:6b:5e:
6b:1f:0a:1f:97:44:d3:79:23:50:86:5b:0e:ba:ed:d3:f9:0d:
db:56:d5:62:33:e1:3f:b0:4f:26:b4:85:35:f1:1a:dc:a2:b8:
b9:82:8a:35:ef:16:e3:3c:2f:0b:b9:fd:93:19:e7:6d:b1:99:
cd:86:53:d9:13:29:44:d4:53:fb:0a:30:2d:8d:c2:9f:22:29:
d8:1a:f9:20:ed:e3:07:37:17:f0:f9:8f:56:bb:cc:21:00:25:
64:e1:54:42:67:8e:ec:80:ed:cb:af:28:c1:25:9f:37:a8:ce:
dc:d6:da:72:83:64:26:48:51:6b:6e:f3:df:67:bf:19:43:e2:
47:93:0f:43:d2:ec:34:e4:d5:a1:05:86:46:b2:f8:13:aa:39:
50:08:dd:ea:1e:c0:70:47:d7:6e:ba:2b:92:a3:25:74:0f:4f:
bb:e9:19:87:14:58:d4:a3:46:39:b1:53:fe:b2:e6:3f:7b:3a:
5a:57:9f:cb:9f:03:62:1f:ac:a9:dc:87:8c:b9:59:a1:52:a2:
ef:e6:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:48 2025 by rpki-client