Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier: 4EYOtx/Fnp7eIIaqAoJGycVz3rQlRi/pKrtdjlAxECY=
Subject key identifier: 0F:3C:FA:53:BB:56:DB:98:B4:B6:A8:0C:20:48:79:7F:9E:AE:4F:61
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial: 071C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number: 070C
Signing time: Thu 30 Jan 2025 21:54:48 +0000
Manifest this update: Thu 30 Jan 2025 21:54:47 +0000
Manifest next update: Thu 06 Feb 2025 21:54:47 +0000
Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: pVbovje4C1N9dXYWnE56gWXZBtFtXCsjtcxaQIyYa2w=)
2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: nYyMrSqjuG22IDygJd+6M5EAOCSTkJYxZab7RxnoUIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Validity
Not Before: Jan 30 21:54:47 2025 GMT
Not After : Feb 6 21:54:47 2025 GMT
Subject: CN=679bf528-b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:1f:c4:fd:24:fb:cc:bb:ec:b0:3d:85:7e:
5d:62:08:11:1a:ff:d2:7b:f6:c5:7d:96:fb:77:0e:
06:5a:e8:0c:e9:79:4f:6a:60:97:11:81:eb:07:b7:
6e:70:7b:30:34:30:fb:e2:2e:0f:c6:26:1c:8c:4c:
96:ab:ea:d3:a2:71:4f:af:ed:3a:c1:bb:07:01:e5:
6c:2d:3a:0c:e8:c2:d1:91:b9:98:4f:1b:cf:03:b8:
56:62:48:7f:2b:a1:aa:55:6a:16:08:08:2e:84:31:
9b:e9:23:61:6d:68:29:60:c2:11:6c:4f:90:78:ae:
a6:f4:99:d0:27:bb:b3:fa:4a:5f:1a:5b:45:b6:5c:
bb:81:73:a0:be:d6:2c:b4:ae:ee:a4:7f:ba:77:a2:
d1:7f:6b:42:2c:1e:ae:7a:23:ac:55:86:2d:15:2b:
9f:0f:98:d3:8f:a2:bd:a4:b1:dd:9c:8b:b1:ea:3f:
fb:f4:a4:30:bb:61:8a:bd:a5:73:01:4c:ec:57:52:
a0:4b:53:7b:1a:9d:cb:21:cf:20:27:90:8c:64:0b:
72:ea:76:4c:1c:a2:98:ed:d5:61:f3:aa:9b:8f:5a:
e8:3d:f9:b3:6a:6a:26:5c:47:e2:44:fd:3c:9b:84:
79:cf:2e:30:c4:11:20:41:01:21:c3:c1:9b:5e:e3:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3C:FA:53:BB:56:DB:98:B4:B6:A8:0C:20:48:79:7F:9E:AE:4F:61
X509v3 Authority Key Identifier:
keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:50:5a:e5:6d:9f:17:73:04:13:78:8a:a4:b0:80:25:50:6e:
23:b2:d8:61:59:41:5b:c2:4e:21:2c:3f:27:c2:09:cc:3c:2e:
95:17:b9:6e:e2:f2:35:e7:a9:bd:01:af:8b:9a:83:23:6a:07:
8a:6a:8e:f7:6c:1c:9e:a0:9d:06:20:51:28:47:3b:30:e3:ba:
b8:c2:8a:36:01:4c:a8:1b:ff:ee:a2:61:74:08:a6:3b:58:47:
35:c7:39:05:eb:a0:e8:56:7e:36:4c:eb:ea:50:1f:89:80:02:
df:4c:7e:d0:2b:eb:b9:95:0c:76:51:b1:ac:07:aa:64:78:54:
9c:1b:38:48:db:18:ee:a5:af:7a:15:4a:88:6a:b4:b0:13:42:
16:19:09:a0:4c:c9:20:ac:84:c2:77:a4:fc:71:0f:12:6f:45:
17:9c:6f:ff:06:d2:f8:65:9f:01:d3:49:77:a4:56:1b:09:00:
7b:e6:ac:97:d9:0a:9b:70:fb:49:19:cd:91:1d:f7:30:45:54:
72:c8:0b:f9:4b:f9:f3:d1:0f:ce:0e:ee:85:a2:f2:55:09:91:
08:99:8d:6f:51:83:29:6b:c2:a5:98:a4:94:53:df:70:7d:9b:
de:27:e5:91:fe:4d:6f:2d:b2:b4:72:4f:12:f2:83:6d:15:c9:
a9:1a:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:21 2025 by rpki-client