Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier: UNg+YUrfO2U+HSV2R61nTNuOV1alZ9wD/qrpyjSoZUM=
Subject key identifier: CB:83:C9:42:3B:54:71:58:0F:B7:AF:84:D8:9C:0F:87:CC:46:D3:F1
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial: 0443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number: 043D
Signing time: Sat 29 Mar 2025 00:31:53 +0000
Manifest this update: Sat 29 Mar 2025 00:31:52 +0000
Manifest next update: Sat 05 Apr 2025 00:31:52 +0000
Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: MVJYmcuAiqRbeR/8WRl7616EPRGqvTJQvzYWzDfD09E=)
2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VVFFKCHYbosvaaLrPx2vqSUqYAflv5w/HG528t1OXHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEBFF
Validity
Not Before: Mar 29 00:31:52 2025 GMT
Not After : Apr 5 00:31:52 2025 GMT
Subject: CN=67e73f78-9114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:b5:0f:23:e1:05:a4:e3:91:d3:3e:45:23:
a1:86:f3:9f:2a:1a:ae:2b:25:d3:fb:fc:96:b8:cb:
58:f4:90:df:6c:f5:a1:2d:a6:99:1a:93:31:28:51:
10:f4:af:7e:f2:42:f3:c9:bb:a3:a0:f0:4d:56:da:
0d:b6:df:18:9f:e8:a2:c9:77:60:8c:34:57:15:33:
2f:3e:51:26:fc:3e:13:1a:37:ec:87:8f:d7:a9:85:
d5:4b:75:85:85:a7:12:ee:f1:8d:0f:37:1e:f2:25:
3a:13:16:0b:ad:07:af:56:a5:af:89:7e:d6:d5:d9:
9a:09:71:67:85:5f:04:b4:32:ad:b4:f5:57:66:f2:
4c:d4:6e:36:8b:65:43:d8:01:a1:19:6a:22:bc:c8:
4d:5b:f8:03:06:ad:a7:eb:9a:e9:1b:ee:b4:54:72:
cc:a5:1e:b8:a9:ed:07:b3:e9:da:af:95:c4:28:07:
05:8c:97:5e:d8:ed:3d:67:bb:7c:c3:a8:72:57:84:
da:91:e0:3a:6e:ff:8f:ff:06:97:dd:1c:1a:aa:a8:
80:db:a5:48:70:e1:63:03:69:de:2b:18:3f:64:b0:
a0:55:a2:6a:83:3d:51:35:ed:35:ab:3b:12:bf:56:
a9:6f:33:81:48:48:dc:48:04:3a:21:b1:87:5f:42:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:C9:42:3B:54:71:58:0F:B7:AF:84:D8:9C:0F:87:CC:46:D3:F1
X509v3 Authority Key Identifier:
keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d3:f0:fa:05:b5:31:41:0e:a9:49:74:99:dc:36:b6:93:36:
e3:1d:fa:55:51:0f:d1:25:b8:f2:de:7a:4e:d0:4d:38:33:b9:
51:54:b3:5f:c6:7a:06:d9:77:e4:09:60:9f:33:73:3c:47:55:
62:c4:f3:28:a4:01:d2:0c:da:7e:63:c1:a3:ac:f8:a3:90:7e:
fc:c2:0c:0f:ea:e1:9d:f5:78:68:7b:f8:95:cd:9b:61:22:88:
31:bf:df:a8:f3:62:fe:9c:53:09:3d:f1:f9:04:84:73:09:a5:
8d:d3:d5:3d:f9:f5:89:40:aa:a1:5a:44:e5:16:12:51:44:f5:
e4:6b:4a:10:8e:0a:0a:a5:9a:3e:b9:7d:bf:d7:89:4b:90:2c:
79:ce:f6:36:90:d0:b2:38:c7:21:1f:48:44:b9:86:3d:73:24:
4d:03:32:a0:9f:58:e4:c7:33:45:e3:b9:3e:0e:3c:52:3f:94:
43:ec:73:85:0c:72:a2:5c:42:12:d4:8d:c8:1e:c7:d2:3e:fc:
50:76:e1:77:2a:97:ea:b2:57:22:ab:e6:77:23:50:d5:35:4a:
71:3c:e8:e9:c6:64:9e:23:65:43:15:de:9b:cf:b8:6d:0b:06:
51:fc:a1:46:55:c7:ed:e6:e6:87:e4:95:fa:50:da:c1:26:06:
4f:7c:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client