Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json)
Hash identifier: p55o8t8EPPdTgc/AkSqxWnARlr3BDaj121/tFYHm4GA=
Subject key identifier: C0:F7:5D:E9:19:64:A7:C3:B6:E1:6D:65:56:F2:D5:15:3E:6C:6F:CE
Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233
Certificate serial: 07F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
Manifest number: 07E7
Signing time: Fri 28 Mar 2025 21:14:48 +0000
Manifest this update: Fri 28 Mar 2025 21:14:48 +0000
Manifest next update: Fri 04 Apr 2025 21:14:48 +0000
Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: WW1bJKpAtsIueNF/glXfkZwkbT0BDPOOk+uCb5nk6a0=)
2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91173B6
Validity
Not Before: Mar 28 21:14:48 2025 GMT
Not After : Apr 4 21:14:48 2025 GMT
Subject: CN=67e71148-c16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:a2:e2:1f:2e:96:85:25:90:3c:a7:33:e0:
32:60:2d:2d:77:f8:1f:14:30:1d:c8:c2:cf:ae:85:
19:76:48:9e:a5:dc:3d:32:6d:6a:dd:33:f5:51:27:
2a:33:a5:18:31:ff:e2:54:68:c1:de:cd:0a:66:f0:
df:7c:b8:ca:6c:ef:50:71:a1:a5:86:8d:14:ac:7a:
3e:24:a0:45:df:31:a2:79:52:01:3e:36:31:ef:27:
3c:a9:57:ab:18:f4:9e:b4:c3:98:7a:57:e3:b4:0c:
c6:49:4f:1d:db:1b:a5:6f:ad:01:f5:70:ea:2f:e5:
16:42:9c:50:95:8a:64:01:01:c1:2a:07:17:02:ba:
c6:01:2b:5d:e1:88:4c:cc:70:66:0c:28:c0:ca:26:
73:09:35:22:5c:e9:a5:a0:65:21:e2:43:f1:53:ab:
93:e1:6c:e0:1b:76:05:62:b3:32:ff:4d:d1:ee:18:
bd:96:b1:45:ab:11:35:df:42:ca:80:47:5c:3f:8a:
26:c4:7f:cc:da:7c:eb:54:28:83:18:f4:86:a1:b6:
20:15:89:54:3a:29:8b:1b:80:87:a3:f8:c3:bb:df:
3b:ec:a7:f7:73:b1:af:50:c0:a0:e0:28:b2:5d:3f:
eb:72:08:3e:2b:5f:38:e6:d4:ba:54:b5:0f:90:41:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:5D:E9:19:64:A7:C3:B6:E1:6D:65:56:F2:D5:15:3E:6C:6F:CE
X509v3 Authority Key Identifier:
keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:b7:bc:4a:b7:0b:9e:73:65:3d:1b:c7:0d:73:e0:a0:ef:
68:51:4d:cc:3a:45:98:46:ab:fe:c9:e7:a3:4c:c9:aa:15:32:
19:fd:ec:8d:46:b6:35:9b:08:93:ca:35:ec:40:c8:8b:62:a1:
1d:67:c7:28:e0:8c:b6:93:a7:c0:40:57:99:f9:80:d5:36:55:
8a:11:fe:52:f9:63:9a:8d:29:e8:37:48:60:88:35:5e:25:10:
00:2c:c2:95:a6:c7:fe:84:4e:26:bf:e3:73:7a:e1:c0:a5:85:
ed:fb:46:ef:ef:83:5e:75:4a:be:ca:2d:7a:a7:6e:a2:e9:9c:
cd:ad:91:81:3d:22:cd:a8:da:c5:37:98:4f:d5:ff:ff:ed:95:
76:35:16:9f:ea:1b:d3:8f:18:22:be:b7:08:a9:90:81:66:2b:
a8:83:9f:b5:82:85:00:7b:fa:b0:2a:75:33:cf:31:f6:13:69:
92:cf:da:91:1a:5c:93:88:44:16:28:7f:39:56:4a:c8:39:ac:
9e:a0:4e:56:4e:be:f7:97:4d:c1:b9:3d:95:5f:27:f8:29:ab:
c9:d0:29:74:21:c8:8b:3d:a0:39:66:ce:aa:87:55:bb:97:66:
b6:79:61:4c:ee:43:44:d3:cf:99:4e:27:ae:1d:6c:c7:25:a2:
72:91:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:56 2025 by rpki-client