Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: l61x6UYc6PdVq3iN5YMbI4RnIvdgdFFS4V1pkO1ghQM=
Subject key identifier: C7:96:B7:29:14:E8:5B:0D:08:A7:A8:B8:24:C0:9D:5F:1D:9E:4B:5F
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 01BA
Signing time: Sat 29 Mar 2025 02:39:11 +0000
Manifest this update: Sat 29 Mar 2025 02:39:10 +0000
Manifest next update: Sat 05 Apr 2025 02:39:10 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: LGW5tZ62uNPNpwW0IeNSN6fB5BBl4hygdS9gmJd9sJ8=)
2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=)
3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B
Validity
Not Before: Mar 29 02:39:10 2025 GMT
Not After : Apr 5 02:39:10 2025 GMT
Subject: CN=67e75d4f-0885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:98:8c:00:c6:8a:c6:99:23:26:14:db:3d:
bd:6b:54:22:67:a2:9d:ee:6d:71:d2:28:ef:9c:25:
7b:26:cb:85:1b:01:6b:20:12:f1:d7:ce:18:fe:44:
d9:c0:ca:b6:d4:8c:5f:61:08:f9:0e:0a:17:36:f1:
85:43:ff:c8:27:4b:bb:8d:49:12:28:95:1b:ea:8d:
de:e7:f8:b9:54:7e:83:b3:ed:47:68:86:63:54:76:
5d:20:7b:6b:92:99:90:0b:1c:04:61:e9:82:18:91:
43:f6:06:26:cc:37:93:99:2c:e2:91:1d:a0:f9:91:
7c:bd:08:62:de:27:d5:18:24:79:57:d8:30:d7:dd:
87:b0:c8:3f:96:a1:60:39:99:bc:5a:1d:77:25:63:
cd:58:da:fe:37:16:ee:90:41:8b:36:a6:7a:08:d2:
54:e9:13:d9:26:af:80:69:a8:07:9f:7a:f5:fb:67:
22:c3:f0:83:a1:48:0e:c3:38:38:ba:93:ca:19:04:
80:0b:25:ef:8b:8f:b2:17:be:29:e3:4b:bd:22:d5:
c0:aa:2d:d3:4e:8d:b3:1f:c4:c0:89:47:1c:e9:d8:
d4:0f:4f:94:ff:75:30:58:4f:09:8b:59:b8:d2:67:
5a:9a:22:c7:d1:b7:64:de:78:7c:24:55:94:37:44:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:B7:29:14:E8:5B:0D:08:A7:A8:B8:24:C0:9D:5F:1D:9E:4B:5F
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:98:ee:37:67:c4:3f:d4:ba:f2:82:c6:05:27:f6:fb:71:47:
ca:c1:f4:5b:49:bf:a4:f9:a4:39:55:38:1f:de:6f:11:a1:34:
0d:92:72:d6:f6:73:1a:58:13:bd:7d:ba:97:44:d3:7b:cb:a0:
67:90:73:39:a0:19:4c:41:ca:86:19:82:4f:59:ee:0a:93:39:
d6:c9:73:46:71:3e:1f:41:c3:16:47:d6:06:94:94:84:1f:82:
1c:1e:b7:ee:ce:b3:1f:b3:b3:4f:ba:c7:47:ff:0e:b2:5d:19:
31:5c:51:c2:ce:a8:62:b4:ff:01:e4:6b:c2:16:bd:30:49:22:
de:54:d5:5f:1c:d4:0b:02:c8:7c:ad:2c:3c:db:ef:3b:b9:6f:
52:1a:d8:01:58:a9:9f:e0:b2:24:13:78:53:c9:8d:bf:68:97:
b5:44:c1:74:51:fb:f1:e2:ca:4f:e3:0d:c2:3e:2c:4d:1a:39:
31:79:b1:34:69:f9:b7:7a:fd:44:90:82:fa:07:c6:7e:7b:ef:
d8:c9:23:80:ac:e9:8b:51:71:89:bc:d6:b9:bc:c0:c2:88:5c:
da:09:37:1d:ea:7a:b5:59:1b:00:ab:f8:2c:f7:e0:1b:a4:fa:
d7:18:13:44:9b:31:f1:9a:91:1d:fa:5a:26:56:f9:27:b9:cb:
67:1e:0e:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4
QkU1QzEzQjkwHhcNMjUwMzI5MDIzOTEwWhcNMjUwNDA1MDIzOTEwWjAYMRYwFAYD
VQQDEw02N2U3NWQ0Zi0wODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKWYjADGisaZIyYU2z29a1QiZ6Kd7m1x0ijvnCV7JsuFGwFrIBLx184Y/kTZ
wMq21IxfYQj5DgoXNvGFQ//IJ0u7jUkSKJUb6o3e5/i5VH6Ds+1HaIZjVHZdIHtr
kpmQCxwEYemCGJFD9gYmzDeTmSzikR2g+ZF8vQhi3ifVGCR5V9gw192HsMg/lqFg
OZm8Wh13JWPNWNr+NxbukEGLNqZ6CNJU6RPZJq+AaagHn3r1+2ciw/CDoUgOwzg4
upPKGQSACyXvi4+yF74p40u9ItXAqi3TTo2zH8TAiUcc6djUD0+U/3UwWE8Ji1m4
0mdamiLH0bdk3nh8JFWUN0QqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeWtykU
6FsNCKeouCTAnV8dnktfMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD
NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG
c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqmO43Z8Q/1LrygsYFJ/b7cUfKwfRbSb+k+aQ5VTgf3m8RoTQNknLW
9nMaWBO9fbqXRNN7y6BnkHM5oBlMQcqGGYJPWe4KkznWyXNGcT4fQcMWR9YGlJSE
H4IcHrfuzrMfs7NPusdH/w6yXRkxXFHCzqhitP8B5GvCFr0wSSLeVNVfHNQLAsh8
rSw82+87uW9SGtgBWKmf4LIkE3hTyY2/aJe1RMF0Ufvx4spP4w3CPixNGjkxebE0
afm3ev1EkIL6B8Z+e+/YySOArOmLUXGJvNa5vMDCiFzaCTcd6nq1WRsAq/gs9+Ab
pPrXGBNEmzHxmpEd+lomVvknuctnHg5Z
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:48:46 2025 by rpki-client