Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json)
Hash identifier: ZBSx8WhhijLrWCUcjf7ud4lpPNtxJ3CKHjEFAfiBPMQ=
Subject key identifier: ED:B1:0D:ED:66:E7:4F:1E:89:E1:32:A7:90:B2:68:73:18:23:7E:74
Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
Manifest number: 01CE
Signing time: Sat 29 Mar 2025 02:26:06 +0000
Manifest this update: Sat 29 Mar 2025 02:26:06 +0000
Manifest next update: Sat 05 Apr 2025 02:26:06 +0000
Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: c3xtLWZuo+gqxKPTNKtAyWM7QEdPTmGxc/XLhOAsPGU=)
2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F592
Validity
Not Before: Mar 29 02:26:06 2025 GMT
Not After : Apr 5 02:26:06 2025 GMT
Subject: CN=67e75a3e-5465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:1d:aa:e4:10:2a:1d:5a:0a:d3:7a:23:f5:
66:9f:ed:3b:4c:e2:22:fd:3f:47:35:52:82:8a:96:
6d:3f:b5:4a:e8:2c:f9:32:d3:de:11:37:0c:2e:d3:
b4:93:81:ad:9f:78:c8:a4:61:be:2d:e4:fa:95:2d:
35:bf:79:b9:ba:0a:c9:15:5f:97:a9:6b:88:1a:70:
f7:dd:dc:20:f2:ed:9e:1d:91:80:b1:5d:5f:5a:42:
e0:51:6c:63:14:af:c0:b3:df:72:71:57:61:d9:00:
d9:f3:b3:d2:f2:37:d7:a5:df:fe:58:00:1d:a2:b7:
73:f3:ec:aa:ca:3b:c6:a8:dd:9c:4e:08:33:c8:73:
1a:ce:bb:a5:ec:20:21:21:cc:48:59:bf:b7:3f:b7:
52:5c:58:6d:73:09:5f:d1:ae:96:85:93:c0:64:85:
8f:31:92:c9:2f:be:5a:81:00:93:fe:89:a2:4a:d6:
4f:41:10:57:f3:a4:d8:5b:2f:37:cb:08:df:49:26:
c0:ee:c9:60:27:87:a6:36:ed:4e:54:e6:14:54:fb:
ad:e2:5a:cf:4f:df:51:2b:9d:6f:cf:0d:cb:e6:22:
94:5b:a5:2c:5c:30:5c:4a:c4:3b:d0:c0:3e:9a:8b:
f6:d3:3d:db:1a:a7:5b:56:4b:4a:6f:f2:73:9c:c3:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B1:0D:ED:66:E7:4F:1E:89:E1:32:A7:90:B2:68:73:18:23:7E:74
X509v3 Authority Key Identifier:
keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:56:3b:84:41:f9:15:eb:a3:11:95:ab:3b:95:e5:b8:83:a4:
f6:22:04:2c:e6:79:9c:1d:76:c3:de:00:42:de:1f:bb:69:92:
99:e1:a0:90:48:14:06:63:db:8d:ab:ef:aa:4b:8e:e8:60:34:
7b:87:82:cd:05:55:69:a1:09:b4:1f:25:40:89:29:f5:c9:96:
64:7d:92:22:11:0f:ce:3e:df:46:31:6c:74:46:a6:be:51:22:
60:26:68:dd:96:a7:17:82:c5:db:20:2f:c2:e6:49:07:9c:20:
1b:a4:29:1c:4b:59:4a:a6:89:4b:26:9f:1f:eb:d3:99:59:e5:
e1:fa:6b:6a:c4:c8:f9:46:95:63:77:d8:6e:a7:36:7a:22:9d:
ac:00:58:10:42:0c:a5:9b:84:7b:00:eb:7b:c0:e5:f5:fd:19:
18:b3:c9:86:a0:f8:d2:66:0d:b6:f1:e1:91:5c:a0:21:e1:5e:
7c:34:de:07:dd:ed:91:a5:07:c0:97:b5:1e:9a:03:69:49:28:
3f:cf:e6:ed:15:70:87:cc:ac:d9:cb:73:7d:99:6c:f7:42:b6:
05:cc:07:51:93:08:6f:40:6f:e8:6a:e9:23:ca:98:76:ad:b3:
29:08:ae:dc:97:e1:e4:7c:d1:cc:af:1f:d6:f9:1c:71:43:0b:
c4:78:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:00 2025 by rpki-client