Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json)
Hash identifier: xXRBgr0tFVSdQtB4mi+EzAG8K9z0IBvu0B3EkJVlSuo=
Subject key identifier: 3B:86:C1:1C:57:CC:8F:68:A0:4A:B2:09:83:EF:CD:33:82:0C:08:E7
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
Manifest number: 7C
Signing time: Sat 29 Mar 2025 06:00:03 +0000
Manifest this update: Sat 29 Mar 2025 06:00:02 +0000
Manifest next update: Sat 05 Apr 2025 06:00:02 +0000
Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: v21XkskK7CgZpB2YZqx8/45AePu5I3fFOUlU6CuTagQ=)
2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB
Validity
Not Before: Mar 29 06:00:02 2025 GMT
Not After : Apr 5 06:00:02 2025 GMT
Subject: CN=67e78c62-9e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:93:90:9c:b4:95:12:05:86:31:93:17:f3:
54:41:54:83:3a:cf:50:27:66:79:04:4e:83:64:ac:
57:47:8c:68:a7:b1:5f:67:47:be:c0:33:f8:0c:6d:
d6:63:18:4a:c9:d2:ea:7e:82:5a:95:cc:09:b9:bf:
1a:34:de:9f:f9:9b:f6:b8:d8:80:9a:b5:a1:be:f9:
72:2a:98:f5:01:81:8c:3a:54:f4:b0:50:a0:5c:16:
91:72:b5:a0:83:4a:cc:34:88:51:85:34:76:f0:1c:
8f:ea:f7:be:a2:70:56:16:c8:db:a0:a8:a6:e3:f6:
e6:4c:7a:01:99:92:6a:e4:f6:df:1e:b0:d4:13:db:
06:f4:13:3b:59:2d:9c:9e:f3:de:7b:25:11:5d:12:
cd:43:22:97:7e:0c:82:b8:1c:4b:76:2b:43:28:ca:
ff:45:e7:b8:0f:8a:06:f3:a9:b7:92:5c:53:c7:44:
34:f8:11:6c:ac:fb:e3:d4:88:71:67:19:ed:45:ac:
db:49:83:3e:9c:92:c9:59:75:97:66:15:d2:c9:0e:
03:e5:eb:1c:dc:af:25:5e:2d:11:26:14:f4:2f:00:
36:89:20:bb:43:1c:f0:0f:7a:f9:0e:13:3e:19:de:
a8:a6:54:da:c2:57:6b:71:3a:51:8c:c2:3c:58:c6:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:C1:1C:57:CC:8F:68:A0:4A:B2:09:83:EF:CD:33:82:0C:08:E7
X509v3 Authority Key Identifier:
keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:09:50:de:61:08:b9:97:44:e4:78:4f:85:d0:eb:6f:3f:
f4:42:89:55:8b:97:36:25:14:0a:8f:b8:8a:50:0c:b8:66:e2:
77:d0:a7:47:fc:b4:28:6e:3c:47:63:98:67:49:43:4b:c2:ae:
0b:40:52:38:f1:31:3c:c6:73:03:e4:cc:b8:c3:9c:4d:0f:f2:
26:7a:1f:02:89:54:17:e5:b2:25:d3:f5:29:0f:cf:2b:0e:27:
8e:8b:10:f5:f1:46:14:a2:f9:42:99:a2:3e:ef:5f:81:ff:0b:
d9:49:84:51:7d:0e:14:92:82:69:e3:1a:e1:16:69:8c:98:ad:
79:aa:2c:69:de:4f:5a:16:b6:9b:88:f9:f6:6e:08:dc:fb:7c:
09:ee:3f:c3:33:0c:ac:da:ba:00:a0:f9:41:9c:6f:c2:05:32:
84:a6:42:8e:2c:be:1b:7a:1b:67:ec:4f:c6:73:2e:ca:c5:a3:
12:fe:a9:1d:21:77:ac:ec:4c:5c:ec:fa:ed:10:30:cb:11:3b:
51:8e:6f:43:36:5b:3b:93:e9:7a:e2:8d:e2:ee:14:3a:df:bd:
a1:05:b5:4e:4f:56:2f:b7:8a:8d:b9:fb:08:e0:32:62:85:a4:
00:09:7c:d4:5e:af:f5:f1:96:5b:0e:7d:06:a3:a5:2e:1b:ec:
f3:5c:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:26 2025 by rpki-client