Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier: jZCQkjQ8ckZ+M8QA/w6jZoUjilhUwOg17r70TClHtgI=
Subject key identifier: 68:75:B7:11:1A:8F:E3:B6:F0:A1:47:3A:83:A8:54:51:E1:D7:22:62
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number: E1
Signing time: Sat 29 Mar 2025 04:51:18 +0000
Manifest this update: Sat 29 Mar 2025 04:51:18 +0000
Manifest next update: Sat 05 Apr 2025 04:51:18 +0000
Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: a0IM+gxKAzPOLb+P0jR1bDTPpUjkT+OOyuFA2ubTSbY=)
2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD
Validity
Not Before: Mar 29 04:51:18 2025 GMT
Not After : Apr 5 04:51:18 2025 GMT
Subject: CN=67e77c46-b62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:e3:a1:3c:94:f9:65:de:bf:d3:51:8a:22:
6c:d5:dc:f4:37:91:92:0e:c5:c3:ea:9d:f8:79:e0:
65:c5:06:15:0d:f4:e5:15:7c:10:98:1b:f5:c3:14:
5e:4f:c2:de:bc:ef:03:85:c6:48:9e:20:5b:54:65:
96:e1:54:23:6e:2a:d2:2d:4a:11:3a:1f:ff:ab:dd:
b6:bb:b6:0b:aa:fd:b1:a9:90:35:57:d0:24:06:48:
08:3d:bc:a0:8c:5e:c0:96:74:55:66:f6:9b:e6:c9:
f2:f7:a6:c9:e6:28:db:8d:45:37:db:3b:8e:1b:25:
3a:f8:f8:82:af:32:85:b6:64:7e:c3:76:63:be:1b:
cb:fd:ad:8a:7d:fa:ff:24:32:bd:22:79:a7:5b:2a:
3f:48:3b:16:d2:24:8f:8b:d3:66:00:34:cd:3f:56:
a2:51:97:f2:71:fa:3b:de:7d:61:3f:f8:1d:9b:b3:
4e:90:10:b8:78:f9:dd:b7:ac:fd:73:23:b2:0a:c6:
02:d5:af:51:7f:33:17:92:fb:81:aa:9c:65:70:d5:
50:59:c6:df:53:57:c4:44:03:f5:b8:e3:f5:1c:4d:
0c:f6:9c:af:0c:48:98:83:e7:18:d2:ba:06:2b:e7:
19:76:e1:ee:9d:93:10:5e:2f:1c:bf:7a:f4:61:1c:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:B7:11:1A:8F:E3:B6:F0:A1:47:3A:83:A8:54:51:E1:D7:22:62
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:90:b7:9b:4f:7f:7e:ea:1a:74:7c:09:84:35:c8:b2:49:8e:
2e:fd:20:79:29:02:4d:73:cd:66:7e:72:d7:e7:0b:c7:3d:4e:
e5:b8:71:da:f4:0a:1b:bd:d3:77:39:5f:45:6c:7e:4d:a9:f4:
e1:f1:bd:a2:00:0d:f8:fc:bf:87:57:aa:7e:7f:f8:f8:15:e2:
f6:ea:ba:f5:59:13:ff:79:04:4a:af:0f:64:28:fc:35:50:02:
d3:f4:3e:44:7f:3d:38:4e:9f:0f:04:3e:4c:7b:2e:48:5a:69:
9f:ef:8c:a7:6d:c5:21:31:29:f4:ce:e0:08:6b:8a:89:3a:66:
9a:c2:05:64:f5:b8:d6:76:b9:1c:68:5f:9a:50:b1:3d:01:ba:
a2:88:1c:29:fb:42:90:00:7c:17:57:e2:81:52:9b:40:56:8d:
63:2f:54:7e:54:66:44:44:5e:63:36:69:75:50:a8:55:32:c6:
86:28:06:9f:3d:35:ea:09:52:b4:12:2b:54:9f:b9:42:08:8d:
0b:22:c8:16:c2:e0:fc:35:b1:be:14:ab:ca:f7:83:f1:8d:b2:
eb:68:94:18:d5:7d:da:2b:d8:47:c3:88:5c:4b:93:31:48:9b:
88:60:d7:00:ca:bf:19:54:0d:9c:41:90:28:12:24:4e:9f:87:
11:d8:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:51 2025 by rpki-client