Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File: VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier: iI2bR/4v+N7Y5Jf4b9p2bpvNuU8379E7WuI2EwhZ8yA=
Subject key identifier: 38:13:A0:C5:11:62:3A:D8:39:8C:68:C5:A1:4C:5A:59:C4:44:29:9E
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer: /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number: 89
Signing time: Sat 29 Mar 2025 05:52:13 +0000
Manifest this update: Sat 29 Mar 2025 05:52:13 +0000
Manifest next update: Sat 05 Apr 2025 05:52:13 +0000
Files and hashes: 1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: KOuefNRpB22uOVrZYetjG47zxmd9FCHwpGw8E90pA2k=)
2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: RjGhvtiZ99qV/uWgf+fYP1U5NceB1zdotuSd44m3FNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134167
Validity
Not Before: Mar 29 05:52:13 2025 GMT
Not After : Apr 5 05:52:13 2025 GMT
Subject: CN=67e78a8d-36ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:88:5a:83:90:8e:3a:de:52:ba:d4:5c:a4:
13:7c:7c:2a:d6:99:22:db:2c:e0:ec:5f:f9:47:86:
64:4b:05:2f:5c:8b:a1:39:f9:f2:e5:a3:2b:34:98:
b7:09:2b:d7:32:25:ae:ae:63:21:5f:0f:d3:d9:b7:
ae:ef:01:fe:3a:b5:e8:da:67:23:62:5a:64:e5:e5:
06:b7:4b:f7:9b:b3:74:9b:c7:38:69:34:a9:3f:74:
1e:3b:81:47:e6:59:22:af:ae:5a:7c:3f:be:7f:ab:
7c:28:76:6d:3f:4a:dd:5e:f4:7c:0a:17:dd:82:ea:
2c:5b:46:dd:c4:90:24:3b:0a:d1:28:a5:16:f6:fd:
9f:25:0a:03:78:a4:63:5c:4f:ea:14:d6:9a:de:af:
30:09:18:d2:c6:87:be:12:14:06:d2:9f:f1:b8:d2:
a4:4f:cc:3a:68:58:37:28:2a:2e:2c:bd:00:04:43:
7c:53:2c:25:1a:ec:5a:4f:5b:6a:64:ff:59:4e:9d:
57:d2:6e:c6:70:5f:c3:6c:20:95:8a:a5:a8:16:01:
f2:ed:2c:c5:22:75:07:a1:8d:19:07:8f:c9:03:2d:
7f:42:45:13:e2:70:9e:bc:76:e7:4c:d8:b7:17:a2:
aa:84:af:ae:e1:bf:92:de:95:c5:f0:75:8f:1e:77:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:A0:C5:11:62:3A:D8:39:8C:68:C5:A1:4C:5A:59:C4:44:29:9E
X509v3 Authority Key Identifier:
keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:bd:c1:07:ad:a9:f9:94:f6:de:98:77:1c:34:6b:d1:fd:83:
5e:83:1d:71:d5:93:58:b0:1b:d6:b2:67:93:33:ec:b7:b3:4c:
91:03:3f:cb:27:28:ca:10:3a:64:b3:5a:aa:e8:36:f3:b5:aa:
1d:d4:60:c2:40:b9:69:29:a7:e0:70:71:06:bb:28:64:87:44:
5c:cc:c8:8c:dc:5b:ff:ca:3d:1d:05:c6:96:33:c7:82:db:d4:
5e:1b:74:bb:05:63:8a:48:aa:42:5f:81:b7:ed:ae:ab:9a:98:
e4:69:a6:85:97:ca:5c:09:ca:aa:64:b4:f0:26:27:4d:4e:de:
31:97:16:85:5c:65:3c:f4:4d:57:76:3a:69:5b:56:00:63:ae:
83:fd:00:9f:e3:49:4c:7f:b2:d9:af:dc:65:af:1a:b1:bf:40:
eb:3f:d1:7b:a5:ec:8d:5e:1c:46:76:10:8e:c3:fd:f4:e8:a7:
aa:59:a1:9d:b7:ac:29:2a:fa:5e:09:7f:f1:71:00:3b:df:9c:
96:9f:5d:95:06:fe:40:9c:56:f3:2d:9f:09:3c:76:ac:60:5f:
38:f1:ff:69:e5:a1:1f:8e:7b:20:2a:98:c1:d5:3c:40:f6:9e:
81:dc:ec:25:10:da:46:a5:b5:8e:71:41:fe:51:a4:d1:14:1e:
c0:95:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:46 2025 by rpki-client