Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
File: vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json)
Hash identifier: BRWaJrEVZbnwV5qNFRMtZQ7CRkThonyolt1cjbwGZTI=
Subject key identifier: 24:9E:70:2A:98:F2:F6:2C:EF:C0:8C:31:90:55:4F:3E:32:22:EE:7D
Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
Certificate issuer: /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
Manifest number: CE
Signing time: Sat 29 Mar 2025 05:04:27 +0000
Manifest this update: Sat 29 Mar 2025 05:04:27 +0000
Manifest next update: Sat 05 Apr 2025 05:04:27 +0000
Files and hashes: 1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: mhyDCxn8shGbzhtG/zO0AqGC9SQC0XPBpa8H9EUHpXs=)
2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: VBkLC1Ug6+V5ASssgia7rSJZ2O30hfTWr/78uTsbXl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159B6F
Validity
Not Before: Mar 29 05:04:27 2025 GMT
Not After : Apr 5 05:04:27 2025 GMT
Subject: CN=67e77f5b-d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:1b:8d:15:ae:e5:ca:9e:88:f9:c8:d9:67:
9d:43:f5:86:0b:48:7c:2a:30:06:49:d2:88:84:d3:
9d:22:f3:66:44:1d:b3:37:5c:1e:14:0e:74:a0:7a:
e8:39:55:d1:00:68:a4:2a:21:97:60:53:b4:a4:dd:
27:ed:04:bd:b9:57:05:6a:f7:1e:9e:b3:26:77:f5:
11:b4:40:70:9d:32:fa:60:96:b1:67:62:5e:47:30:
26:6e:de:73:76:bc:cf:2b:ae:c1:b5:9d:dd:df:32:
11:85:1c:98:77:2a:1a:7c:de:d7:1b:0c:a9:27:2d:
36:11:78:05:d7:d8:f0:73:45:42:e4:f2:57:48:24:
1b:54:8b:07:44:a0:ab:4e:bf:11:82:84:4c:1a:61:
57:35:f2:94:f1:53:2a:f0:e2:ac:d9:23:af:7a:3f:
30:10:7a:62:a3:1f:b8:56:89:9b:41:a7:b0:35:af:
a0:14:3b:ad:a1:ba:09:ba:0b:2b:59:0e:1e:25:c0:
3b:cf:99:f7:52:23:d0:5f:6c:9d:6d:39:da:9c:97:
6d:e5:55:c9:9d:9a:cb:c1:99:d2:e1:c3:95:51:6e:
03:35:c0:3e:7f:6a:b3:23:26:fa:e7:49:63:2a:fb:
25:95:76:3d:62:13:7c:f1:21:75:96:7a:dc:a0:dd:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:70:2A:98:F2:F6:2C:EF:C0:8C:31:90:55:4F:3E:32:22:EE:7D
X509v3 Authority Key Identifier:
keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:81:6c:fc:42:ca:b6:77:57:8d:63:b8:8b:f3:df:4d:77:e6:
16:85:7d:8c:c9:fb:73:4e:0c:f4:47:42:78:93:de:6c:cf:26:
2e:e7:63:e8:4a:e0:44:91:15:61:a2:75:3f:84:96:50:ab:b9:
4e:e5:a7:fb:55:0b:d1:6f:d3:b7:62:ce:a9:9e:5b:46:80:ea:
93:db:9a:dd:16:93:cc:bd:e4:04:05:96:6f:8b:63:38:e0:b0:
23:a9:bf:48:76:b3:89:08:6a:4a:90:cc:c3:77:15:91:57:4e:
c6:d2:de:90:e5:ae:22:54:f4:c9:fe:e3:17:39:47:66:7b:fd:
9a:43:46:e8:77:f6:86:2d:76:ac:ab:c4:20:41:bd:dc:23:df:
a0:e2:b7:44:74:67:31:2d:ff:af:56:48:b8:61:9c:d0:7b:51:
d6:3e:39:5b:5d:98:fb:6d:c0:44:dc:47:37:f4:49:38:12:38:
68:e4:e4:43:62:94:54:7c:a6:a3:31:bf:a9:43:dc:bc:53:9a:
01:0c:c3:a4:6f:26:9f:76:30:ff:fe:b9:61:64:78:7d:2f:4a:
4b:f8:99:77:3f:e0:59:f8:c0:a3:e5:4c:f7:38:fe:fd:c2:b7:
22:ce:d1:2d:13:94:11:ea:9c:b6:10:d2:7d:ce:0b:e7:5c:b6:
9b:6d:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:35:09 2025 by rpki-client