Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier: 6O1Qr+vBfzCbuqC2fJ6MyNXd1UiwPKjGyjcPBtk0drc=
Subject key identifier: 99:66:7C:E2:7D:62:7C:33:25:52:5B:EA:30:96:85:A7:A5:8F:DF:31
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number: 74
Signing time: Sat 29 Mar 2025 06:10:08 +0000
Manifest this update: Sat 29 Mar 2025 06:10:07 +0000
Manifest next update: Sat 05 Apr 2025 06:10:07 +0000
Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: YpewXf29yEsK9ec8ugTMCncRI6FIwdADNUqq9ANiops=)
2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64
Validity
Not Before: Mar 29 06:10:07 2025 GMT
Not After : Apr 5 06:10:07 2025 GMT
Subject: CN=67e78ec0-66e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:15:5d:3c:76:6a:e8:33:b4:fd:9b:3c:3c:
be:d4:5e:85:73:d5:5f:81:12:ee:57:63:34:62:21:
bd:b8:14:11:70:dd:cc:bc:fe:30:73:92:4e:dc:c4:
1e:6e:46:e0:63:07:4d:3e:e6:16:2c:65:bf:de:0e:
a0:81:d7:0b:a3:b8:97:c5:25:de:a7:12:7d:29:bc:
ba:d1:3c:69:5d:d3:32:8b:d1:00:dd:be:0d:50:67:
5a:39:5e:de:14:a2:8f:ba:44:7c:47:4e:f8:61:49:
ee:ce:60:13:8c:28:0d:bc:9e:b9:c0:a6:10:4a:27:
d8:e0:7c:2e:bf:c3:85:fb:56:07:ea:a6:6c:7a:2a:
ba:89:ea:5a:88:8e:1e:ff:c2:17:12:9c:01:2f:12:
66:79:25:bd:61:24:cc:64:54:96:19:a9:1b:5a:f2:
e9:23:9e:80:5e:f0:e3:87:09:52:36:20:d4:c7:74:
d6:d2:fa:c2:04:19:5e:f3:c4:f9:2f:65:33:8b:da:
3f:28:bd:6b:e8:29:2f:b6:6b:5d:07:e2:85:61:b7:
83:c2:b2:d2:70:05:db:59:f3:be:d3:d3:0b:23:ba:
3e:a2:8a:6a:98:a8:1d:d5:93:f5:b2:1f:0b:90:1a:
c5:a0:6a:f4:11:04:5e:9b:97:4d:03:19:d5:88:c9:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:66:7C:E2:7D:62:7C:33:25:52:5B:EA:30:96:85:A7:A5:8F:DF:31
X509v3 Authority Key Identifier:
keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:58:8d:39:56:45:27:77:17:1a:60:70:a6:c7:9a:ec:10:5d:
01:24:86:bd:32:cd:a1:eb:e3:1e:74:82:8b:88:48:0e:f3:9d:
cf:0b:c9:e5:ef:c3:3a:76:45:4c:2d:56:5c:3b:73:9b:8d:35:
12:bb:b7:3a:31:76:7e:12:2c:08:db:7b:77:70:54:bc:c2:98:
ee:f9:25:80:84:6f:d8:e4:8f:1b:4a:3c:d0:05:c9:b1:00:c8:
02:0a:4a:db:c0:ae:ca:83:4e:1e:4a:c9:4b:65:56:68:85:ed:
95:41:a7:5f:47:91:87:59:db:25:a3:ee:f6:a6:e8:49:17:34:
f5:54:03:75:95:8f:0c:ff:90:cc:fa:8c:59:9c:07:6f:96:b1:
bc:ed:06:d7:da:68:34:83:cc:a8:21:94:c4:78:41:49:cc:80:
3e:fd:d2:97:33:a9:e9:fe:64:ec:9d:88:2e:22:c1:01:2f:a9:
ed:f0:43:93:02:ce:87:46:81:cf:04:35:e9:9c:93:f5:d9:fc:
ef:fa:b3:df:e2:72:bd:c4:85:9b:6e:e5:48:69:5a:29:76:ba:
92:07:11:79:a2:73:a4:9f:b4:e2:6b:ff:c6:e0:90:ae:e0:aa:
ca:b9:de:ab:58:1c:a3:31:fe:86:ac:15:83:f1:71:2b:4c:f0:
db:9c:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:17:03 2025 by rpki-client