Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json)
Hash identifier: MMycYKDH+6aJ7HeLGKKVTiYf5facwtJ4x9Y9OLTL5Gk=
Subject key identifier: 3A:9E:C6:B6:2A:C2:15:7C:D0:FA:BE:1E:C6:72:0A:2B:07:93:3F:E9
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial: 0DAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
Manifest number: 0DA6
Signing time: Fri 28 Mar 2025 18:04:21 +0000
Manifest this update: Fri 28 Mar 2025 18:04:20 +0000
Manifest next update: Fri 04 Apr 2025 18:04:20 +0000
Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 7+zLY5AFIHnJUP2utWo68Zhc8tsCH8md7ViHrS/Yo9w=)
2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3502 (0xdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B2F8
Validity
Not Before: Mar 28 18:04:20 2025 GMT
Not After : Apr 4 18:04:20 2025 GMT
Subject: CN=67e6e4a4-23bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:14:5f:57:c0:8a:ed:fb:68:5d:0b:2f:ec:
81:0e:51:ab:4b:d9:11:44:78:58:f9:49:81:1a:21:
8d:c4:9f:54:df:9e:b8:e1:d5:fc:25:75:18:1b:63:
e8:7c:da:0a:7f:a6:36:03:b6:55:3f:0f:b0:e9:87:
1b:76:1c:0f:0b:11:d2:e4:88:c5:2e:70:bf:3f:da:
85:b9:f5:9e:0c:05:dd:2d:b8:85:7a:d0:cd:c7:d1:
0f:06:b8:6e:aa:1f:a4:da:db:c0:77:ca:cc:03:71:
b8:16:1f:5c:e0:27:29:23:b8:10:e0:88:1b:6a:d4:
c3:91:56:b9:38:25:73:05:ab:53:e3:c3:b2:d4:92:
33:88:f8:a0:71:00:b0:ce:ec:e1:79:21:55:e4:8b:
c6:8c:e9:10:c4:26:ce:22:97:cd:3e:8d:30:8b:e0:
c6:0a:25:70:03:b9:e8:09:83:34:c6:3a:57:60:bc:
5d:c9:35:ce:58:4a:1b:13:e9:a4:5b:5f:76:54:e9:
23:0f:75:8d:51:11:ce:2b:75:4d:37:38:3b:ea:d2:
b9:57:63:64:8a:86:ca:a0:1c:a5:64:72:d1:d5:87:
ce:88:7b:00:03:bd:df:f1:e5:83:f4:c1:bb:f2:4e:
02:56:70:eb:01:a2:11:38:98:2b:5f:6e:6f:d4:98:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:C6:B6:2A:C2:15:7C:D0:FA:BE:1E:C6:72:0A:2B:07:93:3F:E9
X509v3 Authority Key Identifier:
keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:af:dc:fe:68:30:53:42:55:2e:9b:a1:8c:4c:88:89:27:
bb:2a:a1:d1:f8:3c:4b:c8:06:f1:fa:59:9f:18:e4:1f:40:e1:
aa:09:4e:fc:3a:50:b1:e5:5a:53:ba:fe:5f:05:a7:6b:80:c1:
5e:2f:fb:08:d5:06:2e:a9:6a:a4:60:74:b1:e6:3d:d3:df:17:
22:ef:ee:38:02:4f:44:aa:39:4e:24:95:06:8c:1f:68:f5:28:
39:95:08:5c:c7:6e:2d:88:60:38:da:cb:ea:d5:c2:60:d0:c6:
00:5c:9a:d0:71:94:0c:f7:6a:17:70:c5:64:6a:48:bb:59:15:
7c:04:2d:68:8f:0d:0a:bc:c2:6b:5f:07:bf:71:28:0e:46:51:
a1:06:da:8f:18:7a:76:f5:8e:3e:c5:a3:30:60:84:b0:76:24:
8c:2b:91:3b:b8:5c:a9:77:de:16:69:ed:2f:49:ab:1d:c7:0a:
87:ab:f9:63:c2:82:fb:89:e4:a2:64:74:fd:75:99:34:f2:79:
cc:8a:9d:7d:b8:f7:95:9e:4d:9e:e5:56:4a:4a:0c:42:90:0d:
fb:f1:0e:b6:58:17:2b:4d:7d:07:6f:2e:3e:f9:b4:71:d6:3f:
43:d9:2a:d7:88:52:81:3f:33:2f:79:38:73:ad:e3:ef:1e:9e:
80:b0:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:50:59 2025 by rpki-client