Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: YQlSRVX7R18Qg9dK5bdfUMDFdc5cyUNhvxjyxzij2cQ=
Subject key identifier: F7:8A:E9:27:B9:7D:1A:1C:8D:A7:8D:93:BB:65:DB:AD:A0:87:6D:D6
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: C0
Signing time: Sat 29 Mar 2025 05:26:38 +0000
Manifest this update: Sat 29 Mar 2025 05:26:37 +0000
Manifest next update: Sat 05 Apr 2025 05:26:37 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: rzYjMN9Eyxx7OGNtRd8ssPCXdprXaDJAhxBBRCtkCBQ=)
2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=)
3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532
Validity
Not Before: Mar 29 05:26:37 2025 GMT
Not After : Apr 5 05:26:37 2025 GMT
Subject: CN=67e7848e-d989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:3d:8e:1c:0d:bb:8e:6e:13:0c:b2:de:8c:
34:61:d7:7d:8f:86:9e:69:0c:4f:30:3a:a2:59:86:
ce:80:9f:01:82:9b:95:ef:1d:aa:af:2d:b4:56:17:
cb:df:17:f4:aa:be:44:c9:db:d8:94:8a:38:2c:74:
f2:b3:ec:19:97:3a:81:6d:72:c1:25:cc:a9:62:e0:
0b:cb:65:01:5b:90:a8:06:e5:5f:db:2d:30:1f:25:
21:92:fd:87:8d:a6:63:1f:d2:c6:31:36:eb:b9:e3:
b5:d2:63:f9:a9:a4:94:be:ee:bb:ab:71:38:48:b6:
8e:27:9d:83:d0:5d:84:b9:6c:59:32:fc:14:31:f3:
1a:71:a1:ad:85:70:d8:fd:e9:7b:6d:b8:ee:ef:6f:
7b:ea:4a:cc:c8:09:5c:02:8c:4a:9d:22:7f:48:ba:
05:63:d8:dd:84:38:3f:78:e8:5b:69:a0:81:62:15:
25:f9:a6:1b:97:ef:95:3a:fc:39:2b:ac:30:35:69:
19:e8:26:45:c5:54:9d:bf:86:3a:08:ab:ed:78:96:
50:21:91:ff:97:8c:5d:c5:78:07:7a:c0:a5:21:51:
55:d6:f4:83:f6:31:bd:40:84:39:de:f9:d3:29:41:
d6:a8:df:27:5d:de:8d:9a:a0:c1:f2:5f:0c:d6:66:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:E9:27:B9:7D:1A:1C:8D:A7:8D:93:BB:65:DB:AD:A0:87:6D:D6
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:51:ce:0c:a7:2f:de:14:b0:9b:f1:dc:6a:f0:79:fb:54:1d:
e0:b8:71:79:6d:27:d5:45:d3:a8:1b:17:b1:02:8e:3f:19:34:
94:69:98:0c:79:d7:62:b1:d9:7b:ce:cc:d1:cf:a8:65:de:65:
d0:bc:3f:bb:ed:cd:51:a3:8c:6a:61:60:61:7a:1b:65:de:e8:
e4:ee:4d:42:95:eb:74:6f:a4:f2:7f:32:42:28:53:b4:81:4f:
5a:9a:b9:69:bf:98:8e:1e:d1:19:e3:63:96:34:74:c2:c0:84:
d0:35:69:77:e2:8d:db:20:e5:20:ac:82:11:d5:59:85:93:b9:
08:f5:82:29:be:ac:c7:0e:59:ae:f1:f1:bc:4a:e7:f1:74:0b:
4b:64:d8:cf:05:86:51:10:25:c6:da:5a:90:a1:b3:50:c8:d1:
58:49:0d:f7:99:fc:d2:8e:4f:7f:75:07:79:99:53:a2:19:97:
b7:77:15:05:74:25:d6:97:48:53:a3:bd:f7:ed:74:a1:24:fc:
c6:a2:d8:dc:35:d9:9e:ca:3b:a6:96:f5:c0:13:84:25:d2:ed:
f3:b0:9a:2b:89:3e:94:0e:e9:99:24:9b:d6:d4:5d:74:ec:92:
7b:ca:bb:75:fe:ba:8d:76:3d:4e:f9:30:41:f1:82:d4:18:64:
ee:0e:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:19 2025 by rpki-client