Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier: DQRqaWKYw0KWeMkz2y9HJMBYMYQIMJxr5s1ysRQvH9I=
Subject key identifier: 8A:F7:D2:8B:8D:DE:DB:D5:38:CE:33:4F:25:B9:E8:F2:9C:46:1A:F9
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number: 01A2
Signing time: Sat 29 Mar 2025 02:56:34 +0000
Manifest this update: Sat 29 Mar 2025 02:56:34 +0000
Manifest next update: Sat 05 Apr 2025 02:56:34 +0000
Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: /xDtrMSojY0GFaGIVjl1CNw4gLdBcheQ98lp8iV2MSw=)
2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD9BD
Validity
Not Before: Mar 29 02:56:34 2025 GMT
Not After : Apr 5 02:56:34 2025 GMT
Subject: CN=67e76162-adbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:28:4a:0a:6e:19:21:11:38:36:0a:ae:10:
43:76:e6:c6:c3:57:9f:d3:13:b0:e4:17:77:b4:2a:
5f:b6:d7:20:49:20:7e:07:d1:f5:44:07:22:bd:b2:
02:70:99:dc:ba:81:ea:b3:85:1b:28:c3:af:17:26:
e6:14:43:16:eb:71:9d:12:5f:37:29:d1:cd:54:b1:
0a:05:71:e5:8f:fc:7d:62:1a:ea:f5:0e:7b:23:4f:
da:23:9f:24:94:85:33:8a:08:f9:56:35:c6:b3:00:
ba:4a:32:b9:da:6b:c6:34:3d:cc:ea:2d:b2:40:0d:
02:d6:59:9c:62:93:bc:f7:49:2e:aa:ef:2f:ee:76:
dc:d0:66:05:5f:50:17:82:11:17:66:46:af:fd:4c:
54:ba:c7:8a:91:37:f3:0e:cb:9b:e6:a1:48:eb:4c:
55:52:ae:12:c3:b7:29:53:0a:a1:7b:67:bb:34:e4:
d7:84:c8:7f:f0:a7:5f:ed:10:9d:b2:a2:08:41:fd:
85:b5:9e:cd:9c:13:20:3a:4c:1e:1d:5e:2f:88:16:
e2:16:7b:b7:16:6a:e4:d0:79:d1:ca:fb:7c:38:e0:
01:66:49:3c:2d:d3:d4:95:93:7a:e0:27:11:20:82:
98:3f:79:e1:36:53:9a:70:c5:0c:d7:11:90:8f:93:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:D2:8B:8D:DE:DB:D5:38:CE:33:4F:25:B9:E8:F2:9C:46:1A:F9
X509v3 Authority Key Identifier:
keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:7b:d0:40:ff:3f:cb:bc:70:74:6e:9a:60:a4:38:64:e4:
41:79:8b:e3:3c:5e:a6:80:0e:2e:30:ba:12:fb:09:1b:2b:38:
c9:03:1b:b8:2e:14:15:73:02:76:d4:af:a0:63:a0:ce:de:5a:
1c:07:72:a5:a7:1f:25:30:49:0b:9b:c5:09:7b:9e:5d:7a:21:
df:ac:99:df:88:bd:d9:c2:84:03:82:de:8a:d2:db:32:a9:e7:
d7:74:5a:31:06:ab:51:97:8c:c6:d0:63:85:8a:6a:5f:53:09:
d7:58:ca:28:62:36:2f:77:34:94:c3:d2:a2:1d:31:c0:e9:f3:
73:33:1c:bf:75:fc:b0:0b:64:0d:6a:f4:9a:53:8a:ab:16:c0:
d3:a8:72:3a:84:49:63:9b:7d:0d:37:16:50:80:07:e1:57:f3:
f1:af:4e:99:4a:fd:2f:71:8d:8c:fd:a9:45:98:af:cb:2e:b3:
0f:97:e5:31:95:a9:aa:f7:e8:04:ac:7e:34:22:06:cf:37:8d:
25:68:d3:7f:82:c3:07:87:c3:a3:0d:4d:ec:b5:79:6a:19:06:
49:a4:83:47:8c:f5:82:37:70:b4:ce:8c:bc:6e:9e:84:5e:18:
93:4b:71:86:69:e6:52:0b:ba:8c:3b:57:a5:85:a5:33:69:b2:
48:ed:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:25:22 2025 by rpki-client