Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier: AYl1y5ZvG5+VLcIl8HO2dtdugu5/J+5mHT1SC9BKaK0=
Subject key identifier: 5E:97:90:9A:D1:15:94:84:D7:E6:CA:E3:B9:9D:A1:76:51:6E:15:8A
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial: 2269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number: 222B
Signing time: Fri 28 Mar 2025 15:58:00 +0000
Manifest this update: Fri 28 Mar 2025 15:58:00 +0000
Manifest next update: Fri 04 Apr 2025 15:58:00 +0000
Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: Q8rlLlG13p0AntDZtHXN5/2Lhzw98skmWgdrQnYIBw4=)
2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=)
3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8809 (0x2269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A
Validity
Not Before: Mar 28 15:58:00 2025 GMT
Not After : Apr 4 15:58:00 2025 GMT
Subject: CN=67e6c708-83b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:11:41:1b:42:61:3c:7a:fa:fc:18:01:57:
a3:35:87:9a:41:58:4f:18:4b:84:24:d5:3f:80:ec:
b9:07:da:9c:ff:32:e5:04:29:01:3c:e3:5a:23:92:
1e:0d:38:e9:dd:27:82:96:de:8f:be:99:b4:a4:4a:
36:45:29:b7:b9:1a:f3:b0:d6:0a:92:ff:0b:25:69:
b1:f8:56:ee:33:41:8c:43:29:f0:0b:4e:8c:84:19:
c8:c0:6a:4f:c1:85:2e:a5:42:c3:c5:d9:96:d3:6f:
75:cb:6d:51:fd:89:c7:f0:49:21:6d:94:76:8f:da:
7f:7b:b9:5e:be:a0:61:bf:f0:2c:bb:3d:ab:64:ae:
30:81:6f:87:fc:76:29:ae:ce:25:fa:57:26:73:a2:
9c:26:7d:22:40:90:0a:05:74:94:63:1e:df:24:52:
b1:b2:71:91:c2:f1:3f:00:15:35:f4:83:4c:55:09:
c8:bc:84:bc:3f:b6:b4:dd:fc:42:e6:74:73:da:3e:
53:5c:07:a5:80:8a:41:21:76:01:a5:70:a3:10:3a:
41:91:f1:4a:67:bf:08:a9:1b:e5:93:4f:c9:61:36:
4f:a5:4c:a1:06:73:b9:fe:20:30:a0:21:ef:e7:03:
3b:bf:85:b6:ed:47:07:3a:a9:6f:f8:08:b1:e9:6d:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:90:9A:D1:15:94:84:D7:E6:CA:E3:B9:9D:A1:76:51:6E:15:8A
X509v3 Authority Key Identifier:
keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:d2:e9:10:93:23:a3:92:ed:ef:b6:17:79:32:22:81:04:
d9:51:41:a4:17:ed:c7:1c:37:6e:3c:e1:98:9e:12:98:b4:a4:
04:cf:21:c1:b3:64:4f:0c:ce:e1:c6:35:da:3f:91:c1:2d:3a:
4a:51:64:38:03:8e:dd:6c:38:25:9b:b1:e5:a7:c1:1d:24:1c:
7b:c1:ba:ec:ac:af:b3:3e:d0:a3:13:ef:43:fb:e2:85:0e:89:
1d:54:4a:c0:21:a3:eb:4d:3d:87:87:79:76:c0:b5:88:1c:1d:
92:ac:bf:79:3e:fc:a8:64:72:7c:6f:d3:1c:92:ec:35:93:fd:
a5:b4:a5:e5:3e:65:64:cc:5b:4d:94:24:44:d6:3d:22:26:42:
2e:05:36:c0:33:09:0a:ff:27:0e:f5:94:e2:7c:e9:d7:14:1e:
4e:55:fa:85:51:e3:e9:c2:29:fc:b8:c5:4d:0d:ec:27:83:b9:
dd:99:69:4e:ef:3f:8d:bc:e4:90:13:7d:ef:af:28:5f:d1:12:
2e:ef:4b:ca:d3:a3:24:0d:57:6c:f7:28:4e:36:44:03:b5:a2:
1f:1f:96:f2:ef:1f:4e:5c:c0:6b:07:ec:fb:ca:67:1e:79:ba:
8c:cc:8f:89:c5:6e:e2:f6:8d:76:e0:ee:04:f4:f6:6c:4d:23:
1b:cb:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:47 2025 by rpki-client