Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: ooTRz+cwMt5bopfv4b1PWT94tM+rlK3jN81e15+SIV8=
Subject key identifier: 7E:50:B3:2A:BB:3E:67:D9:CE:C4:08:53:73:89:B8:D0:74:DF:41:82
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: 0E
Signing time: Sat 29 Mar 2025 07:23:06 +0000
Manifest this update: Sat 29 Mar 2025 07:23:06 +0000
Manifest next update: Sat 05 Apr 2025 07:23:06 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: vxUSJBHeuCY3M7yo1gd9Dy7vRjpOiztssdnOXaLHOhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7
Validity
Not Before: Mar 29 07:23:06 2025 GMT
Not After : Apr 5 07:23:06 2025 GMT
Subject: CN=67e79fda-a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:9f:65:20:99:0a:9e:8c:96:64:d7:10:9a:
8d:0a:31:df:2e:a3:fa:00:73:3a:4b:d0:08:e8:3a:
77:f7:d3:9b:19:80:a8:d2:47:e9:fc:20:2d:34:bc:
84:a5:56:e7:89:d8:a5:a6:f1:6a:49:5d:06:cf:3e:
71:41:b6:86:89:31:78:dd:a6:b4:99:d6:40:ae:cc:
11:0c:94:fe:29:fd:52:3b:32:11:86:a2:08:45:8a:
13:cc:a8:9e:eb:58:86:45:0a:7f:af:7c:01:c7:0b:
dd:82:aa:28:a9:59:7a:8c:90:f8:cb:a0:cb:1c:43:
f2:01:72:e0:22:b7:ff:c9:c3:fe:de:93:8a:3c:e4:
b9:c8:85:e0:67:78:a4:21:98:6f:f8:00:c3:31:ee:
2d:69:f2:94:60:eb:45:42:ae:13:7d:b3:dd:8f:b6:
cf:ca:49:f3:2f:88:8b:ac:ae:f3:7f:61:7e:f2:df:
b8:b4:85:57:b8:d8:09:13:eb:67:1e:88:bc:7d:cd:
71:21:5e:5f:b2:b4:6e:87:6c:82:a3:e9:12:e6:5b:
55:24:e8:4c:e7:b9:69:01:66:2c:21:20:08:d8:a6:
f1:3b:66:ec:f2:94:d1:48:ec:22:6a:77:c5:a9:e2:
c7:a0:44:3e:b5:e9:39:a5:28:5d:a6:ac:46:69:1c:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:B3:2A:BB:3E:67:D9:CE:C4:08:53:73:89:B8:D0:74:DF:41:82
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5f:7e:0b:f7:c4:14:20:41:1e:10:75:bf:e2:91:96:7e:53:
ca:b8:62:14:c5:e9:e2:50:a7:94:50:67:b9:46:f5:3c:21:55:
7c:d4:25:aa:d1:4b:14:d8:87:4a:da:d5:68:a7:0f:74:19:fd:
88:9c:9d:4f:83:83:30:0f:67:08:61:95:4a:9f:ad:06:8b:bb:
a1:c0:4f:75:98:8f:9c:a9:4e:fb:39:f5:70:91:a9:4d:6a:92:
b7:3e:3c:f3:3f:7b:4f:9d:86:b7:e8:88:99:f0:87:8d:66:e9:
cd:62:9c:a9:e8:ac:3c:26:ba:f4:b1:8e:25:07:cb:77:62:50:
93:c9:f3:be:1b:fd:55:25:10:9c:bf:ee:82:7e:87:ce:2a:ae:
41:7c:0a:e6:3c:33:5e:63:e1:33:2d:b9:5b:b7:4c:58:99:79:
5a:0d:b6:4d:aa:c0:e2:85:fc:5e:13:d7:5e:8c:1a:fc:bd:c7:
d1:ab:9c:87:46:84:65:fe:a5:1b:48:25:a7:c5:85:c2:19:9d:
18:c8:fb:0a:7b:b5:68:ca:e5:43:bd:cf:4e:90:57:2d:17:03:
64:cb:6e:7e:46:15:e9:26:36:64:24:36:92:14:ad:47:e8:e6:
22:1d:54:c1:44:c7:85:21:e8:9e:ae:54:5a:79:9f:df:69:4b:
87:c2:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:16 2025 by rpki-client