Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier: Nj6dkzc3Gi8OcgTLNpppWlRIbqTPabMEZVUyScH99MA=
Subject key identifier: 2B:0A:BB:AB:A8:38:5D:63:0F:9F:8B:4A:C8:51:05:8C:71:3B:0F:30
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial: 0C22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number: 0C1C
Signing time: Fri 28 Mar 2025 18:42:02 +0000
Manifest this update: Fri 28 Mar 2025 18:42:01 +0000
Manifest next update: Fri 04 Apr 2025 18:42:01 +0000
Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: IHr4gz1rEIvOciFDMZWPH3N+ZAoHiNFpuxlo/Zx/gEs=)
2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FAC
Validity
Not Before: Mar 28 18:42:01 2025 GMT
Not After : Apr 4 18:42:01 2025 GMT
Subject: CN=67e6ed7a-6735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:0e:d2:73:cd:73:4f:12:e8:94:c0:71:8c:
d5:2f:41:d3:69:75:e0:6e:8b:bf:43:de:33:35:21:
bb:db:11:a5:5d:bc:3d:33:17:08:59:73:ba:41:7a:
01:34:ee:02:db:46:74:17:a8:af:a2:75:f1:99:e1:
af:2c:23:49:6d:9b:df:51:1b:85:a3:87:f6:c9:95:
96:f6:cc:de:23:4b:1b:44:54:1f:5e:7a:d0:13:63:
06:0b:5e:d1:65:41:26:fc:7d:9e:b7:be:cf:7e:27:
7e:79:41:6f:4f:20:e9:00:43:f2:ec:65:16:bb:25:
36:5b:b6:4b:3f:db:4a:a3:e0:87:61:a1:cd:81:06:
85:a2:40:60:9e:11:92:55:14:74:ce:0e:08:05:13:
9a:ad:2d:93:1c:29:93:4e:f7:3d:f2:70:18:86:4b:
3b:43:67:39:4f:93:2a:32:ed:dc:00:3d:e6:35:d7:
09:5f:7c:3a:33:06:e5:cc:f1:fc:75:29:c0:fa:fb:
c5:19:68:d1:d5:fb:b5:8c:09:13:02:03:aa:4d:d1:
38:f0:02:ff:f0:04:cf:81:43:e3:dd:0d:0d:4f:38:
9d:ec:d7:e3:c7:56:05:70:09:5a:a1:5d:13:53:bc:
bf:15:52:0d:f3:c6:9a:3b:e5:74:a9:6c:1c:74:e0:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:BB:AB:A8:38:5D:63:0F:9F:8B:4A:C8:51:05:8C:71:3B:0F:30
X509v3 Authority Key Identifier:
keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:9c:47:cb:07:55:69:e1:86:47:ea:75:ac:45:78:17:db:b6:
ad:00:86:81:88:64:c7:c5:35:9e:eb:79:cc:aa:da:4f:36:1e:
92:3d:3a:d4:9a:d9:15:10:c0:9a:70:d3:13:06:74:62:ab:c5:
07:a1:db:aa:8a:ae:a9:ee:3c:57:72:c9:d6:1e:65:d5:8a:5e:
fd:e1:93:50:43:b5:b5:7d:dc:39:12:4d:51:44:0d:ad:04:a4:
9c:13:9d:f6:54:08:25:5e:dd:39:72:03:a3:98:53:80:28:3c:
d2:62:e8:03:8b:89:a3:79:c5:1b:b9:a6:f2:03:1e:9a:ba:e4:
ee:6d:8d:0f:03:43:2b:d6:ff:28:b8:4f:0d:c3:1f:37:be:71:
6e:c0:47:ef:e5:bd:e5:0f:d3:1d:ab:46:90:48:7c:b2:39:df:
e0:8e:2b:d9:09:d5:28:68:b2:41:fb:eb:d6:dc:5f:a3:65:3e:
80:c3:bf:ea:1c:85:ae:6c:a0:46:65:ce:57:c5:cf:45:02:bd:
22:ca:da:c3:fb:12:ce:08:e5:4f:5a:f0:bf:5b:29:c7:2b:b3:
e2:cf:f2:3e:c0:9b:f1:04:28:c5:a9:a4:28:82:f6:d5:23:a2:
0b:8d:d3:02:5f:12:58:ae:24:86:67:a7:12:1b:fc:62:37:73:
ba:45:c4:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB
NTEwMkRGQ0UwHhcNMjUwMzI4MTg0MjAxWhcNMjUwNDA0MTg0MjAxWjAYMRYwFAYD
VQQDEw02N2U2ZWQ3YS02NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA4O0nPNc08S6JTAcYzVL0HTaXXgbou/Q94zNSG72xGlXbw9MxcIWXO6QXoB
NO4C20Z0F6ivonXxmeGvLCNJbZvfURuFo4f2yZWW9szeI0sbRFQfXnrQE2MGC17R
ZUEm/H2et77Pfid+eUFvTyDpAEPy7GUWuyU2W7ZLP9tKo+CHYaHNgQaFokBgnhGS
VRR0zg4IBROarS2THCmTTvc98nAYhks7Q2c5T5MqMu3cAD3mNdcJX3w6MwblzPH8
dSnA+vvFGWjR1fu1jAkTAgOqTdE48AL/8ATPgUPj3Q0NTzid7Nfjx1YFcAlaoV0T
U7y/FVIN88aaO+V0qWwcdOBKEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsKu6uo
OF1jD5+LSshRBYxxOw8wMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1
RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv
UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGnEfLB1Vp4YZH6nWsRXgX27atAIaBiGTHxTWe63nMqtpPNh6SPTrU
mtkVEMCacNMTBnRiq8UHoduqiq6p7jxXcsnWHmXVil794ZNQQ7W1fdw5Ek1RRA2t
BKScE532VAglXt05cgOjmFOAKDzSYugDi4mjecUbuabyAx6auuTubY0PA0Mr1v8o
uE8Nwx83vnFuwEfv5b3lD9Mdq0aQSHyyOd/gjivZCdUoaLJB++vW3F+jZT6Aw7/q
HIWubKBGZc5Xxc9FAr0iytrD+xLOCOVPWvC/WynHK7Piz/I+wJvxBCjFqaQogvbV
I6ILjdMCXxJYriSGZ6cSG/xiN3O6RcTq
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:42:06 2025 by rpki-client