Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json)
Hash identifier: PuDu0+kzOnCcKiZMmRnhrk8YPTWeAXPzrVYj0M+CKg8=
Subject key identifier: AF:5C:60:22:CF:9C:C9:81:31:F5:EB:BB:E3:E4:D9:65:21:0D:20:2E
Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Certificate serial: 0C1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
Manifest number: 0C0C
Signing time: Fri 28 Mar 2025 18:48:58 +0000
Manifest this update: Fri 28 Mar 2025 18:48:57 +0000
Manifest next update: Fri 04 Apr 2025 18:48:57 +0000
Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: qGIa2wHeK/rcMO7eXmvR0TYUB1Vsp/vHKEBKySA98sE=)
2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg=)
3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: erICH0cme0SAzh4DFMOpR5Ja+e0q51Z/KWddXql4mQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23DC
Validity
Not Before: Mar 28 18:48:57 2025 GMT
Not After : Apr 4 18:48:57 2025 GMT
Subject: CN=67e6ef19-afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:f7:1b:a0:0c:f4:c0:9b:b8:7f:6e:4a:a6:
0e:0f:b1:ad:0a:9a:fe:5d:6f:6e:26:7b:f6:f5:cf:
8f:31:56:7d:9b:08:0c:ac:92:1e:15:02:3f:9d:81:
4c:40:f8:9d:e3:7a:df:12:10:a1:d7:d2:7e:83:fb:
69:a2:d8:fd:41:7a:f0:96:a4:31:b5:5b:59:bf:18:
7b:9c:8c:36:48:13:57:b1:b4:92:65:95:a8:c2:43:
40:65:11:c9:db:56:03:99:17:e7:e7:44:4f:f3:56:
4c:cb:69:87:64:e8:d6:a3:d8:41:a6:c2:99:58:4f:
c5:03:17:4d:97:66:ed:40:16:f6:71:14:79:64:28:
5b:05:6a:61:a5:54:e7:ed:e4:e7:96:e0:54:00:65:
01:bb:cb:c7:f0:cc:26:b2:5c:49:31:97:8c:14:c5:
35:1e:2a:b4:21:a9:4d:a5:31:85:96:2b:a0:21:f5:
95:f8:6f:4a:41:60:a9:3d:59:44:e4:1f:db:af:82:
4d:cc:48:bb:a9:d1:50:b4:db:b2:5a:a2:37:1e:4d:
97:1f:f0:05:0d:09:56:4d:09:97:83:03:52:da:85:
12:e3:8b:75:75:4b:bb:99:4f:46:ee:08:01:af:cb:
40:ee:97:c4:69:ee:30:3d:e1:82:c2:33:9f:ab:4d:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:60:22:CF:9C:C9:81:31:F5:EB:BB:E3:E4:D9:65:21:0D:20:2E
X509v3 Authority Key Identifier:
keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:75:c4:d8:13:df:34:3d:26:80:52:ba:6c:8e:00:cb:6d:e1:
2f:79:85:2f:9d:a7:ad:bf:17:72:c5:7b:90:30:f6:a2:bf:52:
01:04:b9:2c:1c:03:7d:90:7e:1d:39:9a:93:3a:65:ef:11:b2:
a5:b3:0f:cd:ad:b0:0b:ca:53:de:66:17:d7:bf:81:e3:17:d7:
8d:37:fa:6e:43:04:88:54:f2:f5:06:a5:30:5e:aa:44:52:ce:
8c:46:cf:bc:20:e4:37:a3:e8:67:fa:71:9f:84:6f:29:82:cd:
12:ae:5b:2e:12:d5:25:ab:38:9f:dd:11:61:bf:a8:60:e1:f8:
ec:dd:61:0e:3e:8b:85:28:92:ba:f0:a6:2f:fc:d5:51:aa:22:
41:56:f6:3d:20:b1:f0:62:4d:3e:01:6a:f9:73:b2:a2:5b:5b:
07:9a:dd:40:30:bd:57:12:b1:6b:e4:2b:af:f8:12:4d:c5:a0:
36:0f:92:2f:3e:fb:2a:ff:53:58:b7:85:50:51:eb:6a:b1:77:
9a:c6:dd:d6:26:e3:13:80:34:d3:ad:fe:52:44:fe:90:dc:e2:
d3:7c:7c:94:94:fb:87:42:4d:74:c4:f0:1c:77:74:e0:4e:6d:
3e:28:34:17:11:08:c0:de:da:7e:ef:e4:c6:31:b6:ba:36:56:
38:dd:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:22:20 2025 by rpki-client