Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier: cktGhnTxk89WpkgW3SdHse5bJCv6e5dOefsheKwk0wo=
Subject key identifier: A8:4D:55:7D:D6:D7:41:CD:F2:6C:42:D6:B3:C5:DE:A1:70:E2:4D:8F
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number: 0150
Signing time: Sat 29 Mar 2025 03:37:15 +0000
Manifest this update: Sat 29 Mar 2025 03:37:14 +0000
Manifest next update: Sat 05 Apr 2025 03:37:14 +0000
Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: 2kL21+uPlsQ9hBtp+zEws6KRrxfcbGwjkJMtrGrYtu8=)
2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C769F
Validity
Not Before: Mar 29 03:37:14 2025 GMT
Not After : Apr 5 03:37:14 2025 GMT
Subject: CN=67e76aea-af88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:e3:bd:3a:7a:30:e7:79:37:e4:7a:e2:11:
c8:13:be:93:45:a7:9e:e6:94:47:c3:f5:e2:63:34:
05:a2:77:bf:f5:88:f7:f9:f2:18:32:d7:7c:7a:00:
84:dc:f0:7f:2a:d4:14:3e:99:cd:65:46:ca:bb:f8:
88:17:60:78:d8:bf:a3:91:80:82:4e:0e:f7:a8:a9:
c6:82:2b:7f:4c:29:03:3c:98:cd:f2:e5:ff:c2:a8:
0b:3d:04:af:dc:d4:5a:d8:53:4d:37:6c:82:e2:f2:
99:04:bb:39:cb:58:86:07:03:74:0c:9c:2b:07:30:
d5:5e:70:9b:67:3c:16:95:2b:f7:eb:3d:98:a5:c2:
52:13:e6:ac:fe:2b:8c:ac:f1:76:de:39:ad:74:6f:
7f:0e:81:c4:c0:dd:2d:e3:40:d3:90:f7:1d:31:d0:
96:03:f1:fe:3f:d5:06:2b:7a:55:34:d7:2b:14:5c:
b5:9a:99:a2:ce:74:8f:b3:c3:bb:55:45:b2:8c:88:
2e:0e:ea:4b:00:83:7b:11:1b:a9:3b:3f:72:f4:b6:
9a:6f:63:c9:c5:54:cf:ac:70:c6:7e:03:c9:4a:54:
3d:bf:12:c7:42:4e:00:76:0c:bf:35:d0:69:df:36:
c7:0a:b2:77:02:26:ca:c3:94:1c:8a:b3:e7:d8:f2:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:55:7D:D6:D7:41:CD:F2:6C:42:D6:B3:C5:DE:A1:70:E2:4D:8F
X509v3 Authority Key Identifier:
keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:41:91:08:b1:00:33:bb:21:c0:20:5f:5d:f5:62:09:48:
76:72:2e:60:d9:50:da:a2:67:fc:ec:0e:2a:de:e2:b5:7f:3e:
f7:47:97:c3:41:76:dd:56:f1:b1:d6:9b:5d:9e:a9:fd:1a:79:
59:a3:ce:40:a5:87:e1:51:cf:89:58:d4:b6:bd:ac:e1:12:2d:
c5:0e:5b:6c:e4:ee:bc:3d:fc:e5:5b:f4:11:31:a5:18:e4:bb:
2d:9d:fa:78:b9:a4:59:c2:1a:da:df:d0:05:4c:1c:74:30:42:
22:79:8c:59:12:21:01:1e:dc:1f:86:53:bc:71:3a:be:ba:4f:
33:ea:a2:62:9b:0c:e2:a3:c7:ff:85:89:66:93:d6:4c:d0:a0:
9e:75:b8:78:38:ff:ea:39:b5:f9:b6:df:30:8e:b1:f5:e5:a2:
21:e8:62:b7:e8:6b:8d:36:ff:6f:c2:ae:51:a8:7c:4f:04:90:
03:47:eb:f4:2d:8e:28:d7:e5:8b:ec:e9:4f:9c:83:2c:ed:c0:
14:24:bc:7e:e8:b0:cc:40:09:74:4c:2a:39:d9:2b:8d:47:22:
3b:fb:80:85:3c:ee:43:d1:72:b5:a9:34:15:39:6e:1e:4e:7f:
b0:a5:15:dd:54:39:cc:09:d0:11:51:4c:ea:2e:f5:9a:89:f1:
f3:17:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:06:47 2025 by rpki-client