Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier: mXLK4nsm3lfQ9jULX05L5644TuLokYFbfH5ackEJoZI=
Subject key identifier: 6A:B1:76:25:A8:2D:43:D4:1D:D7:5B:40:7D:DA:BE:17:EA:F8:DC:59
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial: 0875
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number: 0869
Signing time: Fri 28 Mar 2025 20:57:13 +0000
Manifest this update: Fri 28 Mar 2025 20:57:13 +0000
Manifest next update: Fri 04 Apr 2025 20:57:13 +0000
Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: vtTflxazPy+YwD7NSQKpZbAIPPZaNZN5FYrwge2dxzc=)
2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: lBT7uRCySISPj1eQO8mZRZSLeeGbhioMqzJ80ai10hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AC5
Validity
Not Before: Mar 28 20:57:13 2025 GMT
Not After : Apr 4 20:57:13 2025 GMT
Subject: CN=67e70d29-6801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:44:b1:39:65:0c:ec:33:2c:0a:a1:86:cb:
88:ac:54:33:6e:a9:b7:d7:a7:fd:0e:e0:54:64:cd:
6e:d0:51:3d:57:cd:c6:31:b2:01:bb:30:0a:01:15:
90:ea:fd:36:b5:65:08:2e:c2:c3:3f:3e:62:de:dd:
1e:7c:5a:5e:7d:10:46:88:e8:93:b1:4c:87:18:d2:
b2:e3:11:d9:0e:c4:c7:d2:3c:b9:0d:8a:4f:ca:cc:
55:44:e7:0f:39:28:77:b6:13:6b:b3:39:87:00:f8:
28:22:49:04:d0:c6:dc:03:f5:a4:f4:44:73:a0:9c:
bd:dc:42:65:3c:a5:9b:89:c6:ea:09:5a:77:82:c6:
65:7b:1c:61:fa:1f:3c:66:85:2f:ee:40:b3:ed:e2:
d5:7b:62:e9:59:5a:fe:01:ca:aa:1e:67:f4:2b:39:
b8:6d:39:99:4c:6b:35:22:d9:ad:2e:d8:50:ab:f3:
d0:3e:20:d8:fd:79:1b:00:e9:32:49:f8:13:53:c2:
07:1b:2c:3c:de:dc:04:17:49:b6:82:c0:90:00:0d:
48:ae:6b:05:67:2d:5f:bd:b4:4b:2e:3e:a2:48:96:
14:d6:d8:37:45:f4:40:93:db:0b:98:8f:2d:9b:5b:
2f:17:e3:83:40:f6:f5:f1:7b:ca:e3:bd:46:56:c1:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:76:25:A8:2D:43:D4:1D:D7:5B:40:7D:DA:BE:17:EA:F8:DC:59
X509v3 Authority Key Identifier:
keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:d5:ef:a7:4d:a4:f4:c9:3a:10:b8:91:8b:34:d6:1a:a4:
50:22:ff:23:39:50:8f:3d:c0:d7:9d:03:c9:69:8f:c1:ec:ba:
9f:4f:3d:87:bc:03:8a:c6:d9:2e:d0:a7:87:3f:a4:83:95:6f:
78:b8:1e:63:03:e6:4d:3c:56:1f:c1:6d:0d:f1:20:6c:7c:13:
a6:c4:66:a3:55:a7:a1:4e:16:60:7f:29:14:6b:70:94:c6:53:
c1:f3:8e:7c:be:3c:f3:42:9d:a8:ef:ac:05:21:24:94:a6:25:
fd:60:61:a6:ab:b9:ab:88:ad:f9:d2:6d:d3:87:5b:79:95:e6:
a9:28:77:94:46:e3:91:be:e9:d8:20:35:17:dc:77:5d:11:34:
c3:c8:a4:03:2a:70:f7:4f:bd:fb:fb:15:7c:d7:dc:40:99:63:
66:2e:dd:07:cc:e6:c5:ce:cf:81:23:a7:11:d3:6e:35:71:3e:
98:01:26:d7:a6:71:94:c0:a5:df:62:8f:03:94:6e:28:34:e6:
8a:fc:39:e2:97:a7:03:b2:1b:56:35:37:49:05:2b:8b:97:60:
d1:ec:57:f6:80:73:8d:87:8f:4f:29:b7:19:9b:cc:a0:77:33:
37:2d:03:a8:fb:6f:07:a8:60:53:57:aa:5e:5e:6a:cb:2d:16:
70:fd:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:55 2025 by rpki-client