Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier: j2zZyWA5KFXTSaKB0k5UTeVcC7oM9j4E5e3ME3Ko7rk=
Subject key identifier: 83:35:AD:FA:70:53:46:0B:C4:B3:0A:BC:CC:FD:E0:61:4C:E5:10:A0
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number: 28
Signing time: Sat 29 Mar 2025 07:07:55 +0000
Manifest this update: Sat 29 Mar 2025 07:07:54 +0000
Manifest next update: Sat 05 Apr 2025 07:07:54 +0000
Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: xpHa/U65X50m26lF4IEa9UUMcohbjVSntaFzB7Cr9+0=)
2: ED795D30D6ED11EFBC37E16BC4F9AE02.roa (hash: ytwFD4jangW+gR76bRXjWLpiY6QBAfomC9SAsY7jMYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063
Validity
Not Before: Mar 29 07:07:54 2025 GMT
Not After : Apr 5 07:07:54 2025 GMT
Subject: CN=67e79c4a-5463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:7d:21:6e:0c:bd:2d:67:f4:64:c8:91:6b:
62:dc:9e:e0:93:97:aa:c1:06:38:5c:87:b3:a0:cc:
92:42:57:22:f7:b9:cd:7e:5d:78:b0:61:96:3f:69:
e4:ab:3c:24:23:8b:ae:67:08:80:ae:99:07:43:da:
a9:5d:61:be:27:8e:24:bc:d0:54:27:0d:f0:47:d7:
15:c8:fd:b3:c5:b7:57:64:75:6d:34:67:a4:4a:1b:
ac:ba:9d:de:45:23:e9:89:41:7c:e5:82:8c:4b:83:
e0:d5:c7:20:95:e9:2d:19:ea:f7:aa:0a:b4:90:f4:
38:57:ea:fb:76:cb:99:90:e1:2e:d6:b8:bd:e1:b7:
c5:e5:2d:92:96:2b:c5:80:b4:bc:49:ef:20:63:b0:
7d:99:79:c0:53:0c:0d:8e:23:94:9a:d4:ec:ea:80:
36:fc:ad:02:8e:c3:ed:bc:62:98:3e:3e:04:39:0a:
d2:89:22:ec:1e:cc:80:e7:e1:42:c7:da:95:f3:66:
f4:62:d4:0b:76:c3:34:2b:1f:69:96:7f:52:2e:8b:
b8:1b:ea:aa:fc:f8:82:6f:35:f1:60:61:33:58:2b:
cc:d9:8b:d0:83:f3:78:8a:40:ef:36:76:9a:19:ab:
bb:ec:f1:a7:48:e7:6a:df:3d:f1:4b:ce:43:ae:e5:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:AD:FA:70:53:46:0B:C4:B3:0A:BC:CC:FD:E0:61:4C:E5:10:A0
X509v3 Authority Key Identifier:
keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:50:21:d3:7e:52:14:e5:ee:ef:c6:76:92:55:0c:37:f9:c9:
38:39:53:05:74:a7:f2:73:46:a0:03:0e:7b:b9:51:16:c2:dd:
26:bf:ac:3a:08:54:f3:5c:ca:2a:f8:cd:ea:fe:d6:67:fb:51:
86:ea:47:26:54:78:71:6a:b2:61:be:40:ad:0a:0d:86:c2:5a:
49:c5:f9:1b:60:b8:75:30:a6:e4:dc:29:29:8f:d1:98:ed:24:
dc:0d:26:41:b5:e8:39:da:9b:2a:06:16:46:bc:47:7c:09:50:
ca:7b:4f:83:fa:24:05:08:cc:79:25:e4:10:2f:e4:7c:fd:80:
da:e9:12:16:a5:a3:93:c2:d7:c3:8e:f9:55:d1:4e:e0:9f:90:
7c:4b:fb:b0:d5:3f:3f:76:4e:0f:a3:d0:8e:7d:db:9c:33:5c:
af:78:51:81:6c:79:37:b7:d0:5a:66:6b:5d:5f:55:dd:09:45:
08:b6:d7:3f:af:81:d0:80:58:96:53:ba:8b:a7:05:9c:1f:26:
75:9c:d2:1f:2b:78:82:ea:02:80:20:96:1d:4d:da:9d:2f:92:
8f:cf:38:96:9f:83:b8:08:c0:5b:2c:7b:91:e9:c6:73:16:06:
09:fa:8e:46:df:5a:c0:77:3c:61:3c:94:11:52:f3:e2:0c:6d:
88:c1:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:54 2025 by rpki-client