Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier: C0iagNCSTYfCkBiNx8/S/zMGwAjnwbiivlRuEI4x1Nc=
Subject key identifier: C0:95:0E:F4:3E:BD:5D:D8:04:88:F2:68:4D:7B:9A:F0:CB:CD:AE:4D
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number: E1
Signing time: Sat 29 Mar 2025 04:53:20 +0000
Manifest this update: Sat 29 Mar 2025 04:53:19 +0000
Manifest next update: Sat 05 Apr 2025 04:53:19 +0000
Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: okgg5WbnjYLgjmonSblnaV4ZpKMPpulZ9Nnr2drq6nI=)
2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A
Validity
Not Before: Mar 29 04:53:19 2025 GMT
Not After : Apr 5 04:53:19 2025 GMT
Subject: CN=67e77cc0-71c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:b3:3d:2e:27:ff:ec:b0:3e:5c:15:e4:d1:
c8:b8:15:88:cc:3e:9a:41:64:7d:fe:70:5d:46:ae:
ea:50:d6:a4:5b:55:7c:f2:61:3a:f9:9e:fd:22:ed:
2c:c7:1e:09:5c:19:5b:ac:14:48:04:af:50:64:4e:
26:2a:0c:fe:ab:f6:62:66:82:19:2b:20:d5:35:92:
4e:da:64:9d:5d:c7:52:aa:f9:8d:5e:7b:df:b5:7b:
ae:d8:ff:c8:ae:64:63:59:74:37:3d:6e:af:3c:d7:
f0:40:d5:c2:5d:12:48:2c:0a:f8:0e:11:2a:3a:25:
f1:62:02:b7:36:3e:14:93:7c:91:31:8d:a2:33:58:
54:70:08:2d:fa:06:5c:96:8a:fa:33:4f:cd:cc:3e:
3a:5a:5b:06:bc:35:6e:4e:db:98:a7:ad:6c:af:d1:
06:22:97:99:12:02:d7:34:b4:b8:6f:07:12:0a:e4:
50:68:f7:ca:d0:94:d5:c9:ef:87:b3:c7:8b:a4:91:
1f:8c:1e:ee:7a:bf:3e:5f:d2:f5:15:81:d4:23:16:
dd:f4:96:6a:d5:01:0b:bc:0c:2e:e0:f6:d7:dd:ad:
31:ba:6a:14:8f:34:48:ee:06:af:ca:d0:61:61:bb:
08:03:b4:5f:e7:1c:d0:37:2a:c2:5d:84:9a:2e:4d:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:0E:F4:3E:BD:5D:D8:04:88:F2:68:4D:7B:9A:F0:CB:CD:AE:4D
X509v3 Authority Key Identifier:
keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:70:a7:cc:67:c0:b6:49:96:3c:16:aa:02:9c:89:61:58:78:
38:72:87:12:c9:3e:7e:b2:bd:27:4c:33:cc:e3:22:e8:b6:a7:
12:2d:88:3c:90:6d:52:d8:bb:f8:30:36:57:4d:b3:13:77:57:
68:62:c5:bb:06:e3:a7:8b:b1:fb:07:e1:c3:0e:9e:fe:ab:75:
8a:fa:97:20:d1:48:17:56:a9:96:0b:3f:27:6f:63:ea:25:25:
62:89:d3:39:71:7c:dd:82:e0:90:ca:1c:a1:71:62:42:d1:2b:
e5:eb:e6:92:c3:fc:5c:c0:8a:8b:b5:b8:6f:8a:f1:65:b0:15:
07:55:8b:fc:e6:79:00:01:82:ca:42:12:a1:f2:eb:47:6f:29:
61:58:37:c0:46:ff:6f:05:a7:a0:37:f9:07:62:30:b6:0d:a1:
24:89:4a:71:bf:19:c5:a8:a0:d0:a8:ea:ce:ee:e0:42:87:6e:
6a:3d:bd:07:4a:23:bd:b5:df:47:70:21:f8:76:56:3e:44:38:
7a:fd:8d:48:6f:90:c7:db:b2:67:44:34:2a:b5:7d:da:cc:4d:
41:14:ae:c2:25:9a:d7:27:e6:41:3a:eb:d3:dd:46:d2:5b:06:
fc:2d:89:e4:31:70:13:40:bc:51:86:f8:fc:b4:1e:7c:3b:14:
a9:0e:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:12 2025 by rpki-client