Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier: gnRV4uXjlRpLzQ+VBtWYpXy6QlZoKy0iW4N8otXIRJ0=
Subject key identifier: 18:1B:58:4D:08:48:91:51:52:25:A9:F1:63:26:8F:E0:EE:A4:5F:1A
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number: 011B
Signing time: Sat 29 Mar 2025 04:12:52 +0000
Manifest this update: Sat 29 Mar 2025 04:12:51 +0000
Manifest next update: Sat 05 Apr 2025 04:12:51 +0000
Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: bKqcvrHMmpeSuWDkDGarUNROhHuObHasbc5bmqTyACg=)
2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: DaoJhbsGXkUC42pkhjpzJhDA/mxo+1TSGX1zlEEQkMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C
Validity
Not Before: Mar 29 04:12:51 2025 GMT
Not After : Apr 5 04:12:51 2025 GMT
Subject: CN=67e77343-7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:b4:53:87:09:c8:7a:ca:9c:c2:78:66:16:
64:2f:9e:fe:52:e4:02:7f:10:29:85:f4:b6:85:4e:
87:a2:21:b8:22:52:7b:6b:e4:41:30:c9:31:45:36:
22:0a:eb:00:b6:0c:6c:18:6d:e9:c0:75:1b:87:84:
88:b8:e9:0a:b2:1e:5c:05:f7:0d:b0:10:0b:44:d4:
30:22:b6:a5:40:3b:67:0b:96:da:03:39:69:e0:34:
b7:e2:db:62:83:2e:d4:a9:df:a6:54:57:4f:c9:fb:
02:87:37:17:fe:ac:ec:4f:3a:23:f8:db:10:68:e3:
29:a7:b6:03:96:27:21:19:0a:57:89:d9:e9:08:73:
ff:fa:80:ac:bc:79:c2:c8:61:92:a2:e7:3d:c3:1d:
5c:68:91:e4:99:cb:c8:52:80:74:a1:df:dc:39:3d:
e2:34:99:41:94:9f:e5:23:df:fb:8c:65:ff:59:79:
ed:b2:00:5a:f3:4b:b5:48:6c:4d:b5:d5:9b:ec:b6:
a1:98:82:9f:e2:e2:28:db:5c:45:ef:57:14:82:dc:
15:82:e3:62:3c:85:61:b2:55:cb:76:bf:7e:2a:46:
15:30:25:d9:e6:c3:03:65:bc:24:ae:a1:2f:3c:bf:
83:dc:0d:72:29:d4:89:6f:75:e0:b6:0b:13:20:9f:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:58:4D:08:48:91:51:52:25:A9:F1:63:26:8F:E0:EE:A4:5F:1A
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:7f:c9:bb:ba:26:bf:2a:fb:44:98:77:a0:8d:b3:df:ab:ad:
b8:ea:7a:18:c3:6a:a2:21:2f:b2:9c:75:4b:8d:d2:f9:9d:75:
ed:f6:85:7d:79:66:c1:34:88:6d:6c:33:f2:ea:1b:7b:94:13:
e7:5c:e1:72:1a:1e:e9:b9:eb:a1:0e:b6:7b:b4:03:d1:83:2e:
b7:59:30:97:2f:5c:72:0f:9e:72:3b:64:e2:58:20:30:4f:90:
c6:a0:15:11:6c:40:5a:e5:15:9a:d0:d3:1b:48:b3:49:13:a8:
8c:fa:75:41:10:a8:b2:ab:fb:df:0a:b2:02:fa:ff:31:95:6b:
c3:1a:1a:14:fc:2a:b5:ad:b0:56:9b:f7:a0:4e:5b:0a:8b:94:
c0:dc:0e:e3:d3:f7:81:aa:75:b0:17:80:31:35:f3:15:bd:2c:
47:ee:84:e7:c2:72:9d:fe:77:c8:a4:75:d5:9e:e6:42:59:e8:
b4:ac:b2:fb:53:0c:79:57:74:de:25:e3:87:d4:e6:33:86:b2:
e8:48:e9:f5:4d:c5:13:a1:99:1f:4f:53:45:32:39:b2:44:76:
14:05:e7:3c:11:7b:fe:20:8b:13:3b:38:d0:01:ee:09:60:a3:
f3:59:b4:17:83:b9:22:f1:1f:f0:09:dd:39:a2:b4:79:9a:f6:
62:f2:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:03:08 2025 by rpki-client