Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier: Ok90sw8vBSaJRUQrl1NbU1nxOV6LQfTWizqUtGJCoEg=
Subject key identifier: C1:44:16:2A:30:B3:42:A5:8B:15:3F:12:D4:19:44:86:77:96:BC:3E
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number: 026F
Signing time: Sat 29 Mar 2025 02:47:32 +0000
Manifest this update: Sat 29 Mar 2025 02:47:32 +0000
Manifest next update: Sat 05 Apr 2025 02:47:32 +0000
Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: wCkhw/uWn49YKF40OjWkDMgKaESno6m5NErj5XRM5j0=)
2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC
Validity
Not Before: Mar 29 02:47:32 2025 GMT
Not After : Apr 5 02:47:32 2025 GMT
Subject: CN=67e75f44-4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:28:14:36:94:57:cc:c3:9d:fc:20:e2:42:
54:98:6f:cb:d3:f4:71:13:26:25:16:a2:c0:0b:03:
89:25:23:4b:d5:ae:1f:66:7c:a2:64:03:65:d4:ca:
fe:c3:db:fc:cf:4f:65:39:1b:03:94:96:c0:15:1e:
33:bb:53:d9:16:0e:52:0c:3c:ec:10:f4:c0:7a:c1:
fb:35:12:96:c8:44:07:b5:0b:c6:cf:b9:f9:47:bb:
f1:b8:c7:45:6b:aa:7f:99:96:85:90:25:af:b7:c2:
22:b9:c0:b8:4b:bb:9f:ed:cc:1e:dd:03:b5:44:cc:
17:cb:ae:40:93:1d:ea:a2:19:11:ff:90:7d:29:0a:
70:ee:9d:47:6f:27:2e:e2:f1:a3:fd:a9:a1:c0:fe:
32:12:6a:80:e9:a5:20:1c:4a:0d:9e:8b:5c:8e:00:
d2:0b:61:3d:3f:af:75:d8:84:83:4a:99:27:ef:df:
43:2e:ce:bf:ce:d6:4b:f1:75:46:95:20:14:6e:9d:
4d:37:58:a5:12:9b:91:7f:09:69:d2:3b:6c:95:cf:
ff:03:c7:d8:dd:ce:3e:91:45:7c:d9:3b:10:d0:5f:
81:4d:be:28:d0:07:11:71:f5:51:d2:db:7e:47:ec:
20:fa:c2:62:3d:49:b2:87:ae:15:7d:90:17:7b:b0:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:16:2A:30:B3:42:A5:8B:15:3F:12:D4:19:44:86:77:96:BC:3E
X509v3 Authority Key Identifier:
keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:5d:3b:40:b0:30:7e:5e:05:ea:6a:53:68:bb:77:42:8f:
68:23:83:6d:fe:cf:13:1a:2d:3e:5d:d9:be:d7:df:ef:23:3c:
0d:12:6d:82:56:1a:6a:a3:dc:c7:68:a8:1d:73:6d:b8:db:ef:
cd:b5:de:b2:79:50:72:5a:b6:21:3f:00:6b:f8:b3:d8:95:41:
3f:e8:3e:1f:9c:1a:f3:71:fd:30:6a:5f:0a:63:1b:b2:96:d3:
44:25:c7:57:84:32:a7:e8:b0:53:1f:33:aa:66:a2:a6:60:25:
37:15:13:e9:51:ed:bf:f7:3a:00:e8:8a:2c:57:e9:82:49:fe:
52:c2:aa:c9:a6:05:06:6e:82:fc:d8:38:1e:2a:0c:0a:df:63:
da:f4:e9:97:a5:32:fc:1e:3f:98:03:c6:12:ee:db:65:70:8a:
56:e8:b9:24:ce:99:a8:cb:f7:d7:7b:df:75:24:c3:5e:29:e0:
89:41:db:87:b7:0f:25:af:47:21:7c:64:e6:ba:89:28:e9:8b:
9f:22:27:c4:c2:59:0f:ab:eb:f0:59:88:f5:d8:4e:74:df:30:
23:ca:8a:e7:b0:74:c6:1d:f7:6f:52:77:99:2c:67:41:6c:22:
61:fe:d8:30:2b:fb:fc:93:66:17:a7:8e:42:aa:f7:90:1c:72:
2a:5b:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:52:55 2025 by rpki-client