Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: IimSyNn5tD3fARECb6IwbLGoJw4d7WxR7uaQoxZQiQQ=
Subject key identifier: A6:5C:5A:8E:27:43:CB:6A:A6:AF:5E:A1:1A:0F:79:3D:76:1F:C6:0A
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 019D
Signing time: Fri 31 Jan 2025 02:39:43 +0000
Manifest this update: Fri 31 Jan 2025 02:39:43 +0000
Manifest next update: Fri 07 Feb 2025 02:39:43 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: jD5MQMAey+1aUEeYVc3iTWrEgRfkdYqQOXM6Jujgxew=)
2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=)
3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Jan 31 02:39:43 2025 GMT
Not After : Feb 7 02:39:43 2025 GMT
Subject: CN=679c37ef-d820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:84:7a:37:d4:90:f6:5f:d5:03:0e:09:f1:
f3:53:a9:33:e0:7a:fd:56:58:63:f8:5a:40:88:87:
9e:84:ba:7a:5c:15:0d:57:c3:a9:e4:18:93:44:76:
2e:94:2e:95:c5:24:8f:cf:9e:8e:18:a0:00:7e:83:
21:f5:ec:e9:66:38:22:4d:d5:77:8b:74:60:d9:1d:
79:7c:33:b3:39:cf:e1:b1:e7:e5:b0:60:e1:aa:ed:
43:e8:36:66:bf:2b:c2:40:ae:a2:b5:0b:4f:f4:26:
e4:c2:30:ba:ff:4a:26:71:ae:5a:aa:4e:c3:74:f7:
bf:d5:72:1c:aa:1d:08:c6:4e:76:ad:2f:36:a1:f7:
7f:a4:74:77:40:71:17:e4:4a:a3:5b:ee:dd:61:88:
f5:0b:c5:9f:17:49:27:95:26:c5:3d:c4:50:21:21:
46:59:48:ea:c8:c9:73:15:ee:f6:a2:80:6b:5b:1e:
8f:ea:3d:6f:d1:aa:4b:a8:fe:3f:ca:b9:5f:ac:c0:
74:29:92:af:51:36:86:ec:35:ff:28:5d:32:0c:7a:
ec:57:06:bb:73:28:46:00:b1:3e:86:35:ce:f8:13:
a5:1e:dc:b5:4a:83:27:08:d9:5a:90:20:02:05:c3:
de:f6:e8:2d:5d:09:d6:d0:29:5d:d0:b6:e5:0d:a4:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:5A:8E:27:43:CB:6A:A6:AF:5E:A1:1A:0F:79:3D:76:1F:C6:0A
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:85:5c:d9:73:7d:b0:f0:57:f3:d5:2e:66:c9:83:76:ac:20:
ef:96:a2:41:ee:8a:85:56:bc:23:4d:43:b3:ea:09:16:4e:72:
b6:73:2e:96:2b:ec:27:ff:ff:51:4e:f2:59:5c:5c:41:6a:85:
9c:b2:4f:3f:f0:bc:d7:e2:b6:9f:96:8e:ad:d4:89:e7:d4:a9:
b0:15:88:7d:85:1c:7f:bd:69:77:df:8c:db:2f:62:21:78:8e:
fe:d9:95:f8:fa:2f:b5:20:94:52:eb:50:56:16:58:07:25:63:
62:5f:c4:06:45:32:5c:3b:5a:ab:ba:67:f8:1d:44:74:3b:38:
e1:9c:04:0c:2e:43:96:4c:a2:53:1d:00:f0:fa:b2:dd:4e:5f:
be:e2:c2:ee:0c:e6:f9:a6:d5:36:d7:97:82:17:dc:42:f9:06:
af:ec:24:ec:0d:dd:3c:23:1b:9a:0a:26:a0:04:e0:14:fa:55:
cf:32:cc:84:26:a3:15:33:c9:8e:55:48:f4:e2:67:d8:5d:f9:
0a:7f:23:51:fe:6a:bd:02:b0:f1:a2:d2:37:c2:f2:87:4d:da:
e1:31:94:b8:08:71:7e:f2:58:b2:c0:92:b9:1e:41:e2:cd:8e:
e5:af:86:af:1d:ae:1f:64:c2:48:01:8f:49:61:73:ce:bf:75:
c2:4e:29:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4
QkU1QzEzQjkwHhcNMjUwMTMxMDIzOTQzWhcNMjUwMjA3MDIzOTQzWjAYMRYwFAYD
VQQDEw02NzljMzdlZi1kODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqWEejfUkPZf1QMOCfHzU6kz4Hr9Vlhj+FpAiIeehLp6XBUNV8Op5BiTRHYu
lC6VxSSPz56OGKAAfoMh9ezpZjgiTdV3i3Rg2R15fDOzOc/hseflsGDhqu1D6DZm
vyvCQK6itQtP9CbkwjC6/0omca5aqk7DdPe/1XIcqh0Ixk52rS82ofd/pHR3QHEX
5EqjW+7dYYj1C8WfF0knlSbFPcRQISFGWUjqyMlzFe72ooBrWx6P6j1v0apLqP4/
yrlfrMB0KZKvUTaG7DX/KF0yDHrsVwa7cyhGALE+hjXO+BOlHty1SoMnCNlakCAC
BcPe9ugtXQnW0Cld0LblDaQ/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZcWo4n
Q8tqpq9eoRoPeT12H8YKMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD
NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG
c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6hVzZc32w8Ffz1S5myYN2rCDvlqJB7oqFVrwjTUOz6gkWTnK2cy6W
K+wn//9RTvJZXFxBaoWcsk8/8LzX4raflo6t1Inn1KmwFYh9hRx/vWl334zbL2Ih
eI7+2ZX4+i+1IJRS61BWFlgHJWNiX8QGRTJcO1qrumf4HUR0OzjhnAQMLkOWTKJT
HQDw+rLdTl++4sLuDOb5ptU215eCF9xC+Qav7CTsDd08IxuaCiagBOAU+lXPMsyE
JqMVM8mOVUj04mfYXfkKfyNR/mq9ArDxotI3wvKHTdrhMZS4CHF+8liywJK5HkHi
zY7lr4avHa4fZMJIAY9JYXPOv3XCTik5
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:50 2025 by rpki-client