Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json)
Hash identifier: pnI60JeBg6poVdMN1kBgpVAikTnpXkEQTUrceNeWnAs=
Subject key identifier: D5:00:37:34:3B:C6:D1:B2:A7:6E:CE:63:4F:8B:A9:B3:E7:8E:C9:6A
Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Certificate serial: 0B08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
Manifest number: 0B01
Signing time: Thu 30 Jan 2025 19:19:30 +0000
Manifest this update: Thu 30 Jan 2025 19:19:29 +0000
Manifest next update: Thu 06 Feb 2025 19:19:29 +0000
Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: uzwJNX7FwMs5Vp1zeLnfS1nDw/bmgmKTdkCqS5iicVo=)
2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: srLpp+xocz4bwmTO830ebrOgQWtT6RHMkR4y8UuRo2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Validity
Not Before: Jan 30 19:19:29 2025 GMT
Not After : Feb 6 19:19:29 2025 GMT
Subject: CN=679bd0c2-be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:54:51:a6:6e:9c:ce:39:8f:60:c5:3b:d8:
c0:0a:10:54:19:c5:e7:0f:fa:83:b8:64:ae:74:44:
7c:68:5a:9c:70:81:f4:77:f2:89:15:4f:e2:27:c3:
82:6e:a4:69:9b:fb:f2:b7:93:8b:51:23:0a:1d:66:
2a:0d:bc:7f:55:8f:e3:3d:f0:8b:56:8e:b8:7a:d4:
3f:b5:1e:09:38:01:56:1f:32:62:e1:af:57:c6:cb:
3a:58:52:2d:52:8f:72:e2:19:57:60:3d:67:6d:6b:
82:95:8d:fa:7d:34:40:26:c4:d4:f9:fc:45:c3:b6:
30:dd:ca:70:f7:f1:d0:f1:f6:53:1a:da:1f:46:0d:
2c:0a:11:19:fe:28:69:3a:91:9d:db:86:dc:b2:ed:
12:3b:d7:2f:8a:ba:a2:1b:4f:44:52:65:9d:0b:fb:
a3:27:72:19:1b:dd:4f:6b:14:b1:61:88:82:55:64:
ce:af:a7:7f:fd:d2:11:1c:20:ae:9b:90:c6:d4:d7:
cb:ac:51:63:9b:ba:32:66:0b:fd:7d:fc:db:f1:40:
c3:c5:c5:b2:30:6d:b3:ec:4d:3f:ba:e9:b5:c4:87:
a1:ce:ea:a9:a9:7e:24:ce:38:8c:8c:f2:3c:60:da:
92:f9:ba:21:69:83:5c:2b:64:ef:b3:07:14:ad:fa:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:37:34:3B:C6:D1:B2:A7:6E:CE:63:4F:8B:A9:B3:E7:8E:C9:6A
X509v3 Authority Key Identifier:
keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:1f:f8:bf:6d:32:fe:6e:b0:01:13:5c:12:49:d3:b9:d7:
82:69:5e:3c:e0:bc:e7:30:6b:83:bd:df:7a:6a:10:1c:a5:50:
ff:77:b8:90:b3:c0:33:0b:75:c6:fc:05:62:32:76:84:b5:cc:
e5:a4:2c:d5:3d:08:ae:91:4a:93:d2:5a:28:99:fb:e1:fa:19:
be:a9:b0:2b:2c:8b:bd:02:77:e3:d5:90:f3:c9:7d:3f:a3:e3:
d2:9c:4a:15:87:31:91:8f:70:6d:53:3e:c0:3b:a5:ea:b0:9b:
bd:57:18:d7:df:4e:db:08:df:c5:7f:ee:bc:e5:91:c6:61:36:
ff:3f:41:83:7c:09:80:8e:16:d0:e0:65:6c:d0:da:ad:0a:14:
49:82:e1:b6:43:fa:a7:15:92:10:e0:6c:c2:e6:2e:5f:e5:4a:
f4:43:2f:f6:4f:6f:d1:45:80:d9:f5:56:59:fb:6a:52:ab:40:
75:bd:51:7b:b2:cf:c2:d6:41:f0:3b:78:af:d5:b2:90:3a:2b:
84:a7:10:ab:34:20:56:30:2b:03:d8:c0:af:0f:52:e0:65:4c:
1f:47:03:11:9b:04:21:ca:c1:20:73:eb:6b:1c:a4:9f:4c:49:
87:45:b4:ac:47:23:31:53:ac:32:11:c6:25:fa:e7:2f:f2:5c:
99:ae:16:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB
ODhBNzM1RDkwHhcNMjUwMTMwMTkxOTI5WhcNMjUwMjA2MTkxOTI5WjAYMRYwFAYD
VQQDEw02NzliZDBjMi1iZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZNUUaZunM45j2DFO9jAChBUGcXnD/qDuGSudER8aFqccIH0d/KJFU/iJ8OC
bqRpm/vyt5OLUSMKHWYqDbx/VY/jPfCLVo64etQ/tR4JOAFWHzJi4a9Xxss6WFIt
Uo9y4hlXYD1nbWuClY36fTRAJsTU+fxFw7Yw3cpw9/HQ8fZTGtofRg0sChEZ/ihp
OpGd24bcsu0SO9cvirqiG09EUmWdC/ujJ3IZG91PaxSxYYiCVWTOr6d//dIRHCCu
m5DG1NfLrFFjm7oyZgv9ffzb8UDDxcWyMG2z7E0/uum1xIehzuqpqX4kzjiMjPI8
YNqS+bohaYNcK2TvswcUrfqbDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUANzQ7
xtGyp27OY0+LqbPnjslqMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4
NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG
U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+Sh/4v20y/m6wARNcEknTudeCaV484LznMGuDvd96ahAcpVD/d7iQ
s8AzC3XG/AViMnaEtczlpCzVPQiukUqT0loomfvh+hm+qbArLIu9Anfj1ZDzyX0/
o+PSnEoVhzGRj3BtUz7AO6XqsJu9VxjX307bCN/Ff+685ZHGYTb/P0GDfAmAjhbQ
4GVs0NqtChRJguG2Q/qnFZIQ4GzC5i5f5Ur0Qy/2T2/RRYDZ9VZZ+2pSq0B1vVF7
ss/C1kHwO3iv1bKQOiuEpxCrNCBWMCsD2MCvD1LgZUwfRwMRmwQhysEgc+trHKSf
TEmHRbSsRyMxU6wyEcYl+ucv8lyZrhYV
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:39 2025 by rpki-client