Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier: TsGn4O7kx9jj/ZKM+Pt6uD/UYFrMalamWXOdGoMDaws=
Subject key identifier: 92:75:87:26:45:2D:45:7D:26:3C:8B:82:1E:AC:0E:28:BF:D4:E8:DF
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 03:39:25 +0000
Manifest this update: Fri 31 Jan 2025 03:39:24 +0000
Manifest next update: Fri 07 Feb 2025 03:39:24 +0000
Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: y+RPVsLW9+L5Dith9w0DLWNnWPt82IiTBTCmcpP5UFM=)
2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Validity
Not Before: Jan 31 03:39:24 2025 GMT
Not After : Feb 7 03:39:24 2025 GMT
Subject: CN=679c45ed-df02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:13:48:f6:71:f2:15:de:e6:30:02:40:bd:
a1:36:15:a6:67:bd:86:41:ca:0f:2e:1e:c0:f2:ec:
8b:e8:c3:db:e3:d4:be:8b:ab:77:c8:b4:67:87:9c:
f2:ed:90:00:03:47:86:7f:09:1b:64:90:0c:ee:6d:
0b:80:03:2a:e3:89:96:61:36:dc:b1:03:f6:47:f5:
92:98:42:c4:8d:a9:91:a6:b3:1a:3b:fa:c1:b3:5c:
7b:52:84:ab:8a:8b:d7:db:c0:b3:1f:50:05:2e:fe:
94:ce:02:a5:61:51:be:b1:2a:0f:ce:10:b3:be:8b:
0f:3f:6a:25:9d:c7:7b:45:99:11:d4:0c:12:d6:d7:
c8:f3:c6:22:18:d4:2d:46:9d:dd:ad:f6:a0:5a:74:
cd:f2:c8:70:9e:a8:f6:b3:a8:b8:4f:77:7b:b6:b0:
37:59:a3:05:8f:ff:97:53:97:d8:2d:cc:8f:49:e2:
d6:d6:14:9e:31:f1:dc:74:82:6b:c4:f2:1d:e7:82:
d5:7e:3b:2c:a2:c7:31:f4:aa:4a:44:26:d2:59:e3:
3e:5c:9f:88:b3:e2:91:5d:43:fa:96:b1:30:88:0f:
ce:78:4e:ef:93:89:d6:06:7f:da:d5:f7:90:bd:7e:
d9:86:9f:f0:3e:97:a6:2a:f5:5f:9b:6e:b9:5d:1c:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:87:26:45:2D:45:7D:26:3C:8B:82:1E:AC:0E:28:BF:D4:E8:DF
X509v3 Authority Key Identifier:
keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d9:d1:da:66:ee:62:23:fd:96:b8:f8:56:22:c9:c2:27:e6:
79:70:b1:48:1b:af:30:27:e8:e0:52:c1:c2:0a:4f:96:1e:e2:
59:9f:03:33:e2:eb:06:91:15:d6:f9:a9:c1:f9:47:e6:76:16:
0b:a4:a6:5b:2f:5d:40:24:16:6e:75:e7:41:cf:04:12:b9:4e:
bf:af:37:09:10:16:71:9f:11:3e:97:1f:60:a9:02:b0:fa:e3:
12:c1:d6:60:07:1a:a2:3d:a6:6e:93:fb:c4:80:f4:d4:7e:15:
f1:4c:03:aa:4d:bb:44:92:53:27:5b:c5:05:c0:a6:6c:6f:1b:
8f:32:90:df:14:be:9c:92:ee:f1:fb:82:11:18:b4:9e:12:5d:
3b:8e:0f:64:e0:36:97:06:81:4f:8c:8f:dc:27:d3:42:4e:d5:
83:c1:3a:0b:34:92:da:18:03:49:9e:54:bc:bc:70:46:ef:d2:
74:ff:08:fd:aa:6a:9b:2f:5b:b9:bf:c8:a1:16:60:10:be:50:
8b:67:33:82:6a:5b:0e:ac:0a:8e:48:26:f9:63:63:7f:b1:fd:
43:1f:7a:35:bd:1f:de:ae:80:84:b5:be:d5:e5:11:c4:f4:43:
2b:42:21:d8:4c:80:88:34:33:dc:74:8e:b6:11:f2:93:b2:d1:
62:3e:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:36 2025 by rpki-client