Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier: RJrLyF2bOGdLVJoyF/3eMFBbvxW0agzssAYrs6OuIu8=
Subject key identifier: 6F:0A:E0:C6:27:B9:03:D7:B3:6D:FE:6F:48:41:F4:FA:46:29:DC:70
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number: 01C7
Signing time: Fri 31 Jan 2025 02:20:07 +0000
Manifest this update: Fri 31 Jan 2025 02:20:07 +0000
Manifest next update: Fri 07 Feb 2025 02:20:07 +0000
Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: RGGTBtNE7j1sz2rp5YnsG2No2u9VRT7Sh7zxJsdQGW4=)
2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Validity
Not Before: Jan 31 02:20:07 2025 GMT
Not After : Feb 7 02:20:07 2025 GMT
Subject: CN=679c3357-325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:3a:50:cc:a6:8c:64:8d:f2:cf:9b:0b:42:
9a:32:57:f1:f3:7e:57:21:5a:d4:2e:66:1c:49:77:
80:4a:1a:8a:a3:b8:3a:c2:46:2b:b9:f6:5c:b3:7d:
6b:51:01:8e:54:50:09:2c:4a:47:c3:cf:fc:db:d0:
0d:8b:93:ae:51:f9:67:d0:c1:b3:a4:bd:ee:7e:93:
a7:9f:ec:b0:6e:5e:6d:ca:8c:9c:9e:e9:7e:f0:c0:
48:fd:7e:00:eb:33:d0:48:86:fa:8b:f1:87:ac:1b:
d8:62:1b:6b:31:bc:4c:f1:cd:9b:aa:bf:d4:ce:c0:
63:de:59:09:52:ac:c6:b0:7f:88:2f:a7:47:5d:ea:
bc:2f:a3:9f:dc:b1:e4:30:bb:e7:36:e2:2c:9c:70:
bf:1b:8f:50:27:b5:a8:e0:d0:d9:f1:78:f1:f7:09:
4f:ac:6f:be:72:63:6b:3e:f8:0d:0d:8d:40:60:94:
ec:83:fd:5f:b6:57:36:c4:e2:d6:3f:f0:cb:f2:d3:
b2:f2:c5:e0:fd:d9:ca:95:a5:5d:22:e5:04:c8:90:
4d:2b:2f:71:9f:6e:71:f2:2a:2b:10:b9:e3:f6:e6:
2c:8f:b1:1e:35:4c:e1:54:f5:ae:04:4a:7e:2c:3c:
03:9b:b1:fc:20:21:2d:af:42:74:78:d4:ac:bd:20:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:E0:C6:27:B9:03:D7:B3:6D:FE:6F:48:41:F4:FA:46:29:DC:70
X509v3 Authority Key Identifier:
keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:90:04:a0:0b:09:f6:ea:41:bb:95:ff:16:e0:15:3c:7a:a8:
82:72:3b:a4:c7:cd:93:3b:2b:c4:a0:af:b3:cb:3e:0d:77:4b:
1e:a8:12:0e:78:ba:d1:69:dc:a1:4c:cf:d1:fd:aa:86:6e:e7:
54:a2:92:49:55:10:9e:4c:b5:b7:f6:22:1c:34:0a:9e:03:8e:
b0:f6:0b:24:e5:1b:b7:d9:e7:67:d2:27:7c:77:1d:f3:a6:7a:
af:64:bf:46:40:3e:39:3f:c7:62:9a:1e:28:32:c8:72:86:ec:
20:d7:9a:4d:bd:d7:6b:2b:fd:26:d6:2d:58:4f:ed:9b:48:98:
72:b8:92:2f:22:ce:b7:77:f1:6d:8e:16:77:66:d0:fd:ba:22:
4d:5c:8a:26:a3:d7:01:d8:02:91:a7:eb:47:03:97:8d:4d:40:
b4:3b:9e:f7:36:81:54:71:ac:0f:df:3c:20:bc:71:ed:73:b0:
ae:3e:52:e6:cd:95:4a:9e:be:b0:39:e3:90:68:5c:fb:37:5c:
35:4d:52:a6:ee:b2:d7:d4:39:cb:1f:a1:19:02:ca:4a:f3:c6:
a1:6e:65:2c:96:eb:dc:fb:00:77:b5:d2:5a:e1:82:39:fa:c4:
3a:22:17:a9:4a:c9:35:47:4f:81:da:0e:71:b3:b9:b4:5b:f8:
f1:57:7f:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4
Mjg2QTdGRDgwHhcNMjUwMTMxMDIyMDA3WhcNMjUwMjA3MDIyMDA3WjAYMRYwFAYD
VQQDEw02NzljMzM1Ny0zMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0o46UMymjGSN8s+bC0KaMlfx835XIVrULmYcSXeAShqKo7g6wkYrufZcs31r
UQGOVFAJLEpHw8/829ANi5OuUfln0MGzpL3ufpOnn+ywbl5tyoycnul+8MBI/X4A
6zPQSIb6i/GHrBvYYhtrMbxM8c2bqr/UzsBj3lkJUqzGsH+IL6dHXeq8L6Of3LHk
MLvnNuIsnHC/G49QJ7Wo4NDZ8Xjx9wlPrG++cmNrPvgNDY1AYJTsg/1ftlc2xOLW
P/DL8tOy8sXg/dnKlaVdIuUEyJBNKy9xn25x8iorELnj9uYsj7EeNUzhVPWuBEp+
LDwDm7H8ICEtr0J0eNSsvSAHeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8K4MYn
uQPXs23+b0hB9PpGKdxwMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC
NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC
NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLkASgCwn26kG7lf8W4BU8eqiCcjukx82TOyvEoK+zyz4Nd0seqBIO
eLrRadyhTM/R/aqGbudUopJJVRCeTLW39iIcNAqeA46w9gsk5Ru32edn0id8dx3z
pnqvZL9GQD45P8dimh4oMshyhuwg15pNvddrK/0m1i1YT+2bSJhyuJIvIs63d/Ft
jhZ3ZtD9uiJNXIomo9cB2AKRp+tHA5eNTUC0O573NoFUcawP3zwgvHHtc7CuPlLm
zZVKnr6wOeOQaFz7N1w1TVKm7rLX1DnLH6EZAspK88ahbmUsluvc+wB3tdJa4YI5
+sQ6IhepSsk1R0+B2g5xs7m0W/jxV389
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:17 2025 by rpki-client