Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json)
Hash identifier: HnqfKnVQ/vksHdafF7RNBG63f7qotjnspd5chN3h1SI=
Subject key identifier: E3:31:DA:D8:6C:24:C7:AD:26:B4:59:52:19:10:BA:8E:02:91:D5:5F
Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
Manifest number: 029D
Signing time: Fri 31 Jan 2025 01:36:57 +0000
Manifest this update: Fri 31 Jan 2025 01:36:56 +0000
Manifest next update: Fri 07 Feb 2025 01:36:56 +0000
Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: pKxEZz+WoEEZ26KbhsLzFSq7vFUAwosXx3/XzQm6EHY=)
2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: mDMM1HWL4v8E6URAbVQH/swVIK5fppcG8TmZuHg6PMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Validity
Not Before: Jan 31 01:36:56 2025 GMT
Not After : Feb 7 01:36:56 2025 GMT
Subject: CN=679c2939-5e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8b:b8:4c:5b:cf:23:4a:53:2e:aa:e1:90:e6:
4e:1e:ca:f3:43:7b:b3:37:22:10:d0:03:68:6d:08:
9f:25:46:c5:d5:55:4c:86:99:d3:12:d5:e6:f6:9c:
39:60:35:54:fb:bf:5c:44:8b:de:f3:e8:73:bb:f2:
71:51:c8:f9:4c:01:21:d5:bf:ac:08:6d:0d:ef:f2:
82:31:04:9c:2e:ca:3d:cb:fa:0b:3b:6a:d1:77:2e:
b6:33:87:8b:8b:b0:37:61:b2:66:af:f5:1c:f9:db:
99:64:c5:ac:ba:2b:2e:32:8a:9d:80:f2:f6:1d:e9:
f2:ba:a4:e6:8c:63:81:e5:24:8d:85:8e:b0:af:e3:
95:fe:ab:33:64:76:9a:81:7c:19:01:d1:61:ca:a1:
28:6c:44:47:a0:1a:45:ae:78:e7:27:82:e4:78:10:
41:23:90:28:2e:ef:21:7d:1a:38:17:c1:6f:70:80:
e9:ab:d0:dc:ee:a9:dd:5e:ba:39:b0:1d:35:6e:d8:
6e:a2:ef:df:07:a4:a9:69:9d:58:1f:96:7a:6f:f7:
ac:4d:8a:75:8f:63:62:87:25:18:47:68:1d:5c:81:
84:9b:77:8b:27:77:d3:fa:e4:27:96:65:cf:17:a6:
ac:25:71:d8:26:bd:99:79:5c:8c:79:c7:08:a6:78:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:31:DA:D8:6C:24:C7:AD:26:B4:59:52:19:10:BA:8E:02:91:D5:5F
X509v3 Authority Key Identifier:
keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:72:f4:e7:73:b8:9c:00:4e:f0:72:57:ba:ff:01:10:d5:b7:
11:d0:ed:12:e8:69:de:fd:0c:a0:05:c9:5b:2d:60:05:14:51:
26:7f:b9:12:f8:9d:ae:fe:9a:cd:c6:95:e2:fc:38:8d:9a:36:
d7:25:cb:91:8f:e4:81:a9:52:1c:f6:fd:2a:28:0b:81:ec:92:
19:10:50:69:d4:a5:3d:51:56:b2:a9:99:7c:98:e2:6c:76:83:
f1:62:14:ec:c1:c6:97:24:50:41:5d:9e:b7:48:90:d0:c9:7e:
6e:69:ef:ca:30:18:4c:ee:e8:38:e4:57:5a:8e:cc:de:f7:8a:
09:cd:0c:ee:07:e2:7b:9a:68:4d:d6:ee:30:bb:b2:54:a8:d5:
78:73:51:dc:15:78:5b:20:62:18:2d:88:b0:d9:54:25:f7:ce:
f8:46:2c:eb:fa:13:0e:a4:75:b7:6f:31:0c:e8:c4:2e:13:39:
b5:83:35:ba:82:b6:de:a3:96:e2:31:7c:29:63:45:bd:e0:b1:
67:f8:c7:a3:9b:07:7c:65:8c:50:8e:88:eb:4d:46:54:20:27:
10:8b:c2:20:25:db:65:e5:91:7d:71:53:6f:3c:5e:18:dc:a4:
6b:59:f4:63:77:27:36:5a:38:d3:5a:98:3c:d0:39:d9:e1:c8:
2d:9d:c8:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3
MUE1QTRFNDIwHhcNMjUwMTMxMDEzNjU2WhcNMjUwMjA3MDEzNjU2WjAYMRYwFAYD
VQQDEw02NzljMjkzOS01ZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA94u4TFvPI0pTLqrhkOZOHsrzQ3uzNyIQ0ANobQifJUbF1VVMhpnTEtXm9pw5
YDVU+79cRIve8+hzu/JxUcj5TAEh1b+sCG0N7/KCMQScLso9y/oLO2rRdy62M4eL
i7A3YbJmr/Uc+duZZMWsuisuMoqdgPL2HenyuqTmjGOB5SSNhY6wr+OV/qszZHaa
gXwZAdFhyqEobERHoBpFrnjnJ4LkeBBBI5AoLu8hfRo4F8FvcIDpq9Dc7qndXro5
sB01bthuou/fB6SpaZ1YH5Z6b/esTYp1j2NihyUYR2gdXIGEm3eLJ3fT+uQnlmXP
F6asJXHYJr2ZeVyMeccIpngurQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMx2ths
JMetJrRZUhkQuo4CkdVfMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3
MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001
dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJcvTnc7icAE7wcle6/wEQ1bcR0O0S6Gne/QygBclbLWAFFFEmf7kS
+J2u/prNxpXi/DiNmjbXJcuRj+SBqVIc9v0qKAuB7JIZEFBp1KU9UVayqZl8mOJs
doPxYhTswcaXJFBBXZ63SJDQyX5uae/KMBhM7ug45Fdajsze94oJzQzuB+J7mmhN
1u4wu7JUqNV4c1HcFXhbIGIYLYiw2VQl9874Rizr+hMOpHW3bzEM6MQuEzm1gzW6
grbeo5biMXwpY0W94LFn+Mejmwd8ZYxQjojrTUZUICcQi8IgJdtl5ZF9cVNvPF4Y
3KRrWfRjdyc2WjjTWpg80DnZ4cgtncgb
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:18 2025 by rpki-client