Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json)
Hash identifier: zSEVMGCxU8wZ84RTgvdIxkHGrMeOZNPHA3NikLjCGPY=
Subject key identifier: DE:00:01:64:02:04:CB:9A:54:75:8E:E6:C6:ED:76:9F:0D:59:2A:3A
Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72
Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 04:21:14 +0000
Manifest this update: Fri 31 Jan 2025 04:21:13 +0000
Manifest next update: Fri 07 Feb 2025 04:21:13 +0000
Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: u7k/0l2+BCT65f+VYX7l/ZHJnNye3YZ5y0lDpecJNdA=)
2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172
Validity
Not Before: Jan 31 04:21:13 2025 GMT
Not After : Feb 7 04:21:13 2025 GMT
Subject: CN=679c4fb9-fb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:45:b3:77:65:9c:43:af:a5:97:60:96:45:
3f:ab:d3:fb:a8:2a:73:34:d6:2a:12:84:75:80:68:
9f:a2:e6:c4:c8:84:85:75:55:12:d5:13:37:7e:71:
d3:14:ed:71:2d:2a:71:82:26:7f:9c:68:a2:37:a8:
4c:ec:36:db:ac:91:c7:6e:e1:af:28:d3:ae:24:b0:
d8:4d:9d:35:a3:43:92:93:1a:21:bc:30:a4:d9:7e:
3f:b1:26:0f:c0:41:e3:43:48:aa:ff:c3:10:90:e0:
5c:bd:9f:f8:16:fd:34:73:77:76:fd:06:9c:6d:60:
4f:9d:b7:5e:36:86:a9:c7:f2:0e:79:1d:fa:ed:bd:
b0:9f:5e:e7:67:0e:c6:61:6f:b5:55:44:c6:bf:f8:
94:f1:09:41:e2:26:96:96:2b:fb:f4:14:52:8b:43:
89:c3:3a:27:52:b8:54:54:ba:6b:0d:74:0a:d8:1c:
a5:a8:e2:06:f8:1d:5b:6e:5e:3f:8f:f1:68:10:c9:
91:82:a0:65:46:3b:d7:07:5c:0c:36:a5:43:d0:da:
bb:8b:30:43:4d:8c:50:fe:5a:82:94:7f:61:5f:e4:
a2:03:b8:34:88:e6:67:0f:cf:7f:8c:0d:e2:8b:75:
0a:20:63:6b:e0:52:b8:b4:47:97:22:35:bb:79:eb:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:01:64:02:04:CB:9A:54:75:8E:E6:C6:ED:76:9F:0D:59:2A:3A
X509v3 Authority Key Identifier:
keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c5:f1:cd:5b:9a:ff:0c:e5:6e:0e:23:54:9d:7b:73:ab:df:
f6:fb:c5:b7:7a:fa:4b:7a:20:c0:ff:8a:0e:de:54:8b:ea:14:
72:09:c1:a2:e8:19:ba:66:3e:35:7f:24:23:38:cd:6c:76:4f:
96:6a:94:6f:54:fb:e8:7e:68:df:17:5a:32:88:2f:dc:7d:af:
73:9e:ac:a9:16:e0:13:c0:e5:66:65:73:40:02:5c:20:57:45:
76:58:b4:e6:19:06:58:25:f9:ea:58:5e:6b:0d:39:e1:4b:8b:
26:cb:e8:48:eb:ba:65:d7:2f:82:9b:d7:b1:6e:7d:91:44:ac:
35:90:e5:d2:61:79:3d:f5:b9:85:d8:88:26:dd:1a:67:ae:40:
a5:40:e4:12:03:22:6b:83:b9:14:3a:59:07:0d:d5:aa:25:53:
fa:0a:f5:af:24:94:83:b1:f7:c8:1d:bd:d9:b1:d7:38:af:46:
0f:87:2d:90:b2:69:df:72:52:c1:fd:2f:6c:15:d7:e0:38:e0:
9d:14:d9:e3:80:75:db:b5:41:c8:29:33:c7:7c:c9:e6:9d:b2:
9c:74:09:41:ad:79:17:36:05:40:bc:0a:a8:15:67:b3:6e:e3:
ea:0e:8a:aa:9e:39:ba:c0:26:9c:a3:97:68:ae:bc:f7:52:82:
6e:38:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:31 2025 by rpki-client