Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json)
Hash identifier: c0l1bAzBRuFnM7BOTiuCccApQRhhG9dODBR0VPIOoVk=
Subject key identifier: 4D:99:E4:3C:53:BD:B7:6F:98:16:70:65:87:25:26:89:C3:92:5C:76
Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Certificate serial: 170A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
Manifest number: 16EF
Signing time: Fri 31 Jan 2025 16:39:00 +0000
Manifest this update: Fri 31 Jan 2025 16:38:59 +0000
Manifest next update: Fri 07 Feb 2025 16:38:59 +0000
Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: StJk5LfpFfH4nTbHg6tRxf+BMnzoGxjXhI5heFRexSk=)
2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: N4cX9Gn5/2UN1QBdCa0fdRS9KCB6RvJx+JIs1tA6NvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5898 (0x170a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Validity
Not Before: Jan 31 16:38:59 2025 GMT
Not After : Feb 7 16:38:59 2025 GMT
Subject: CN=679cfca3-3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:92:d3:3b:7c:8c:cb:a0:c3:b3:1e:91:df:
bb:5d:d5:49:c0:f9:99:50:d0:9f:b2:5c:f5:29:cb:
8d:6e:ab:89:76:09:a8:2c:09:ef:34:7c:c5:a9:c9:
07:f2:27:9f:65:ee:02:e4:cd:0c:47:1e:98:b4:4f:
10:55:c6:2e:eb:29:87:c0:5a:a2:1a:77:e9:d7:6b:
8a:1f:14:88:31:b9:c1:27:a8:c5:c3:09:91:e1:62:
49:ab:a0:e4:93:50:88:ab:74:67:34:15:d6:85:ba:
69:7a:4e:60:5b:d5:cb:00:6c:01:31:8a:62:d3:03:
59:18:f0:be:ac:be:b8:08:50:a4:27:a3:53:21:0a:
cc:e8:8c:e0:0b:f3:e6:01:4f:2a:f6:90:7b:29:2b:
7f:c7:0c:3e:b4:90:a2:5d:aa:83:6a:de:41:88:f8:
a7:29:27:da:cc:13:cf:20:f3:b0:14:50:8b:79:82:
a6:78:80:b2:7b:31:26:91:69:7a:5d:9d:a3:16:1d:
2a:24:5b:b9:c5:91:23:69:c0:96:ec:e2:8a:8f:7c:
ab:a9:41:27:1f:3b:7f:b8:fd:d8:c8:cb:eb:f0:96:
19:44:2e:6d:5c:8b:15:08:c9:80:53:c5:5b:eb:f7:
df:3a:f0:b7:6f:34:b9:f5:29:dc:47:5a:ea:61:6d:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:E4:3C:53:BD:B7:6F:98:16:70:65:87:25:26:89:C3:92:5C:76
X509v3 Authority Key Identifier:
keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:51:b2:fe:bf:41:f1:8c:9f:86:12:7b:b4:57:e9:02:ba:ad:
c9:e3:7a:e6:a7:b5:0d:e4:8e:6c:ea:14:18:4a:16:f4:89:03:
be:62:06:c5:da:04:0e:97:34:b8:10:19:91:e4:f3:cb:96:46:
53:9e:bf:6c:4e:26:c3:3a:33:61:4f:55:7e:f6:c4:a1:6b:fe:
e2:4d:de:7d:9a:80:22:35:17:8d:69:d9:3c:7b:60:95:d2:cf:
69:3d:6f:c5:a9:ef:cd:32:31:01:91:7c:00:b8:67:8d:81:f1:
fd:c5:e0:5e:4c:9d:55:2e:63:f5:c2:f0:39:33:bd:df:af:f5:
d4:df:34:47:75:e6:0d:96:02:e7:ca:fc:4b:6c:ac:ea:9d:ed:
b7:6c:c2:a5:d7:1b:b5:76:be:59:91:09:0b:71:a1:9a:b1:20:
69:14:af:22:a9:d1:a3:0b:6e:1e:56:20:5b:c0:24:bf:e0:79:
f8:99:6d:a8:9e:b5:37:15:41:f5:f9:a9:d0:0f:86:ca:66:59:
23:d1:c1:f3:a0:e7:bb:b8:9c:69:4f:f6:cd:bb:68:bc:9b:c4:
fb:b7:05:3a:0d:7c:4c:8a:f4:6c:cb:52:e6:17:17:ec:ad:01:
d4:85:39:6a:96:07:17:fe:16:2c:09:97:2e:a9:c2:60:ea:3c:
c3:c2:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:54 2025 by rpki-client