Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier: irUARHsqcm5aldcRuixmSvz35LW8N26YDmYmwU+cvjE=
Subject key identifier: E9:BB:04:46:4E:C3:94:51:14:29:FC:A5:EC:34:11:A4:41:70:3A:FF
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number: 014F
Signing time: Fri 31 Jan 2025 03:25:28 +0000
Manifest this update: Fri 31 Jan 2025 03:25:28 +0000
Manifest next update: Fri 07 Feb 2025 03:25:28 +0000
Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: Ib1DRRF9yuJ6UkSsHAOcf2u7DxbuaO9wt25Wjb+dSXs=)
2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=)
3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Validity
Not Before: Jan 31 03:25:28 2025 GMT
Not After : Feb 7 03:25:28 2025 GMT
Subject: CN=679c42a8-3bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:69:c9:fb:eb:77:9b:d9:af:ed:31:81:fd:
62:65:b3:23:8e:2f:6c:6e:a8:23:02:e2:b4:3f:42:
d5:62:ae:89:1b:8f:d3:9f:cf:b8:ac:b2:1e:ad:ce:
95:5a:93:fa:66:f2:73:b1:37:69:57:13:d5:bf:64:
f2:dc:b6:ed:a3:3f:1a:24:0d:00:c9:4a:66:d2:f0:
2a:e8:fa:98:d4:29:fb:b8:f5:f1:10:f9:97:e8:0d:
01:74:f4:39:72:2e:c9:be:4d:5b:99:b2:ea:c7:d0:
96:97:9c:e7:c1:33:79:a6:f6:11:0e:06:0b:39:47:
63:ee:51:88:1e:85:61:a9:95:e4:98:c7:fb:11:b5:
96:d3:89:8c:37:90:6c:0d:59:87:d8:26:1a:32:f1:
86:a1:47:9c:48:03:80:13:ab:be:3f:fb:92:2c:7f:
11:e4:11:0d:0a:9f:68:ce:d5:7d:1c:42:d9:eb:0b:
cc:89:61:b5:76:cb:e3:e2:72:57:49:41:b1:be:cf:
63:e9:60:23:dc:d1:fd:44:c5:4b:ed:b3:7b:d9:a0:
e6:91:19:b2:74:2e:98:9b:2e:93:b6:dc:cb:54:45:
c7:0e:4a:cb:fb:0a:7f:44:76:4c:da:40:79:17:19:
e3:d3:b1:44:52:58:22:d2:19:9f:12:4d:3b:69:d9:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:04:46:4E:C3:94:51:14:29:FC:A5:EC:34:11:A4:41:70:3A:FF
X509v3 Authority Key Identifier:
keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f9:24:56:88:58:de:eb:1c:f1:cd:37:83:c5:95:4a:65:b3:
bb:f5:52:d5:75:84:f4:0c:cd:8e:a4:bd:79:f5:81:ca:64:83:
21:35:f1:db:d0:4b:6c:af:27:a3:f4:2f:db:5a:13:82:a7:b3:
91:00:b4:33:05:ec:9e:31:a0:2c:42:45:d4:41:48:ee:da:25:
16:78:68:23:42:2e:b6:86:1e:d3:93:db:82:c3:bc:e0:ac:f8:
21:32:41:27:18:77:13:47:9d:cc:64:59:b3:c0:13:91:b2:17:
e0:77:7f:87:7f:86:0e:da:94:f5:17:1a:63:ed:8c:1a:eb:08:
c9:e1:21:73:ae:60:d8:0a:2a:ad:7f:1c:64:9f:aa:68:9f:6a:
a9:29:f5:f0:b8:09:b9:db:ae:17:e3:52:64:a4:12:39:14:99:
dc:ee:ee:93:31:02:a3:ff:b7:d8:c4:3d:65:7d:67:35:fa:e4:
26:34:61:de:4b:52:39:20:ce:71:6d:ac:3a:43:ec:26:e4:e7:
05:29:80:fe:6a:75:db:42:ef:c8:65:eb:0f:87:05:69:82:b4:
85:c0:4c:0e:4e:1e:88:09:31:f2:57:87:59:4b:b8:57:9d:eb:
d6:ea:17:0c:26:3c:9f:84:63:fd:0c:05:15:2b:89:03:03:fb:
65:16:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:17 2025 by rpki-client