Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: qk5iXrd1nbHzkvFvnOCtreZyzYqjmbR/e2Td2fwp9go=
Subject key identifier: E9:52:64:BF:31:4C:32:AE:6C:8B:53:D0:FC:53:CE:BE:74:E7:F8:C0
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 010B
Signing time: Fri 31 Jan 2025 04:04:21 +0000
Manifest this update: Fri 31 Jan 2025 04:04:21 +0000
Manifest next update: Fri 07 Feb 2025 04:04:21 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: 6ZMMA9KL1Pc2FGAI1homYYxBh8Ol5/h6HhhbzsmuAz4=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: g/+jUDFbmU3qj9AfAKSl3kwzplQXj9NIVbGDOmw78Ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Jan 31 04:04:21 2025 GMT
Not After : Feb 7 04:04:21 2025 GMT
Subject: CN=679c4bc5-f326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:a5:e5:01:a3:ee:d2:5a:88:96:74:c2:4e:
da:29:af:7e:84:e3:e8:ee:d4:d3:4d:c4:1b:07:0e:
26:fe:a4:97:1d:02:11:e6:3f:02:6f:a2:87:bf:45:
56:47:79:21:69:21:b7:94:d1:cc:cc:6a:fd:29:51:
8e:07:74:9c:0b:29:36:1a:ff:6e:5d:f4:be:40:1e:
70:a9:0c:1f:e3:9b:49:50:19:47:3a:54:98:0f:77:
30:4d:68:2d:c9:0d:58:9a:18:80:5a:ea:a1:cb:96:
a9:c8:67:7d:a4:6e:a9:a2:61:05:2d:03:ba:b0:f6:
80:76:e1:a5:86:42:c3:f4:2e:d0:81:47:cc:8c:9a:
a4:b5:83:64:01:2c:cf:9b:6b:de:22:6b:a2:2a:1b:
d9:17:f4:cb:b7:1b:c3:a4:b0:95:5c:05:f3:86:0d:
1b:aa:aa:2f:f8:0a:4e:b4:f8:4c:a7:02:55:ce:10:
18:32:6a:7d:ee:bf:9f:30:c5:9e:8f:9a:5c:de:47:
de:2e:df:b9:51:46:08:e5:fd:26:ba:c9:5b:12:8b:
ce:64:16:aa:d1:b0:2b:8d:76:f2:62:ef:b6:9e:47:
ed:d6:6b:23:d8:54:7f:e7:55:31:d6:84:64:c9:0d:
17:38:2c:2b:d3:56:4b:93:3f:84:77:60:42:c6:b0:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:64:BF:31:4C:32:AE:6C:8B:53:D0:FC:53:CE:BE:74:E7:F8:C0
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:bc:8c:ce:3a:df:75:e3:50:0c:79:97:19:9d:bf:65:3a:
5a:74:f3:26:13:59:fd:02:1e:e8:4d:6a:29:bb:2c:27:ea:11:
d1:c9:5c:58:dc:67:d1:0d:8a:b3:ab:9c:06:d5:b9:3e:3c:ea:
fb:b7:a3:9d:99:84:93:fa:7b:85:54:5a:d0:74:72:58:bf:b7:
1a:3e:2f:64:80:ec:0b:ff:da:cd:8b:d6:85:51:0d:ed:f7:74:
92:ef:df:36:af:43:25:4b:f6:22:99:7c:9c:49:3c:2d:df:21:
e2:f8:2a:ab:e7:f8:13:39:88:ce:12:29:5e:d6:5a:02:a1:15:
7a:0b:8e:ac:3b:67:f9:a7:ba:6d:aa:90:6a:e4:f4:cf:61:aa:
f1:cb:5e:42:81:3f:93:20:53:f7:55:3a:0e:18:16:dd:d5:a8:
75:56:e9:bc:25:13:de:ce:b7:03:58:48:89:82:27:86:33:10:
ec:a5:bd:8a:6c:78:5b:df:79:07:64:f8:8f:f3:75:db:79:8a:
0f:fc:a1:0d:64:49:8b:b4:71:a0:5e:51:a3:40:b5:99:45:15:
7f:81:73:d8:66:2f:ee:f2:31:98:ce:3b:08:b3:ed:1b:48:12:
d6:07:b5:02:d3:d5:0e:94:46:f4:37:04:0c:e2:e4:e0:cd:21:
d9:fb:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:44 2025 by rpki-client