Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: s6ix1izhwGrW9D2ZcNLNMyANZ8vgrrj0doBDFhH+Jbg=
Subject key identifier: FC:19:28:55:CB:F4:FE:53:71:CD:A9:C2:C7:39:CE:1D:F6:9F:76:2C
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0646
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 0640
Signing time: Thu 30 Jan 2025 22:34:07 +0000
Manifest this update: Thu 30 Jan 2025 22:34:06 +0000
Manifest next update: Thu 06 Feb 2025 22:34:06 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: GVKneWydk5nHBe7KLcpei0JIFjq4K0yPCylmyqfAHW4=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: 1nhYzuuN3iiBPUuYvjPfED8ITVM34g4WPuGCXKX1a14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Jan 30 22:34:06 2025 GMT
Not After : Feb 6 22:34:06 2025 GMT
Subject: CN=679bfe5e-7c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:1f:75:0b:c2:e1:53:57:bc:45:d2:b5:99:
66:93:7d:6b:b9:3f:50:25:a6:59:12:be:96:76:95:
84:ed:ba:f9:07:cd:29:97:a7:c5:6d:5a:dd:21:4f:
f7:09:83:81:70:51:ad:7b:50:7b:37:37:7b:8d:d6:
da:50:fd:7b:58:1a:fc:33:33:a3:2c:c4:58:e6:46:
f2:cf:00:4e:2b:5e:a4:5b:75:96:66:d9:9b:bc:71:
51:ee:d7:4b:dd:f2:61:c6:e5:a5:2b:7b:fe:d3:b9:
f0:5e:8d:48:db:2c:b6:bf:d8:68:e3:9f:4a:ac:74:
7f:25:17:dd:ab:b7:e7:ac:d6:29:8f:8a:ea:00:19:
94:e3:3d:88:68:4b:2b:cb:eb:36:c2:91:fd:0b:13:
7c:fb:ae:8e:93:af:10:61:46:99:70:12:f4:1a:df:
d8:97:71:21:40:4a:bc:3a:40:3e:6b:89:9b:f0:5f:
a9:86:e5:77:b6:36:1b:21:55:12:ac:8e:79:40:6d:
cf:cd:ab:87:ab:3e:32:63:25:30:60:c4:2b:8d:a1:
b5:d3:e5:6d:bb:9d:e6:dd:de:40:5e:f6:96:09:0e:
b1:bb:bd:71:59:50:15:08:a0:a9:99:36:fa:e3:52:
b7:0e:0f:04:7b:85:7d:d5:7d:4b:08:3a:2e:33:2a:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:28:55:CB:F4:FE:53:71:CD:A9:C2:C7:39:CE:1D:F6:9F:76:2C
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:a3:32:e4:37:5c:45:b6:13:7a:b2:11:5c:36:0c:6a:9c:d9:
70:a6:41:07:a4:02:9a:2f:c7:de:ee:e2:ec:ea:57:c7:02:12:
a8:88:9e:41:1c:90:92:90:b8:c7:b8:b9:c7:49:23:5b:43:a5:
f3:9d:5a:37:24:10:7a:f2:d1:03:45:15:11:8d:51:b9:2f:d9:
55:f0:72:2b:94:ab:63:b6:f6:20:df:f5:82:8d:87:34:2b:b7:
3a:fb:00:b0:30:4a:26:ee:ad:e2:ba:9a:5c:f7:bb:f3:f5:d0:
f9:5d:4f:31:25:d9:3e:00:e0:80:5b:7f:33:8c:69:38:8a:a2:
df:c2:8d:73:05:9b:2a:28:ea:0e:96:c0:6c:7d:33:79:38:c0:
41:43:8b:60:de:33:b6:a9:10:56:96:6b:a2:f5:1d:2c:e3:a4:
06:f6:37:52:73:f9:22:c9:f8:97:9e:9f:64:fd:2d:ac:94:73:
6c:64:c7:a7:d9:4c:21:79:81:95:25:4b:15:e5:7b:a3:09:ff:
4c:c2:67:a7:53:16:2c:60:06:d6:45:dc:ee:47:cb:4f:0a:af:
05:0f:f7:b1:41:e0:69:7c:3b:ee:12:4c:62:43:51:b6:67:65:
2f:db:82:f5:18:99:5a:c7:ab:10:ab:f0:aa:0c:f9:00:c2:ec:
2e:fd:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:40:59 2025 by rpki-client