Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: f/tmmYbsmLZH9Mntn32yHiZCDYb3lDpvycv8YR3Zi2Q=
Subject key identifier: 68:8C:DB:E9:7B:41:E1:C2:89:B5:02:8B:F6:84:83:37:8F:19:95:69
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1CA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1C95
Signing time: Fri 31 Jan 2025 16:11:14 +0000
Manifest this update: Fri 31 Jan 2025 16:11:13 +0000
Manifest next update: Fri 07 Feb 2025 16:11:13 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: /WZ2D6nVfITEhINioF08CSvU0BM0BsihjLqS5lg9t4k=)
2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: nQvCGi6jeXRQddJ1rEuK0BsRcyU/PM81aNvBcFuVAoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7333 (0x1ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Jan 31 16:11:13 2025 GMT
Not After : Feb 7 16:11:13 2025 GMT
Subject: CN=679cf622-c9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:94:8b:db:29:7c:e4:e8:a6:2a:22:bc:85:
c3:b6:76:f8:b3:e8:e6:7c:97:6c:ee:ba:68:73:24:
25:b7:63:3c:7b:a4:ab:ad:e7:ae:d6:f7:d8:c7:23:
63:6c:79:01:19:d4:7d:7e:e6:11:4f:c2:6f:85:04:
f5:96:7d:9e:07:fe:e8:9f:bb:cc:89:51:9b:a7:d2:
5f:58:6b:12:62:53:d9:78:11:20:91:4e:91:ea:4f:
f1:33:dd:53:f2:d6:e5:7d:a8:3e:fd:d5:6f:70:d4:
5f:91:91:d2:db:34:22:4b:85:7b:44:54:1b:d5:c2:
23:24:23:65:6b:6e:d4:c5:5c:58:ef:12:ca:f4:5f:
5f:c9:3c:c0:ac:6f:b7:36:66:d9:fa:70:58:df:53:
c0:46:5c:11:e2:47:a8:59:97:42:d0:8d:61:c7:d1:
f2:b8:c1:1f:f5:db:54:4f:64:6a:c3:f6:50:89:24:
f1:55:36:f5:18:51:2c:e7:c2:7e:0b:0c:ee:87:48:
14:cb:e1:0c:1f:97:7b:fa:23:43:3a:84:b4:56:a7:
64:99:5d:96:c0:01:e4:66:94:aa:bf:29:a9:06:79:
ac:58:f9:00:c4:56:a0:d5:97:22:83:45:92:9c:25:
d2:26:2e:ca:e3:c4:c1:21:4b:2e:7f:74:3f:c4:0d:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:DB:E9:7B:41:E1:C2:89:B5:02:8B:F6:84:83:37:8F:19:95:69
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:e4:50:f7:c8:8b:2a:8b:c6:2f:ee:b4:a1:d5:cc:17:71:
0f:f3:0a:4d:20:a2:e4:bc:13:08:67:12:4d:2d:e9:43:54:61:
ee:e3:be:9a:54:fc:22:d0:9c:b1:cc:54:58:3a:1e:cd:67:91:
f7:c3:a3:b4:66:22:aa:c0:46:c0:85:6e:0a:7d:13:27:9b:6c:
40:34:7d:01:0a:f0:e7:99:20:9e:6f:a7:c7:5e:2c:a7:86:7a:
3e:3c:64:ce:06:8a:db:28:b3:b2:86:9b:58:2c:ec:ee:c5:e1:
b7:d8:bd:9a:64:99:8c:3b:9f:8e:3b:c3:fd:71:eb:34:a0:e9:
eb:88:40:97:68:48:0d:f0:a4:f1:30:b5:07:cc:48:38:9a:75:
b0:51:65:76:f7:e9:a2:72:db:3e:a1:38:a7:54:88:66:a2:c3:
f7:33:a9:e2:37:40:0c:4f:dc:da:1b:2b:31:0f:32:60:a5:ee:
67:00:60:10:99:34:f6:a4:66:aa:fa:4c:32:d8:b7:3b:61:d7:
d8:f2:22:b9:f4:e4:59:00:f6:83:03:95:42:75:0c:c7:8b:46:
d0:25:ff:84:9f:36:83:05:bf:24:94:40:66:9a:5e:53:29:1f:
57:55:77:26:09:ad:a4:96:6e:52:df:94:f4:f5:13:83:5d:cc:
44:4f:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:04 2025 by rpki-client