Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File: bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier: QHK1QC24aAsuHW/47B+xGyKHf86FGiJ99NEj3/2J768=
Subject key identifier: 6A:0C:E1:85:60:23:22:79:18:28:C4:E7:13:E9:F8:2E:A9:8F:C1:AB
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial: 0338
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number: 0335
Signing time: Fri 31 Jan 2025 01:08:53 +0000
Manifest this update: Fri 31 Jan 2025 01:08:53 +0000
Manifest next update: Fri 07 Feb 2025 01:08:53 +0000
Files and hashes: 1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: Vfyqgc44DgmzYIjt3dixErbQEGIzl3J20fIhZQaj4mY=)
2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: nblh+5P2jzg1bMqRThBjnqcnLIQTwLiSBjLF6YnXjMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Validity
Not Before: Jan 31 01:08:53 2025 GMT
Not After : Feb 7 01:08:53 2025 GMT
Subject: CN=679c22a5-5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:04:f9:0f:cc:c9:4d:fa:97:f5:ad:d0:83:
8e:f9:84:ac:5c:8e:3b:b9:cf:f4:40:a2:44:a1:b9:
2b:80:51:64:71:44:7f:11:63:ce:60:24:20:d7:b6:
50:1e:e7:06:c6:03:5a:74:f5:1c:bf:02:05:ed:a7:
1e:5d:9c:38:43:e1:06:0c:2a:a1:d1:3e:69:f5:a1:
26:f9:39:ef:93:e4:fb:75:0a:ac:da:a9:09:ea:79:
24:9f:ca:42:65:eb:c0:db:2d:dd:12:f4:fb:77:f1:
e8:29:90:62:b4:6c:29:7c:6c:31:5a:02:2b:c1:db:
cc:15:55:d5:ec:5b:6f:cd:93:af:d2:b9:31:cc:a2:
60:58:2f:57:31:8f:a8:e8:7b:41:da:34:83:8e:2f:
e2:0a:aa:03:fe:5b:d5:96:f6:b8:cc:79:08:66:83:
8f:c0:fd:1f:b0:ef:da:e5:68:f4:5e:a8:c6:94:52:
01:e8:1f:67:b4:e4:3e:9b:7e:06:88:83:47:ce:11:
f6:28:75:c4:8a:3b:1c:78:77:d1:64:a3:94:b3:67:
37:de:6c:aa:d5:c6:3a:0e:48:80:b6:c6:8d:28:14:
8d:4f:5f:21:14:5f:a9:c0:43:e7:d6:d4:a9:72:3a:
fe:f2:f2:08:88:6b:20:f3:36:19:79:51:04:51:e4:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:E1:85:60:23:22:79:18:28:C4:E7:13:E9:F8:2E:A9:8F:C1:AB
X509v3 Authority Key Identifier:
keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:66:dc:bf:41:28:61:56:50:b8:b5:f9:de:fc:39:e3:9e:03:
56:a4:9b:be:01:35:ac:57:4e:11:2d:75:ae:f1:c4:bc:26:55:
bf:7b:98:a5:04:35:52:9b:72:3e:b5:a1:ce:04:5d:a1:03:11:
00:71:b1:0f:1c:96:f4:8e:51:c9:6b:6d:52:9b:ec:ac:3f:2b:
d4:f5:51:ff:71:ee:c6:a2:4f:f1:d4:6c:58:90:a2:ea:6c:9a:
2e:2f:2b:3d:80:fb:44:39:f3:a2:8e:3d:86:c8:2b:8f:cb:39:
21:e2:08:b8:75:ee:80:eb:1c:ea:38:94:7a:d8:25:04:7e:8e:
28:05:82:ab:47:16:15:20:70:5d:af:d9:89:3a:e1:4b:b6:52:
29:7e:4b:3e:84:d3:59:51:e7:05:95:1b:93:fd:a6:fc:8f:d4:
8f:e8:8b:ea:05:f5:cd:bf:86:bc:d8:72:47:0a:e8:79:1e:a4:
ec:2e:7e:a0:73:26:a6:d2:21:e5:82:9c:29:a0:a1:e6:fb:bb:
f4:00:8b:b0:8a:68:e6:53:9e:8a:fa:ed:81:8f:5d:3e:29:43:
81:eb:a3:67:89:24:90:48:dc:8e:67:75:6e:77:5f:a0:07:77:
ba:8c:56:01:b6:27:ab:34:49:3f:04:0f:a1:95:12:91:ec:69:
2b:83:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:37 2025 by rpki-client