Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier: Y43cRW5tblo2wamAy++9WlH2++V5Ve5gUcG+oBC6ge4=
Subject key identifier: A8:F6:56:37:C0:57:50:EB:4F:4B:C4:92:47:A7:BC:A9:89:46:C3:76
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number: 076E
Signing time: Thu 30 Jan 2025 21:08:01 +0000
Manifest this update: Thu 30 Jan 2025 21:08:01 +0000
Manifest next update: Thu 06 Feb 2025 21:08:01 +0000
Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: joFRV4ez49T8XBbKq29Lhs0UrmPwCaMUc9tYvzFjqag=)
2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: C75Vrv4Uz+C6zFOBFG0FQ16ertvfsDBJQmC7BROeKb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Validity
Not Before: Jan 30 21:08:01 2025 GMT
Not After : Feb 6 21:08:01 2025 GMT
Subject: CN=679bea31-37f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:2e:ed:35:38:33:37:49:e2:80:e7:39:98:
79:0d:dd:b8:9c:2b:57:7b:10:aa:22:ed:31:e3:46:
f6:77:73:28:67:78:82:b4:84:1c:10:79:5c:72:a9:
73:e9:0c:0c:5d:42:1e:a6:72:d4:66:1a:ee:ab:56:
e4:68:9f:0e:8d:cb:54:b9:e4:b8:c5:3d:a4:f2:a9:
8d:b6:50:58:21:f0:f5:96:07:b8:23:ea:ad:50:a5:
9a:eb:8b:a4:12:d3:44:c7:5a:4f:ca:6f:6e:b5:66:
61:75:3b:e3:7e:bd:a2:4d:6e:80:52:83:6e:0d:9b:
1f:a5:cd:b7:b0:26:7f:75:73:f4:e1:25:a7:46:45:
d4:fb:97:0d:87:68:bb:f2:26:ac:34:45:98:b3:16:
11:48:cf:ff:17:64:18:8a:f7:22:07:2d:f9:5a:e5:
e3:b0:45:1a:3d:1a:84:c7:f5:e7:63:72:41:75:dd:
3e:35:64:c5:f2:10:e2:30:1a:77:c2:1a:4a:2b:e9:
42:5d:ea:5b:92:00:b9:b5:9b:ad:b8:ad:9c:20:5e:
d8:2a:bd:ff:8e:e4:7e:ef:a0:ef:8f:ad:08:fa:2c:
e7:8e:09:a0:e0:21:15:b0:e7:b3:59:94:e9:fb:0e:
23:c6:82:24:33:8b:bb:e0:4f:81:9d:8b:66:0f:29:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:56:37:C0:57:50:EB:4F:4B:C4:92:47:A7:BC:A9:89:46:C3:76
X509v3 Authority Key Identifier:
keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:0a:cf:95:de:ce:33:9c:10:a3:26:8d:b2:0a:ef:3c:b8:
7c:3d:5c:fe:1f:55:9c:f2:a1:65:45:d1:29:44:f6:c8:18:f3:
26:39:50:ff:eb:e2:72:26:d5:d0:7b:8f:2e:5f:b9:67:5a:95:
ad:be:24:7b:1e:cc:35:cf:bd:90:ae:3a:8f:23:0e:a7:87:85:
b4:58:46:29:c3:ff:1c:8d:6b:4e:ca:39:f9:d3:78:65:b6:b3:
23:95:bc:22:46:e3:8b:63:82:18:c1:60:2e:d1:bc:0c:3d:de:
05:b5:48:19:7f:92:b3:9c:6e:a7:d1:26:91:d7:0e:66:1c:98:
2a:d8:49:d3:35:f1:2d:92:73:dd:40:9a:02:69:2d:c1:66:aa:
e8:7e:41:64:b4:45:39:dc:55:d3:8b:26:a8:18:8d:18:41:61:
fd:87:4d:e6:18:3f:2c:98:dd:3f:1e:a6:07:16:ed:45:ca:4b:
ee:fe:99:24:6c:38:54:ab:0c:58:7f:4b:fa:9a:5d:9e:2e:24:
d1:cd:9e:68:73:16:82:3f:5e:cb:b2:b9:6f:c4:07:e5:96:fa:
30:e5:bd:e5:53:96:21:04:4b:66:6c:90:ca:6c:0b:e4:22:4c:
22:f7:44:81:2b:d4:02:6b:7b:65:5c:5d:49:70:c5:54:b3:ab:
26:e8:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:59 2025 by rpki-client