Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier: KkixN3fhliD/AdvoGuqg49+VJ+gWucfkpzbeR/2wrno=
Subject key identifier: 1B:6A:53:6C:F7:C8:7A:3A:EC:C6:42:70:8F:53:41:B2:66:F7:B4:32
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial: 0445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number: 043F
Signing time: Fri 31 Jan 2025 00:21:06 +0000
Manifest this update: Fri 31 Jan 2025 00:21:06 +0000
Manifest next update: Fri 07 Feb 2025 00:21:06 +0000
Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: iovnLwRmzfJYYSknYHGQe2PZVVtq2N4T+FDQeAFH9Ro=)
2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: j0OYbP016uqCUyPAzhyPYu4cMFhnnpV0imO0FVFr9xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Validity
Not Before: Jan 31 00:21:06 2025 GMT
Not After : Feb 7 00:21:06 2025 GMT
Subject: CN=679c1772-e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:63:e6:62:48:cb:f5:4e:38:2c:fd:20:66:
9e:60:c0:22:51:33:1c:0c:95:66:3b:5e:81:80:a7:
91:0c:5c:31:9b:01:9d:89:a4:d1:0d:63:58:ce:53:
a0:ed:97:b0:c7:23:05:0b:ab:ee:6a:d4:e3:b5:78:
8b:51:96:69:a6:5b:ec:a5:3a:e2:7e:1a:ac:91:5b:
8a:89:6e:fe:d2:87:d1:55:e6:2f:ad:cc:8c:5e:7a:
49:3a:39:38:c3:62:65:c4:05:f1:8f:2a:2d:f4:5e:
82:b8:65:44:a0:c3:a9:76:e9:fb:73:32:48:b9:40:
73:48:e2:98:cd:65:f7:11:da:89:bd:0a:56:c4:2a:
fa:5a:06:87:36:7c:27:5f:9e:7b:20:b7:76:26:cb:
d0:2e:a5:86:51:6a:4f:2c:f5:57:24:5a:41:6a:13:
79:c1:a7:2d:66:4e:c8:bb:80:8d:71:76:a4:92:d9:
fb:e7:9a:c0:75:af:ad:78:01:2a:50:54:be:65:18:
de:0b:e5:4a:41:5d:27:a3:82:59:e1:2a:a3:08:47:
81:80:0d:c0:8a:74:c4:0f:ff:f0:05:7a:24:61:a1:
31:be:a6:74:1d:42:bd:c8:fa:76:4b:29:0d:68:1a:
ab:3f:18:13:41:19:97:cf:20:5f:4b:53:36:13:59:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:53:6C:F7:C8:7A:3A:EC:C6:42:70:8F:53:41:B2:66:F7:B4:32
X509v3 Authority Key Identifier:
keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:4d:8f:7c:be:c3:f3:3f:2d:80:fe:3c:da:73:6c:bd:94:
9e:bb:b4:1c:4a:3d:c8:dd:24:61:af:ad:c2:5d:3e:63:87:e4:
dc:b3:70:97:42:a6:90:5f:aa:89:32:77:7f:bd:3c:11:9d:59:
8b:bc:1e:64:e4:a7:cc:75:51:6e:14:14:7e:56:25:30:a5:56:
62:5f:27:43:43:63:15:86:a6:72:33:55:b8:a8:0e:47:6b:13:
bd:5a:95:ca:b0:1e:74:6e:60:0a:61:6c:5a:b1:2a:f0:c5:34:
62:88:de:95:33:1e:de:0d:ab:a2:e0:d6:3d:e0:fc:65:5e:b4:
ba:b1:68:0d:aa:39:9b:32:74:00:c6:b8:83:1f:f5:00:f0:34:
0a:92:18:63:97:88:5b:f9:e9:ba:6c:49:2c:b8:ca:1f:62:d2:
9b:69:97:21:9f:81:9c:28:f5:ad:aa:57:03:e1:41:02:43:30:
94:9c:92:0e:0c:37:7d:5c:28:7d:f3:5e:55:2f:a9:17:53:4d:
2d:73:d5:36:0c:7e:f9:f8:aa:8b:09:30:ac:99:11:e9:59:52:
ac:c5:d4:37:b2:35:02:0f:20:24:35:56:c3:ef:05:3c:59:79:
33:34:f7:e4:b2:e8:65:ef:69:63:22:89:2d:77:73:94:2a:46:
20:09:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:48 2025 by rpki-client