Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier: JdI15qF3Um3jKrZtmaS/NYzB6MPHCk64TNlitPdyGJg=
Subject key identifier: C5:1E:DC:A4:01:75:70:3A:17:36:23:DE:EE:02:FC:1F:A4:42:0E:73
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 03:34:25 +0000
Manifest this update: Fri 31 Jan 2025 03:34:25 +0000
Manifest next update: Fri 07 Feb 2025 03:34:25 +0000
Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: VU+zDgP3z0GrzkQ6jHkVxVJtf7tJBKVlhkfamtJADeI=)
2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: s9Hq2WKNBLpIHUUpKntveP4U+1sM2OLROzstT7r+cr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Validity
Not Before: Jan 31 03:34:25 2025 GMT
Not After : Feb 7 03:34:25 2025 GMT
Subject: CN=679c44c1-3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:f1:c7:38:68:78:cc:f2:ec:ce:45:b8:d2:
d0:d7:35:9e:8e:7e:e0:97:8c:c0:c6:41:1c:b7:e5:
66:8d:00:15:45:e2:1d:78:e1:62:91:04:55:dc:8b:
03:be:2e:e0:75:ee:9a:83:37:cc:1a:be:dd:7d:58:
99:ed:ef:0b:9c:8d:2b:ff:ef:34:68:35:dd:16:4e:
44:7d:db:aa:ca:de:84:d1:18:73:93:21:9c:cf:7d:
81:bf:a3:8d:72:37:20:00:8a:53:d4:45:25:49:dc:
b7:7e:6e:45:e4:82:be:c5:cf:3d:35:ec:da:4c:db:
5c:d0:2c:ca:64:65:80:a6:14:28:10:19:fd:b8:d6:
87:79:19:64:1c:39:68:15:0a:63:85:4d:a6:d4:15:
cc:3e:e2:ac:bd:28:e6:6c:77:fa:67:ae:7b:eb:65:
c8:08:b9:51:df:b3:29:1c:45:ca:17:47:4c:a1:55:
59:6b:17:f1:15:65:da:68:4a:03:8c:d6:29:e2:49:
a9:27:7e:cb:20:26:cb:35:47:1e:a9:f3:50:b0:2a:
d7:74:70:23:26:d5:43:e9:f2:3b:16:66:41:fb:1d:
44:f5:b7:c7:0d:d1:07:a5:61:6b:48:5a:9a:f1:e1:
45:57:5d:43:16:45:72:20:51:68:1c:1b:73:17:9b:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:DC:A4:01:75:70:3A:17:36:23:DE:EE:02:FC:1F:A4:42:0E:73
X509v3 Authority Key Identifier:
keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:af:ab:4b:1d:99:cb:bf:e4:97:64:23:9b:95:eb:b0:b0:
08:d1:f9:17:fe:ef:4f:78:80:54:8f:96:f2:e0:38:ab:62:74:
b4:82:65:af:1c:15:ed:15:88:82:20:4d:ab:21:3a:9d:f5:14:
b9:a6:14:a7:89:ee:c5:ac:c5:a3:0e:d9:92:88:35:8b:29:a5:
07:31:9e:08:c2:78:d5:88:ba:76:65:b9:69:a7:97:52:00:15:
3a:5e:d0:6e:5f:e3:2c:f9:d3:05:38:fd:c1:7d:f1:6c:e7:b5:
5a:43:f3:aa:83:b1:c6:58:f2:09:31:6f:2e:5a:d7:9d:87:c2:
4c:f8:b9:53:da:a6:76:b4:a1:b4:9d:15:6d:33:d5:20:5c:3c:
cf:50:c6:6e:a5:5b:33:38:6c:9a:3c:6a:39:3a:29:c6:ec:c0:
f2:45:38:72:b6:c2:95:2b:51:46:6b:6d:48:5b:7b:77:35:62:
3d:d5:96:b0:c7:3d:04:60:e5:8b:20:35:d9:43:62:1b:cc:d1:
1f:12:f8:e2:c8:2f:50:98:c8:7a:22:c3:d0:07:90:17:95:5f:
3c:b2:f7:4c:26:05:be:94:b9:c3:1d:fc:f1:18:f2:87:a1:8d:
2e:1f:fa:c2:a5:e6:4a:de:33:66:5c:95:dd:66:fd:f1:80:c2:
68:66:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:36 2025 by rpki-client