Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier: 5dMrrkS1teEBGScUL+5jfB16vbynaMJ07aW8t/cboqU=
Subject key identifier: 1D:1F:BF:0B:C1:E0:83:2C:4E:6E:C3:BC:EE:46:7A:B5:23:CA:D0:59
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number: 08A1
Signing time: Thu 30 Jan 2025 20:36:33 +0000
Manifest this update: Thu 30 Jan 2025 20:36:32 +0000
Manifest next update: Thu 06 Feb 2025 20:36:32 +0000
Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: Qo7CcOBrXtAH3WdgKBndicTaL47QrZD71LPWACnxA9c=)
2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: uf4p5pgx1V0SluLNrAv0V4EHqRaHMDNsXkTRhyZ1WHY=)
3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 76P6B+zD6PNBr4hksz9RJT8sA9qgnhZO985SFBzvQHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: Jan 30 20:36:32 2025 GMT
Not After : Feb 6 20:36:32 2025 GMT
Subject: CN=679be2d1-ec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:cf:90:4a:3e:1d:de:8d:5d:09:4c:bc:a1:
d3:1a:a7:ee:80:41:39:b2:95:88:86:58:e4:c7:29:
e6:4d:a3:45:38:41:48:66:f9:65:ab:df:78:04:f1:
b6:41:6a:13:9e:2f:26:6d:4f:72:1a:4e:63:86:67:
d5:2b:15:02:a7:52:9f:bc:a2:06:35:a7:6f:ed:c3:
13:ee:d4:d4:cd:a1:42:30:98:f6:08:a9:cf:e0:1e:
f0:ee:c8:61:f8:43:2f:06:89:9f:24:64:ed:c5:07:
35:b1:9b:f8:cf:1f:ea:13:3f:09:83:e2:88:8c:0f:
59:7b:fd:e8:92:5e:ab:7a:61:e4:12:47:51:1f:d0:
7d:ab:43:27:70:e4:a9:4e:2e:2d:2e:b5:56:a9:69:
ab:d3:24:1f:71:03:d3:1c:17:77:bf:84:74:bb:b4:
7a:76:11:46:45:35:74:66:5b:84:77:23:84:94:f3:
3b:5f:c9:33:39:95:19:2c:c1:1b:0c:d4:14:c5:49:
8c:36:26:9e:90:0b:52:0e:85:3f:3c:07:2b:9b:56:
a6:70:66:a4:08:d8:a9:0e:2d:0b:1f:8f:18:90:20:
c7:e1:4b:d6:27:14:16:52:bc:7a:64:ef:6e:d8:fa:
17:4d:41:a9:7b:d2:c3:6d:64:de:4c:a2:08:0d:4c:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:BF:0B:C1:E0:83:2C:4E:6E:C3:BC:EE:46:7A:B5:23:CA:D0:59
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:20:47:37:40:27:4e:9c:22:ac:8c:16:47:b7:75:35:ac:
35:77:a9:54:63:65:b1:c6:f1:ce:04:f8:fd:28:94:64:33:6a:
67:39:af:04:3b:8b:92:30:17:be:d9:ab:70:89:78:32:8e:e7:
79:bd:b2:14:94:3b:e6:25:2e:97:7f:fa:a3:63:07:44:9d:70:
e6:de:60:d3:e3:95:e9:72:84:3d:bd:c4:23:da:c6:3b:07:c1:
8f:ca:bf:a6:97:a9:ca:62:8d:c5:08:7e:a9:d2:85:06:8f:ad:
0b:66:05:63:be:c9:dd:cd:14:85:59:db:53:d5:f4:e7:67:16:
89:a6:84:7b:ea:ec:94:b4:03:db:3e:16:cf:f1:f5:db:b4:74:
7d:cf:49:ad:41:86:63:dd:3a:33:95:93:c9:bd:7e:e6:b7:15:
2e:f3:75:44:8b:4c:1b:f3:db:b0:b7:14:c6:7c:06:77:7c:c8:
b7:1d:f6:6a:bf:ff:53:04:da:e3:11:c6:de:ce:12:fe:c5:d5:
e8:96:b4:b8:57:5f:ea:2f:09:be:fb:94:d1:15:93:eb:05:c0:
5a:f3:f2:c2:7a:13:c7:64:3c:16:c9:e4:7a:e1:6a:93:24:e6:
81:2a:0c:06:52:12:57:80:b6:1c:9e:f1:30:84:08:b7:f1:24:
cb:d1:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:47 2025 by rpki-client