Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: GcHARhJlsw0T1O5Ph5RUUNAJAdftJTHkeeQ0syxa/Ak=
Subject key identifier: D9:29:E3:F5:3A:24:4A:FD:65:27:CA:9B:C2:51:F1:92:3A:B6:BD:A0
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: DF
Signing time: Fri 31 Jan 2025 04:44:21 +0000
Manifest this update: Fri 31 Jan 2025 04:44:20 +0000
Manifest next update: Fri 07 Feb 2025 04:44:20 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: dEpkpV/hKWloCaYSOYgaE+o9MiTDDak17fw+Z9bOjyQ=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: HDfP4LwrloNXU1nzvfFcUeha0pVa0Ubh8d+qNote20c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Jan 31 04:44:20 2025 GMT
Not After : Feb 7 04:44:20 2025 GMT
Subject: CN=679c5524-a61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:62:3f:16:10:7e:26:a7:a2:12:77:a5:c6:
f4:79:e0:28:58:4f:7f:71:e6:b1:fd:a9:92:27:b6:
e8:d9:25:95:cc:42:01:8a:34:89:0f:bd:b0:6f:3a:
71:dd:07:cf:9d:22:8b:4e:a7:b7:a3:d2:26:ad:1a:
c1:c3:e9:24:2e:ae:18:12:ac:3a:86:ca:30:8c:cf:
f7:08:dc:69:b4:79:09:04:16:f6:8d:a0:68:02:c0:
e7:60:13:96:0e:b9:e3:c0:23:0e:6a:9d:81:41:e6:
f9:2c:83:68:05:68:dd:bc:be:25:f3:f5:d4:af:2a:
b4:f6:b1:60:14:56:e3:d1:ff:31:69:ce:aa:0f:a5:
44:b0:6a:bb:ad:05:54:ff:50:d7:38:e8:bb:c4:5d:
a2:e0:ef:d1:ec:20:34:91:d9:3c:de:cd:e4:e4:81:
5d:14:98:49:1b:f2:c2:29:2f:db:10:00:41:85:cc:
3f:b9:ad:6c:a4:18:08:d8:a2:60:65:f9:88:e1:79:
76:3c:f6:cf:93:d8:20:db:2f:45:e3:65:56:8b:73:
83:53:d7:71:ad:e0:ea:eb:1a:10:46:8f:7c:96:39:
0b:fa:d0:88:8b:3a:46:c7:d2:2d:9c:36:16:fb:f4:
47:48:5a:a5:40:61:b9:ec:e5:29:f5:b2:ec:e7:dd:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:E3:F5:3A:24:4A:FD:65:27:CA:9B:C2:51:F1:92:3A:B6:BD:A0
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:42:cd:8f:85:df:3b:b1:da:95:92:73:50:3b:7d:8a:56:08:
81:24:a8:6b:48:e9:e6:54:1b:8b:0f:c1:13:dc:cc:b0:c9:d5:
c6:9b:c1:ef:f2:c2:87:45:72:9e:2d:7e:63:f0:62:12:6d:4b:
cd:ac:55:8a:3f:1b:e3:b8:3e:82:d7:62:3b:dc:08:23:25:fe:
e6:4e:c8:72:db:31:75:67:a6:0a:b4:4f:29:dc:ae:d8:68:f7:
ae:3e:9b:d6:43:e9:68:b2:90:6d:06:f0:d3:46:7c:12:cc:f4:
33:23:68:65:27:80:ed:f0:3b:6f:d6:80:5d:9f:d4:f4:10:b8:
7e:48:53:f8:27:4f:99:de:59:38:8d:41:54:8c:97:62:d7:e4:
f2:a5:60:9f:cf:6d:4c:70:21:a5:e8:40:66:32:35:d7:74:aa:
a4:9e:5d:b4:04:12:72:9d:05:51:19:06:57:28:18:dd:f7:28:
57:e6:bb:9d:71:1d:0a:d4:d1:32:77:ca:48:d3:97:1f:4e:fa:
f2:a0:32:cd:14:78:ab:68:25:3f:50:b2:c2:ab:bf:81:1d:b0:
f5:50:7b:95:3d:49:05:c8:a3:f8:cf:56:fc:1b:62:7a:9d:96:
5e:d6:43:ee:a0:34:98:ed:3f:f2:38:f8:b7:ed:f0:b5:1c:08:
72:b5:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:10 2025 by rpki-client