Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier: LrIzusg9TQISRYSfg0NuEQBT1z5hKNG3cUe5FfEIZC0=
Subject key identifier: D6:06:E2:99:81:BE:0E:54:52:83:87:B6:D0:5A:DC:E5:33:43:B0:66
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial: 079B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number: 078D
Signing time: Thu 30 Jan 2025 21:16:11 +0000
Manifest this update: Thu 30 Jan 2025 21:16:11 +0000
Manifest next update: Thu 06 Feb 2025 21:16:11 +0000
Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: c32yb9M9TBICZs63Uts1P9sb0dQ3++CO8QyZL+sRf0I=)
2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=)
3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Validity
Not Before: Jan 30 21:16:11 2025 GMT
Not After : Feb 6 21:16:11 2025 GMT
Subject: CN=679bec1b-d3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:cc:39:5e:8d:57:26:26:73:24:df:9b:49:
92:bc:0d:03:e6:e4:14:cf:42:18:66:dd:b4:4b:f1:
4b:8e:cb:1f:1d:67:10:97:19:0b:99:26:89:ce:bd:
6c:95:07:cc:a3:cf:d1:93:c5:85:25:e7:18:be:c4:
d4:96:b8:94:21:ca:06:10:28:35:17:2e:9b:e1:62:
6a:7c:21:12:21:89:16:94:5a:0d:97:5b:fa:3f:3b:
7b:07:cd:a6:19:c5:6a:4d:57:5d:0c:2a:dc:6b:ce:
fc:9b:0a:27:87:b0:51:24:dd:0f:a5:23:69:83:f6:
97:18:ca:78:10:d6:8a:56:23:5a:ae:21:6f:7c:db:
2b:25:06:81:94:0b:e1:54:50:25:c3:56:25:37:fd:
a7:0f:c8:4a:47:46:6a:8e:bd:3e:18:b4:fa:66:bf:
b3:4c:7d:12:18:99:40:59:ab:c5:20:0c:50:82:b0:
e1:67:91:0e:ff:7f:fb:6c:86:49:02:9f:66:37:47:
c2:ff:46:39:75:24:c9:23:93:1a:fb:e3:bd:75:ed:
4c:ef:7f:78:fc:0e:fe:24:89:7a:40:26:d4:3a:32:
b4:db:89:21:3a:a0:43:a1:30:0f:5b:ee:08:d0:42:
10:55:87:c4:56:a1:6b:18:ec:fb:23:f5:86:fe:5f:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:E2:99:81:BE:0E:54:52:83:87:B6:D0:5A:DC:E5:33:43:B0:66
X509v3 Authority Key Identifier:
keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:e4:17:05:0b:c0:22:3c:40:cb:c3:51:a4:1f:9e:62:e2:
c0:24:e3:7f:ca:28:ac:f6:45:a7:aa:9e:bc:b1:f1:1a:60:c7:
d1:e1:7d:4d:1c:e0:b1:26:57:96:7b:8b:66:d3:0f:9d:17:2b:
64:9b:ad:e7:be:72:47:6a:8a:50:f9:16:ee:b7:7e:b5:84:40:
18:2e:29:fd:72:fb:54:53:53:29:ac:71:f3:12:fb:53:8e:4c:
fc:74:ac:f8:dd:69:f1:4b:08:75:bb:a7:5c:09:dd:41:7c:12:
c6:68:8b:6f:10:2a:da:d1:19:4d:fc:ae:c9:bd:54:ae:52:44:
a4:b2:56:79:73:eb:dd:1a:3a:14:46:ec:4a:6d:51:b1:fa:51:
56:1f:3a:00:07:33:20:95:ea:96:ce:24:2c:f6:b3:96:10:2a:
58:d4:aa:5d:a4:40:21:fc:fc:cb:3f:20:1d:c2:78:4b:26:e5:
5c:bf:da:e9:78:66:a0:4e:1b:13:f9:80:37:9b:58:01:06:be:
b2:bc:d8:98:3b:98:2a:72:04:65:5c:8f:86:29:2d:7b:32:81:
fc:af:4e:66:79:f9:fa:f1:b3:02:a3:1b:57:f4:9a:a3:91:d9:
38:5a:38:22:16:ea:e4:ff:22:4a:86:af:6e:39:35:df:b5:b5:
6d:22:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:16:17 2025 by rpki-client