Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json)
Hash identifier: 08uB3PNpRosFop7F1iw/S2rMyyGLyJDXSlyuk91NaAk=
Subject key identifier: 39:DE:D5:F1:93:E4:07:56:62:46:E0:72:EB:47:29:C0:9E:E5:92:B5
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 05:21:30 +0000
Manifest this update: Fri 31 Jan 2025 05:21:30 +0000
Manifest next update: Fri 07 Feb 2025 05:21:30 +0000
Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: UAVhaCqokndF7NMC6o97lYubha5uUWTggCzTxo+Aja0=)
2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: RDRsbI0QCe3WCyYIAxbPkTT+7Ici1TKwxRZtpP0NFiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Validity
Not Before: Jan 31 05:21:30 2025 GMT
Not After : Feb 7 05:21:30 2025 GMT
Subject: CN=679c5dda-7b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:73:36:12:54:ef:80:f7:cd:b3:e5:d6:92:
65:49:61:15:f1:e8:36:6f:9c:f9:3d:2d:8f:36:8d:
1c:77:d7:6b:06:12:14:29:e1:33:72:29:0f:55:c5:
a8:41:79:1a:05:90:27:22:e2:37:20:c6:41:e7:cd:
e7:88:c5:a9:4b:27:f8:6c:88:51:70:9f:83:cb:28:
3b:33:d0:70:a5:ac:9c:c6:63:bb:56:c7:e8:18:19:
17:64:36:7d:0c:98:57:5e:7c:56:44:7b:72:de:ea:
ca:83:94:d4:a6:bb:4a:d9:e8:5d:0d:21:11:84:54:
fd:b0:58:74:a7:86:6a:5c:36:92:ba:52:78:2c:ec:
49:ab:2b:16:fb:56:79:10:d6:62:f0:64:8c:63:ad:
98:11:c7:28:48:42:5e:f4:e7:dc:b2:24:c7:2b:fa:
d2:d1:e2:b2:6e:96:7c:33:9f:31:4e:8f:85:86:ff:
00:30:9d:e1:43:70:c5:15:db:dd:3b:f8:30:84:bd:
b0:9c:cb:a1:f3:bb:be:61:97:fc:60:22:7f:9f:8e:
36:c7:e0:f1:42:d5:26:d7:07:d2:ea:4f:78:e2:94:
43:0a:66:80:9b:cd:1f:ec:1c:42:93:c5:ea:1a:0d:
d1:37:d8:96:90:b6:95:1b:49:5a:a1:0e:3e:88:29:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:D5:F1:93:E4:07:56:62:46:E0:72:EB:47:29:C0:9E:E5:92:B5
X509v3 Authority Key Identifier:
keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c1:3e:5e:52:b8:f6:0b:21:e3:01:bd:b8:3f:83:ee:cf:43:
bc:be:7d:52:ab:70:c2:1d:a0:a3:85:4a:a0:ac:75:93:ca:e7:
25:12:44:77:72:b1:71:3e:ca:cd:12:f7:c5:29:86:74:02:7d:
e5:92:1e:d4:2c:9f:5b:1a:9e:60:ea:97:81:dc:55:1b:80:35:
14:47:d1:80:4e:c1:95:7b:03:36:90:f8:c6:cf:cd:6c:23:57:
37:af:59:93:6c:94:ef:7f:8e:9b:1b:7b:ce:e4:11:19:4e:20:
60:65:fd:f4:21:69:27:18:10:71:55:1f:4c:a0:fd:9c:24:b0:
19:01:35:12:47:a1:a0:5f:6c:d5:9a:31:62:47:af:67:cd:cb:
ac:80:00:dc:ab:bf:60:8b:fb:c9:31:76:f2:c0:af:42:e8:09:
af:e7:c5:ad:61:d5:cc:ee:36:5a:ec:5f:ba:91:86:f6:38:24:
6b:0b:5c:13:f2:65:b3:77:b5:4c:8d:c8:a4:07:72:28:82:42:
8c:62:d2:99:89:19:ee:16:33:3f:b0:25:1c:ea:c7:e7:8a:54:
7a:50:ec:f9:86:69:11:68:8a:a1:f6:8c:7f:bc:7b:3c:72:44:
04:45:de:ba:c7:7a:3a:c1:9b:5e:a5:3a:ce:43:20:3e:48:b1:
7a:81:af:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:53 2025 by rpki-client