Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier: wCoo8qfdtJOtt0uQTqYFjBfupcfFqKm4a6WL2v8o9aQ=
Subject key identifier: 91:53:5C:00:85:88:7A:8E:8E:F3:DB:34:3D:D9:D0:E2:09:2A:8A:1F
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number: 0495
Signing time: Fri 31 Jan 2025 00:01:30 +0000
Manifest this update: Fri 31 Jan 2025 00:01:30 +0000
Manifest next update: Fri 07 Feb 2025 00:01:30 +0000
Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: SxyCsykmIhoKJn+xLjdhN0CcgvdzQUH07D2XY+GeZQs=)
2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Validity
Not Before: Jan 31 00:01:30 2025 GMT
Not After : Feb 7 00:01:30 2025 GMT
Subject: CN=679c12da-a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:fb:72:d3:48:86:d2:73:ed:a2:65:7a:45:
c1:ce:9f:ad:6e:ee:49:23:cf:27:af:b8:a3:36:9d:
9e:07:e4:1b:06:f8:1a:b9:31:c7:e4:99:63:cd:ed:
16:b5:e7:2d:df:b5:1f:67:4c:ba:20:f0:44:c0:2d:
96:ba:2c:bf:b2:98:71:19:1f:99:48:62:dc:88:fd:
57:ed:c8:24:89:e5:59:f0:b3:66:af:5d:58:99:53:
9d:dc:ea:ed:fa:2b:1e:0e:8a:f6:6e:72:8f:11:f4:
4b:cd:c4:c5:e0:f5:9b:92:ae:8a:89:b7:ff:6b:47:
10:bd:3a:74:12:83:15:9a:85:b9:93:c1:94:26:9e:
c0:89:d4:94:95:52:92:3e:98:c7:ac:c3:d8:a1:5d:
6e:81:af:64:f4:50:68:99:0a:e4:e2:25:6e:df:db:
e5:11:14:94:6f:ed:9c:4e:6c:97:72:a7:14:ae:fa:
5a:1f:73:7c:c4:dc:76:c9:b3:09:50:e1:c8:07:ba:
d4:bb:c8:53:7e:6d:53:3e:cb:7c:ac:14:1f:6d:8e:
1b:73:6d:c2:56:4c:9e:e2:8d:a9:98:4a:42:53:10:
43:9e:ef:c7:f2:e4:25:54:b8:1d:dc:6b:0e:54:c1:
16:66:6f:0e:f7:e1:20:66:1e:f3:1e:fc:67:0e:f1:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:5C:00:85:88:7A:8E:8E:F3:DB:34:3D:D9:D0:E2:09:2A:8A:1F
X509v3 Authority Key Identifier:
keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:79:bd:1e:d3:58:2d:29:4a:3b:13:09:eb:cc:a7:26:8b:2c:
59:84:60:75:a6:80:90:3b:5d:23:5a:34:93:7a:1a:51:ff:2a:
57:f0:f1:e4:0a:74:1b:e3:8a:90:17:bd:a8:08:28:95:5a:3f:
87:e8:7a:94:6f:fb:9f:bf:00:1f:1e:0b:83:d9:0b:64:b6:e4:
03:03:04:f4:5e:ad:1a:fa:fa:0e:f7:56:8d:98:d2:28:67:91:
33:be:72:d8:dd:86:4a:f1:2b:86:db:c6:c2:7a:96:f8:00:8a:
71:87:a5:fd:ee:e4:d4:24:1e:c0:7d:28:c0:16:44:52:6b:f9:
f7:33:9e:f1:37:49:98:70:44:76:75:73:88:e5:ac:ad:e4:c7:
84:17:09:c0:fa:81:8e:d6:df:10:80:07:8c:3e:3f:18:cf:d1:
48:b9:77:8f:18:0d:6c:e4:57:6f:44:6f:d3:f1:da:29:7d:ec:
31:2b:d6:5f:cb:95:21:07:b4:c9:71:60:de:d3:eb:44:b8:56:
9f:31:0f:a2:31:8b:bd:c4:f4:ab:ff:47:40:da:5b:da:16:80:
52:24:4f:66:8f:28:b0:11:51:d7:49:3a:3e:65:fb:6c:57:a3:
fc:26:95:48:35:2e:88:d0:83:87:87:22:96:87:56:08:c8:2b:
b9:3a:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:03 2025 by rpki-client