Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json)
Hash identifier: nMRAH5lzDstH/xefddVxbzvApHm5piFcy3iSnv4Z0AM=
Subject key identifier: B4:3D:EB:DE:FD:E7:7C:3C:53:80:54:89:26:B6:C7:C5:96:C7:68:0F
Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Certificate serial: 0415
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 00:44:59 +0000
Manifest this update: Fri 31 Jan 2025 00:44:58 +0000
Manifest next update: Fri 07 Feb 2025 00:44:58 +0000
Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: b4w9GgBJ51BsLC8EcNWm+arNK/Q0MM/egVbAC7Cn9oo=)
2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=)
3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Validity
Not Before: Jan 31 00:44:58 2025 GMT
Not After : Feb 7 00:44:58 2025 GMT
Subject: CN=679c1d0a-1636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:4a:5e:8f:67:fa:bf:64:60:90:27:c4:21:
f9:b8:1e:9f:a6:9d:14:bc:a4:13:59:91:93:7d:8c:
8b:b6:43:6e:7d:1a:68:07:e4:08:04:cf:67:33:af:
34:7b:b6:ba:95:44:ca:54:a9:94:44:f7:c6:a3:cb:
5c:83:86:97:e4:a0:77:c4:ae:a8:d1:00:b4:84:c9:
64:41:c5:36:90:e6:71:77:ba:48:5b:f9:c9:82:53:
12:1f:62:77:cd:ad:ff:e4:3a:ff:e4:38:07:5b:45:
57:96:8b:5b:12:f0:be:10:3a:69:d0:b6:4d:d2:c1:
db:ab:f1:59:6a:f8:95:8e:99:00:be:ab:2c:38:7c:
33:01:a5:e4:69:eb:87:69:12:fa:32:6f:46:18:7c:
8c:f1:35:8f:eb:c3:af:f8:17:d6:6b:76:fa:af:5d:
e9:29:75:0d:82:2a:89:bb:89:5a:f5:fe:fb:50:16:
f4:d2:02:88:e3:2c:dc:77:40:90:81:ff:63:90:8f:
45:22:82:6a:4d:8d:3f:76:f2:2a:42:12:5e:ec:1e:
34:59:02:2c:1b:50:4f:93:02:51:64:b0:b1:28:c3:
0f:07:01:b0:3f:ba:4d:83:72:98:77:c3:03:c8:b8:
5b:00:6d:b2:0b:05:13:fd:81:13:17:e3:3e:c5:17:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:EB:DE:FD:E7:7C:3C:53:80:54:89:26:B6:C7:C5:96:C7:68:0F
X509v3 Authority Key Identifier:
keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:36:06:87:eb:66:3b:9d:06:d0:d1:ee:9e:71:c4:65:25:
01:6e:6c:a8:ad:c8:7c:2b:b1:87:0d:9e:d7:24:e7:fa:fc:04:
8b:59:9a:78:c4:7a:32:ad:30:3e:38:c0:86:6a:0b:ff:8a:8f:
0e:6d:81:3e:4f:2b:dd:b2:e4:9d:9c:60:f0:8f:24:57:3a:0b:
95:24:1b:f9:42:c3:98:25:35:47:00:03:b0:b6:cb:26:d0:1a:
47:0b:ed:32:1e:3c:ca:85:d4:e6:eb:07:cf:78:95:ab:e8:cb:
13:a2:78:42:48:cc:95:00:62:55:36:36:65:96:01:72:2a:14:
81:8c:ee:e9:15:82:95:37:b1:3a:ce:36:f2:ae:78:e4:d2:9e:
63:c2:a3:fd:9c:dc:e2:91:29:07:e9:b3:df:6a:37:c6:89:d5:
63:05:34:a7:7c:26:0a:c7:95:f3:88:15:73:8e:7e:fd:41:a1:
98:a4:c8:b0:66:5b:ba:2d:37:8b:ee:34:4e:ce:4c:0d:97:6d:
f5:5c:8a:ab:bf:8d:2d:db:6a:4f:26:4d:6a:95:30:9f:d1:3f:
59:e6:28:33:4e:1c:45:a8:0b:17:63:95:07:6e:dc:d9:34:fc:
f6:39:50:e9:56:00:61:89:83:bc:35:31:a9:ea:86:33:75:c4:
d8:bc:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:10 2025 by rpki-client