Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier: mHdGG5oibRex1hZaGiWYkxnuYKOS9O3CAqvAULzkAWg=
Subject key identifier: 9A:EF:A1:A5:45:32:72:06:57:C0:1F:C0:98:A4:C3:C2:44:16:D2:11
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number: 2B
Signing time: Fri 31 Jan 2025 06:46:28 +0000
Manifest this update: Fri 31 Jan 2025 06:46:27 +0000
Manifest next update: Fri 07 Feb 2025 06:46:27 +0000
Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: y6eNCbn0BIYp1xO0rvZIBmc9T8prxcIBglFo+TYbizQ=)
2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Validity
Not Before: Jan 31 06:46:27 2025 GMT
Not After : Feb 7 06:46:27 2025 GMT
Subject: CN=679c71c4-b232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:c3:c1:12:75:1a:a9:b2:e2:f8:38:86:fc:
01:3b:1d:d2:11:ae:9c:12:6c:6e:c2:7f:75:45:c5:
16:cb:ba:a4:e5:6b:59:8c:42:56:7b:3e:ef:c8:95:
18:c9:3d:8d:ec:92:18:b0:da:21:8c:4d:e1:f4:f8:
d3:48:73:a3:f2:46:f0:4e:06:67:a0:71:3f:bc:cf:
ba:ae:af:ea:4f:6d:86:a8:71:f8:16:26:ba:85:0f:
26:08:42:83:25:14:4d:51:bc:10:db:cc:32:4f:c3:
e5:46:60:8b:ea:91:21:b6:ea:77:00:2e:de:4a:d3:
18:36:02:7d:84:64:55:53:c5:2d:3a:44:ef:60:f1:
31:22:54:35:bc:a7:9c:63:f3:55:89:61:64:b6:c1:
dc:60:96:1c:ef:52:30:9b:2c:ed:29:89:2a:89:77:
19:56:d1:a6:0e:99:26:aa:2c:8a:c8:45:e9:b9:4c:
11:14:29:dd:a9:1c:70:49:fe:ab:e8:c1:61:6f:23:
ed:d3:d6:16:10:ae:67:0c:b7:81:88:d8:35:e9:9f:
0b:62:80:ce:5e:7b:ff:5a:85:91:b6:37:c8:21:43:
e7:8d:72:16:f3:eb:e2:9b:80:26:f7:12:76:1b:2b:
e5:43:87:4e:ec:0b:21:a2:fb:51:f9:32:87:d6:85:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EF:A1:A5:45:32:72:06:57:C0:1F:C0:98:A4:C3:C2:44:16:D2:11
X509v3 Authority Key Identifier:
keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:be:ff:15:c0:64:49:56:bb:95:40:21:bb:f3:0d:73:5f:67:
2d:5e:57:b9:54:53:d4:7d:eb:a6:6c:45:52:1b:b0:90:63:f4:
e8:d7:f4:67:6d:b3:93:36:36:81:b3:00:fc:69:ff:96:cd:da:
ac:f4:fb:23:83:85:14:5d:36:24:bb:7d:38:d8:e8:fb:b0:ed:
b6:f3:df:46:56:2e:c0:cc:4e:df:df:c8:7b:96:3d:b0:4a:12:
f1:c4:1f:8d:08:f3:22:fc:40:85:8d:0b:fb:46:70:66:6e:32:
10:95:62:e0:00:58:5f:50:62:7f:97:08:69:2b:88:56:f7:b8:
be:13:2f:94:c5:a1:0b:c0:ac:17:7a:69:b3:90:45:50:fe:67:
5a:e2:4f:a2:2b:37:be:7b:1c:84:46:59:64:f9:46:52:01:ca:
63:08:27:dc:e7:3b:97:00:24:b6:22:0b:be:88:a5:16:1b:d6:
c1:33:58:60:a0:0f:52:01:fc:d7:8c:b3:31:3c:c3:ba:d8:5a:
81:09:23:a2:f5:b1:4c:c0:bc:64:30:a2:80:5c:90:53:e5:90:
20:fb:d0:b7:71:72:03:d8:f8:2d:1e:af:db:56:d4:46:af:fa:
ae:87:7c:78:ba:d6:09:de:47:d7:54:eb:99:2f:3b:25:b8:a7:
7c:8b:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:48 2025 by rpki-client