Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json)
Hash identifier: r/gdfEO5dLAZT6TdAnXGEDBjWliOoYBRamPt6eTcQq4=
Subject key identifier: 0E:AB:E6:9D:1E:F2:20:31:C9:1F:B2:70:9D:D3:E6:BD:91:93:CA:1E
Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D
Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
Certificate serial: 05DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
Manifest number: 05DB
Signing time: Thu 30 Jan 2025 23:00:52 +0000
Manifest this update: Thu 30 Jan 2025 23:00:51 +0000
Manifest next update: Thu 06 Feb 2025 23:00:51 +0000
Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: G1EUpZNe0K2ihBFuG3T7WWjKypsRlFqawYnt8wbSXIE=)
2: A80223709F4411EB92132051C4F9AE02.roa (hash: s/fUirQhduJl9wnAhHh3ONw1QuvIAurXUVtBZUNnkC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
Validity
Not Before: Jan 30 23:00:51 2025 GMT
Not After : Feb 6 23:00:51 2025 GMT
Subject: CN=679c04a4-9a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:36:ed:21:ca:02:b0:07:0a:52:74:d1:37:
3a:e9:4c:a8:ee:91:0c:b4:c3:be:9d:ed:0e:63:2f:
3e:8c:5d:b4:8f:40:13:96:4d:73:bd:93:f4:0a:c6:
8f:b7:c4:54:8c:ff:a3:1f:cd:f1:7a:13:ee:2f:9a:
ff:fe:42:26:2d:ed:34:ff:46:a0:7d:75:24:87:e6:
81:48:8c:32:a6:00:49:58:9f:14:46:75:8d:77:71:
cd:b6:d8:1b:58:7d:48:7a:e6:85:a0:fe:d1:40:ed:
77:78:6d:5c:db:b8:90:01:9f:25:ae:94:20:3c:00:
2b:69:26:11:28:4b:97:43:c4:2e:54:8e:b9:a0:64:
f2:ef:81:51:ca:7b:fe:55:d8:be:0b:2a:e2:98:38:
95:ea:0d:6a:fe:f1:44:a1:38:5d:54:5e:e0:01:bf:
99:14:8c:a6:b9:d7:d1:56:81:9a:a3:95:c6:c1:42:
45:14:09:71:1f:e5:6b:12:76:9e:0e:3f:ce:11:ee:
45:45:b4:c5:97:7b:e2:4f:94:a9:d5:73:4a:de:e9:
6c:56:08:b9:28:6c:de:cc:d6:43:ef:d7:3b:c5:77:
89:3b:76:b4:b0:1e:62:5a:a4:67:a4:d7:93:46:ab:
08:79:a3:17:d2:ad:b7:19:aa:1a:25:a8:43:e4:20:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:E6:9D:1E:F2:20:31:C9:1F:B2:70:9D:D3:E6:BD:91:93:CA:1E
X509v3 Authority Key Identifier:
keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3d:16:19:f9:0e:17:73:16:5c:67:20:0f:08:7b:9d:99:fe:
d9:46:5c:e9:99:2b:c4:0b:d6:29:19:50:2c:3c:c8:dc:4b:33:
62:67:95:19:e3:ad:6f:cf:47:aa:85:06:40:a6:55:dc:81:bb:
3e:e2:ab:4d:b1:28:17:03:8b:f9:2f:5d:23:94:56:43:61:fa:
42:20:f6:04:0a:86:9e:40:e6:4a:54:17:2d:d0:6c:85:84:03:
06:89:b4:9d:d1:af:c7:82:ae:c6:78:f4:c3:05:71:b2:68:27:
e5:a6:e0:80:50:12:6a:cd:23:3c:1a:2c:9b:07:ac:a0:91:72:
e4:0b:41:17:7b:36:d9:f5:47:25:19:8c:8a:e1:0f:14:7a:8b:
54:77:55:f2:1c:7f:e5:85:4b:f6:15:10:a6:4a:21:72:2a:54:
d8:86:e4:25:66:5b:1b:5b:b7:a2:09:19:17:a5:88:16:27:bb:
ea:d0:94:0b:82:a3:ba:de:76:8e:77:0f:70:56:ce:cf:f6:00:
ff:7a:e5:56:a5:1b:8f:8c:15:88:ee:2f:90:ec:c2:58:56:e9:
c4:a2:58:13:9a:12:a0:3a:52:58:e9:6e:96:aa:06:bd:f6:e4:
5e:ce:7a:72:10:c1:0d:d5:fe:4d:ad:25:8d:37:33:bd:a5:84:
4b:46:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:11 2025 by rpki-client