Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json)
Hash identifier: zMg56u3YOG0KUIxgqGuNMire4KJgeoe6jNCNAxp2cdQ=
Subject key identifier: EC:6B:22:0E:4C:2D:32:1A:D5:09:20:77:C9:C3:A4:11:6F:82:20:17
Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Certificate serial: 17D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
Manifest number: 17CD
Signing time: Fri 31 Jan 2025 16:33:25 +0000
Manifest this update: Fri 31 Jan 2025 16:33:24 +0000
Manifest next update: Fri 07 Feb 2025 16:33:24 +0000
Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: 67n8JjMpv7DN7/OMu/bG83cOhfdCO+49ee5JesMBoVY=)
2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: aRH01IUvItkJMk65lvOFWwpfHYd0U/w3NKuSxLWLFjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6101 (0x17d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Validity
Not Before: Jan 31 16:33:24 2025 GMT
Not After : Feb 7 16:33:24 2025 GMT
Subject: CN=679cfb55-457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:0e:4b:77:95:8b:c5:11:37:54:c3:2f:aa:
b0:fd:3d:17:5f:c1:bc:b9:31:d2:2a:e8:89:59:c1:
bb:de:00:fb:83:a4:ea:ad:e4:3e:3c:b7:75:f6:92:
54:89:90:c7:a2:ca:0a:e0:fe:59:fb:a1:ef:10:dd:
1d:d0:1a:4d:36:26:79:33:07:e7:0d:8e:54:5d:32:
b3:f5:c0:3f:c8:da:28:33:25:66:7b:61:a5:23:a2:
ef:ce:ee:3c:f4:9f:a3:ca:68:a4:b3:1d:61:f0:b8:
b9:e1:5a:3b:d7:17:ea:0f:d3:56:80:d4:d2:dd:3e:
af:2d:d2:d3:cf:e1:7a:42:0d:72:a4:eb:f3:b9:14:
1a:be:fc:fa:e2:dd:be:c0:3f:e9:4f:e8:be:b6:69:
61:f7:97:58:0d:ad:56:f9:e7:2a:dc:c7:64:25:36:
99:d0:e2:2e:fb:22:af:75:d9:45:d5:75:f3:c2:e8:
1e:23:c8:c7:6b:d7:d9:46:f9:a9:87:3d:f3:0b:72:
e2:00:8d:9e:6d:cd:8d:68:91:fc:93:55:d5:39:da:
91:76:af:17:10:74:25:78:d5:58:52:4c:1b:5f:8b:
0d:d7:6c:72:83:6b:67:22:64:d2:bf:3e:73:30:ca:
46:c3:fa:63:27:0c:f2:ba:e5:d5:70:1a:da:92:7f:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:22:0E:4C:2D:32:1A:D5:09:20:77:C9:C3:A4:11:6F:82:20:17
X509v3 Authority Key Identifier:
keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:c0:92:08:bb:65:94:6d:2f:bf:fc:75:9a:f4:4a:a3:6a:bf:
ac:02:34:d1:0b:4b:76:b4:55:b7:81:9e:56:d9:23:5d:4b:7e:
32:66:50:a0:e4:e6:48:50:11:ff:dd:3c:42:47:44:18:fd:b6:
9a:2a:d9:6c:e4:78:d3:18:bf:30:d2:26:9a:b2:9c:8e:e4:a7:
eb:20:94:88:4f:70:b0:c5:fd:22:fe:ce:5d:f6:70:32:c6:0f:
1c:00:90:e8:15:db:dc:8f:a9:00:24:5b:09:1b:ae:7c:0c:ad:
2c:c3:68:11:80:e4:2e:64:6b:59:35:d8:c6:19:60:e8:f3:5b:
a1:12:93:6a:a6:0e:05:47:b7:15:ce:b5:15:be:1f:a3:2b:89:
42:d2:cb:e0:59:18:14:c8:cd:58:05:fc:48:ad:7c:26:72:ca:
3a:44:5c:ef:32:ce:d4:f5:28:80:07:46:54:28:89:9f:22:4b:
e4:c1:8f:f2:ab:b6:fa:4c:01:80:bd:c4:86:93:16:66:92:27:
ea:89:49:22:cb:21:72:49:ab:7e:77:a0:b0:a9:9b:0a:24:90:
63:31:e8:11:35:43:0e:07:5c:83:4e:43:dd:e5:d3:e3:5d:c7:
1a:09:35:50:65:13:9e:22:16:17:ab:42:01:b0:40:c0:db:fd:
b7:3c:d5:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2
QTExQjQ1MDUwHhcNMjUwMTMxMTYzMzI0WhcNMjUwMjA3MTYzMzI0WjAYMRYwFAYD
VQQDEw02NzljZmI1NS00NTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgUOS3eVi8URN1TDL6qw/T0XX8G8uTHSKuiJWcG73gD7g6TqreQ+PLd19pJU
iZDHosoK4P5Z+6HvEN0d0BpNNiZ5MwfnDY5UXTKz9cA/yNooMyVme2GlI6Lvzu48
9J+jymiksx1h8Li54Vo71xfqD9NWgNTS3T6vLdLTz+F6Qg1ypOvzuRQavvz64t2+
wD/pT+i+tmlh95dYDa1W+ecq3MdkJTaZ0OIu+yKvddlF1XXzwugeI8jHa9fZRvmp
hz3zC3LiAI2ebc2NaJH8k1XVOdqRdq8XEHQleNVYUkwbX4sN12xyg2tnImTSvz5z
MMpGw/pjJwzyuuXVcBrakn+fLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxrIg5M
LTIa1Qkgd8nDpBFvgiAXMB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0
NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz
NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0wJIIu2WUbS+//HWa9Eqjar+sAjTRC0t2tFW3gZ5W2SNdS34yZlCg
5OZIUBH/3TxCR0QY/baaKtls5HjTGL8w0iaaspyO5KfrIJSIT3Cwxf0i/s5d9nAy
xg8cAJDoFdvcj6kAJFsJG658DK0sw2gRgOQuZGtZNdjGGWDo81uhEpNqpg4FR7cV
zrUVvh+jK4lC0svgWRgUyM1YBfxIrXwmcso6RFzvMs7U9SiAB0ZUKImfIkvkwY/y
q7b6TAGAvcSGkxZmkifqiUkiyyFySat+d6CwqZsKJJBjMegRNUMOB1yDTkPd5dPj
XccaCTVQZROeIhYXq0IBsEDA2/23PNXd
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:18 2025 by rpki-client