Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: T7OZZ7FG/fzuXEj2/6D3AuwVR4OhC8qcUlXwKetMsaQ=
Subject key identifier: 75:48:EB:6E:97:32:07:96:90:AE:F9:20:33:D7:4D:D8:11:B7:56:6D
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 04:45:52 +0000
Manifest this update: Fri 31 Jan 2025 04:45:52 +0000
Manifest next update: Fri 07 Feb 2025 04:45:52 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: qkiLYVreP5/54qUtvQVs2eUM0yONOk5k5dZUy2oyfKs=)
2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=)
3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Jan 31 04:45:52 2025 GMT
Not After : Feb 7 04:45:52 2025 GMT
Subject: CN=679c5580-0111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:7b:ca:fd:49:36:ca:06:ab:02:f7:b7:c1:
f3:6f:a3:7f:4c:b6:5b:5a:dc:8a:f4:ad:fc:e2:00:
07:db:24:8e:90:60:34:21:d7:6f:fa:d7:b4:a1:bb:
0d:c3:49:d4:69:e6:9d:fc:b9:61:85:c3:1d:96:b6:
cd:42:07:e0:e2:24:c1:f4:a5:73:04:10:9c:63:9b:
a7:78:65:5d:49:98:50:3a:d6:cc:f4:d5:01:92:83:
63:d0:50:bd:ff:3b:54:57:d1:cb:b7:3f:96:44:1f:
da:f2:f8:d2:c3:1e:3a:38:c1:eb:66:82:61:6e:0e:
30:e7:fa:c5:ce:40:f0:57:8c:4f:76:fc:2a:49:98:
d7:c9:9b:ba:75:5d:67:58:01:0b:a3:5c:c1:0a:a3:
b1:99:3f:0e:65:ec:61:7d:9c:b7:ce:d1:27:86:6d:
cd:c6:23:fc:2f:70:c3:cc:aa:af:07:53:d5:62:9d:
31:48:2a:60:ca:5d:b1:0d:35:5d:e0:3d:68:40:61:
1b:e6:06:8a:22:47:4b:4b:02:84:e8:fe:bc:92:81:
ad:51:85:52:7e:49:32:f1:13:85:1e:a6:34:27:be:
42:ac:7c:39:c5:d9:50:99:76:bd:7f:98:6f:aa:a6:
bd:9d:e2:73:fa:11:f1:a4:23:22:41:75:a9:55:84:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:EB:6E:97:32:07:96:90:AE:F9:20:33:D7:4D:D8:11:B7:56:6D
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:6a:af:23:81:52:24:4d:94:e1:7f:c3:d0:ae:8c:c0:79:
8d:30:0c:b3:83:98:56:f9:6b:0b:6d:8a:1b:73:e4:cb:29:da:
1d:07:17:70:4d:9f:17:1f:30:15:db:c5:09:ae:26:91:0e:5b:
14:62:cf:c8:5e:bb:72:7b:3c:a3:91:f6:e3:81:ff:f1:dd:b3:
48:f7:03:24:94:38:5b:1b:ca:5c:d0:1f:86:11:49:8f:5b:bb:
c6:50:73:df:de:bc:2f:4e:68:26:3c:fd:fd:1c:07:3d:7b:0a:
58:98:9f:17:4c:86:3b:b3:51:7c:ac:e5:8d:3b:3f:dd:55:41:
06:e9:15:1f:e9:ea:72:83:dc:64:23:6e:90:06:95:72:d1:3c:
23:d4:a3:8d:62:f1:f1:db:f4:03:2b:29:d7:b7:55:f5:89:24:
41:c7:ff:99:4a:4f:0b:29:e7:f2:0f:7a:5e:fe:47:30:d4:f1:
f5:3c:ad:ba:e4:2e:38:ca:a6:ec:48:c5:ea:85:17:dc:d4:d6:
de:15:d9:c9:6f:24:7c:83:6e:11:d2:ba:f2:41:da:7e:cd:7f:
0a:3b:1e:7c:c4:fe:45:e2:56:55:6f:10:80:af:2b:ce:d7:f6:
df:e8:f5:2d:51:fd:da:b7:af:d4:ca:d7:ea:2a:74:90:01:b6:
bb:bf:6e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:58 2025 by rpki-client