Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier: 18a7bMmWdlJ3WcicRJ0lPfPSQ6crfHW98nH5k1FlDME=
Subject key identifier: E0:4B:87:CC:3C:18:08:5E:B3:23:C1:68:BA:52:0D:68:D1:C9:A9:65
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial: 0B83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number: 0B83
Signing time: Thu 30 Jan 2025 19:01:55 +0000
Manifest this update: Thu 30 Jan 2025 19:01:55 +0000
Manifest next update: Thu 06 Feb 2025 19:01:55 +0000
Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: /kMOYMlbiVV9lxL/TUewTfWZ+zBxGHz6NRdcTwQPqpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Validity
Not Before: Jan 30 19:01:55 2025 GMT
Not After : Feb 6 19:01:55 2025 GMT
Subject: CN=679bcca3-9119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:73:8b:47:a5:58:be:85:ba:40:37:89:ed:
64:1b:50:36:fd:e1:2f:2d:0c:02:7e:4e:43:15:41:
23:0a:f9:9c:11:bb:00:13:dd:33:94:79:5f:cf:0b:
6e:2a:38:52:5a:92:9b:80:01:4b:c0:c5:93:39:fc:
26:0f:7e:23:c2:1c:ca:d1:e3:60:ca:d5:31:9c:0f:
4a:88:4c:5e:6d:66:c5:df:a5:a6:dc:1e:54:b3:cb:
6b:be:17:b6:9b:d0:7c:c4:63:2e:e0:06:2f:97:af:
05:01:7a:fe:94:56:7a:3a:27:d8:28:be:79:09:97:
7a:5e:5d:8d:4a:82:47:15:0f:7a:56:0e:35:4d:8b:
cc:4d:d0:b4:86:a7:69:d1:a4:5d:28:46:8f:60:18:
a2:3e:e8:bb:b4:ea:31:60:27:d1:b7:50:02:78:d4:
02:17:23:72:c2:b9:7c:2c:2a:76:5c:cd:76:15:2d:
e3:ed:26:f4:6e:bc:b8:e6:27:7d:82:48:7a:76:89:
cc:18:4d:d1:57:d2:99:1e:83:22:0d:3a:00:2e:18:
53:d4:93:51:23:f5:73:0f:b1:bf:ed:25:ff:0e:42:
3e:03:c2:da:a9:39:6d:02:44:08:1e:cc:cf:8f:15:
45:a0:0b:d5:bd:86:7e:3a:95:c2:1b:65:ff:be:40:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:87:CC:3C:18:08:5E:B3:23:C1:68:BA:52:0D:68:D1:C9:A9:65
X509v3 Authority Key Identifier:
keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f1:9f:21:e8:58:d8:d6:3d:30:95:0f:55:9b:32:91:0b:1c:
08:82:4e:d1:7e:24:82:cd:d2:0d:fb:e0:71:c7:41:b6:0a:8a:
8b:a7:7a:62:f3:b6:c8:7d:92:c7:5e:b4:8a:d3:4f:b9:d1:a8:
57:d0:2f:b9:4a:0b:d3:e7:f7:c2:db:cb:83:ab:87:3a:0f:40:
e7:72:b0:c8:bb:8b:2d:b8:26:4b:49:0c:59:33:d2:06:5d:46:
c6:db:4c:e0:96:66:00:0b:4b:03:f1:43:44:10:ee:63:b3:b5:
eb:fd:72:bc:12:e6:37:d3:ca:a5:f4:8c:13:67:9e:cc:1b:d4:
5f:31:07:46:cf:87:d1:df:c2:5a:de:6d:24:86:3e:dd:66:09:
7d:79:cb:dd:62:ed:cb:2a:da:a1:59:be:63:b5:14:39:6f:b7:
2f:13:70:8f:96:14:bc:69:f2:88:ee:21:8e:00:e5:02:eb:36:
c0:8f:e5:c1:33:ce:a0:78:52:9a:11:1d:b0:5e:c9:01:ea:1d:
13:dd:e9:58:05:0e:5f:ce:99:0c:30:ea:cc:39:41:ba:b0:81:
d2:16:64:67:de:ef:10:25:70:94:74:09:f2:12:8c:80:77:24:
5d:3a:de:8b:a4:b9:e2:3d:5a:a0:70:3a:4c:df:94:e1:21:35:
07:3e:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:58 2025 by rpki-client