Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier: dCg7cFlD9iXNWO12Q7kUlTy2T7aF9I8n6UtMMpaoozM=
Subject key identifier: CC:CA:CA:6C:36:71:E0:2F:BA:2E:EA:78:7A:EA:A5:FE:E2:0D:B2:0E
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number: 0182
Signing time: Fri 31 Jan 2025 02:59:28 +0000
Manifest this update: Fri 31 Jan 2025 02:59:27 +0000
Manifest next update: Fri 07 Feb 2025 02:59:27 +0000
Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: D12JRtZLIs4omSBtUingiX8ynNA9RgnZIhwaEQeDVl0=)
2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: oyJ8pYc57E6anvBg+OfGz7YjmNkraWU0j/Nep9q9F5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Jan 31 02:59:27 2025 GMT
Not After : Feb 7 02:59:27 2025 GMT
Subject: CN=679c3c90-cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:e7:ad:1f:89:b1:c4:33:7d:80:d4:49:e0:
c6:ce:c1:7b:0e:4f:a5:53:69:43:75:5b:b2:20:bc:
1a:2a:ff:fb:12:ca:89:84:e6:ad:8c:51:df:27:a5:
94:6c:79:03:d5:eb:0e:de:df:07:ee:59:fc:c4:74:
8f:81:e9:fd:04:9d:22:32:24:51:3c:23:24:08:22:
02:d1:37:3f:12:06:da:ca:0b:52:c5:d2:c1:f2:81:
32:47:2e:90:28:59:8d:12:cc:ae:c1:a9:9c:dc:69:
78:2f:8f:2e:5d:bd:06:5b:c5:11:a4:fe:82:ff:de:
1d:58:53:1e:ad:ad:7c:69:ba:dc:10:95:04:7b:f3:
cf:19:85:cb:2e:55:57:c1:ec:5d:10:aa:66:41:3e:
07:b1:f9:a2:b9:32:f9:9a:96:71:fb:ba:b3:2e:4b:
1d:4d:4a:45:e9:36:7a:e1:f9:5c:c0:50:18:5a:06:
09:e3:16:89:aa:ad:db:ab:17:0b:5a:b7:b6:64:39:
bb:c3:b4:78:c7:17:4a:21:ca:d6:16:20:62:89:6f:
66:40:8c:ea:04:92:4d:47:f9:fb:39:11:33:b5:54:
c0:c8:a0:d0:72:cc:35:ab:5b:d3:80:01:2d:e0:3d:
b8:6f:13:d8:d0:fd:e5:e2:5f:b0:42:c0:3f:68:58:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:CA:6C:36:71:E0:2F:BA:2E:EA:78:7A:EA:A5:FE:E2:0D:B2:0E
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ad:6a:e4:26:25:44:18:cb:04:cc:51:67:37:c9:5c:8b:2f:
a0:81:7f:3c:f4:1a:be:21:a9:1e:82:09:f4:43:fc:9b:e3:6e:
f0:45:b6:5f:73:87:19:da:4e:38:27:bf:07:71:94:00:18:14:
b7:84:1d:61:ba:62:c3:f8:99:70:0b:c1:d9:62:98:28:71:21:
ab:02:23:8d:d7:0b:e1:6b:dd:05:07:3f:a3:75:0a:5d:d3:a6:
89:63:8e:51:9b:c2:bf:13:ab:47:4b:9f:af:dd:48:0b:31:6a:
fc:2a:33:3c:06:20:44:35:45:7b:a9:7d:29:b2:fe:b3:52:e2:
c7:df:24:eb:3d:ff:2d:8d:38:1e:d4:82:dc:34:01:f1:2a:a8:
e6:ae:ed:69:88:1c:21:85:29:d0:ec:9d:05:4e:df:8d:3e:92:
85:54:16:14:29:95:97:5b:88:53:e6:60:53:d2:61:f7:9c:c2:
f1:45:67:15:fe:49:df:2b:20:68:88:dd:36:a4:0a:f2:e3:23:
27:31:52:95:75:66:d2:f9:d2:04:53:8e:e2:35:15:63:5f:f0:
73:2d:c2:95:f2:4b:6f:c1:f5:69:28:70:bb:1e:b1:17:50:c9:
80:9d:da:44:e2:28:fd:fc:0f:13:ae:99:61:33:47:3a:dd:13:
ba:00:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:21 2025 by rpki-client