Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json)
Hash identifier: 0KCs/mt/OV0KvhQ+pI5NZEaaybVusplnU5pl+YS25Cg=
Subject key identifier: 39:B5:D3:14:A0:79:4F:BD:56:5E:E1:B6:C6:ED:14:55:C1:04:80:41
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0C6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
Manifest number: 0C3A
Signing time: Fri 31 Jan 2025 18:28:10 +0000
Manifest this update: Fri 31 Jan 2025 18:28:10 +0000
Manifest next update: Fri 07 Feb 2025 18:28:10 +0000
Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: VmtE3i1Ebax5O/e1JvIfvx9/txE600rr4b6KSoSEigo=)
2: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: QL/NLzdNbP6VC/RbcjFAhO7P1ptgQDlD2OI4FmLsmtY=)
3: 12561046368911EEA0CB766BC4F9AE02.roa (hash: /GknOelDIGsOfVA5prSm5KZ1UJQ7GqbrCT0cnToz+2g=)
4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: 0OHkdOYwWuHEae6hLLfEVYlgXJ3hl5nkCEg2iieXkpI=)
5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: MDORN4dVK/WKX8D1PrktvMyAAOKMRM6BT7nSAEts5I4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3182 (0xc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Jan 31 18:28:10 2025 GMT
Not After : Feb 7 18:28:10 2025 GMT
Subject: CN=679d163a-1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:ee:c3:b1:03:56:80:2d:57:e8:5f:e6:92:
83:96:eb:52:9e:db:52:17:ce:bb:24:3f:0e:3a:fe:
33:65:bf:8d:1f:6a:3a:b9:1b:87:2a:f0:17:19:4f:
8f:f0:3b:0b:3a:ff:6e:a2:61:66:e1:84:95:fb:cb:
17:38:c9:65:f1:65:ff:7a:80:ba:ee:fd:59:c3:bf:
cc:33:48:26:81:d0:53:1a:97:37:d2:43:09:54:07:
2b:e9:ef:a8:9b:22:d1:6e:77:11:76:55:c1:b5:fb:
88:7a:2f:b4:56:51:63:b3:f3:7f:cb:cd:84:cb:6d:
4c:90:94:ad:43:63:1f:9f:87:b5:73:52:ae:95:72:
44:a5:0e:77:45:44:db:2d:58:d4:ca:0a:7c:2f:65:
57:a2:5b:4a:66:7e:03:7b:53:4f:ae:74:77:41:d0:
a1:34:73:60:59:d2:d2:0f:4a:08:24:49:75:a1:8f:
42:14:82:4b:12:ae:03:56:c0:bf:2b:13:d8:03:ed:
56:f8:a4:1d:50:3c:92:8d:ba:d2:20:f8:1e:9e:a6:
8f:d0:25:9c:e1:20:b0:1b:8f:5f:8d:87:fa:90:a9:
a4:4f:ad:ee:8b:24:8c:ee:b8:3f:e4:dd:35:c0:da:
a3:ca:72:e3:48:24:8a:b9:cb:9b:f8:2f:53:c2:53:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:D3:14:A0:79:4F:BD:56:5E:E1:B6:C6:ED:14:55:C1:04:80:41
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:63:78:dd:fb:ca:21:b8:5d:d3:23:95:40:5a:3c:85:2b:
d6:a1:cb:00:0d:f2:67:7d:f0:df:89:73:de:2d:03:21:1c:67:
c7:24:9b:4a:b5:42:01:df:f6:1f:0f:90:7d:fb:9d:ad:f2:45:
4b:da:06:93:0d:dc:c6:f4:1a:76:66:f6:6d:6a:be:5b:1d:97:
84:87:da:10:89:a6:fc:0d:4e:e6:c1:d9:dd:a7:ac:63:cb:ed:
e6:5f:16:0e:eb:42:19:00:24:ac:dc:00:94:70:1f:e7:d6:19:
36:12:b0:60:fd:67:d7:10:fa:1c:ca:4d:b5:be:8d:3b:78:0e:
aa:84:82:30:e0:f6:f1:0c:cb:20:0e:61:ec:b0:bc:08:73:c1:
c6:8e:44:ca:3f:c5:f8:d2:4b:1e:b2:2d:03:16:5b:3e:45:30:
9b:9b:0b:b5:8b:bd:41:e3:a0:ea:f9:4e:4f:66:b8:cc:45:d7:
b4:39:39:61:38:78:d0:30:0b:31:8d:8e:f6:e7:5c:d6:0b:89:
e4:b5:9a:9b:db:f0:b0:38:7a:12:a4:b9:20:7d:06:8f:56:a4:
48:a5:d1:93:b7:e1:88:8a:8c:af:1c:ca:96:d5:b2:d9:3a:d5:
05:55:7e:b9:69:df:50:79:06:94:5a:cb:07:4f:ce:f3:9b:54:
35:1a:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:25 2025 by rpki-client