Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier: pQur7lMdRaRVVaqwngfqHOEz7mM5uf1iQF80A9zlxME=
Subject key identifier: A8:69:A6:98:21:0E:7D:2F:19:E7:F5:C9:7B:24:97:05:91:23:F3:F1
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 037F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number: 034C
Signing time: Fri 31 Jan 2025 01:17:05 +0000
Manifest this update: Fri 31 Jan 2025 01:17:04 +0000
Manifest next update: Fri 07 Feb 2025 01:17:04 +0000
Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: Dv3eKfxBW4stPLcsVSdl0aQgPdZTVJLux7VQfyNgSh4=)
2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: uzprXmLZAeVeFEFGMakzKpKMKq1iIlqcTuQSaK0YrGo=)
3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: sdrVSjIs8Qd6YgjT3RuNMeG76kE1PDfBoWYkgwiCgcM=)
4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: 3UjrYjj5O3Amm02WCEzbVdg/2HdFUuqdwKYNG8cKQe0=)
5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: YgWtLAFjeyb8EUf6jgk5P6z3rHF4ij9vs7WYRKlGxPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Jan 31 01:17:04 2025 GMT
Not After : Feb 7 01:17:04 2025 GMT
Subject: CN=679c2491-accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:bf:3e:42:5b:2e:24:70:ac:6e:79:c6:e8:
f7:5c:ad:b1:d6:fa:b8:30:e0:4a:b2:b9:80:71:f9:
58:89:4c:58:ca:df:02:bc:45:e7:d5:7e:a1:42:27:
a2:e6:d1:31:d7:04:dc:02:d7:de:f4:7a:fd:10:eb:
57:d1:3f:20:68:13:a4:4c:f0:58:f4:e5:c9:eb:f8:
d0:96:f3:de:3d:88:5a:1d:99:35:38:5c:1d:d2:02:
d7:fd:34:9a:18:dd:dd:70:5c:5e:b0:a9:8b:34:f8:
6f:6e:cf:24:1f:d2:e9:3a:a8:9a:97:98:1d:a0:fc:
91:4f:ff:31:c9:88:4e:8b:74:3c:e3:fc:44:f6:e6:
6f:ce:bc:b9:b7:98:70:6b:7d:b2:f5:99:e3:a1:01:
50:70:71:8e:32:b5:9c:1f:14:3a:e7:70:75:0c:f6:
80:e9:69:b0:ee:da:f4:82:b9:a9:dc:72:a7:12:ab:
3f:54:0e:7e:af:24:83:0e:87:45:6f:7c:8c:3d:98:
d9:e5:35:07:9a:9f:80:0f:7e:d8:f9:d4:d6:34:21:
53:bf:85:d5:e2:da:2c:05:5b:34:ce:f6:8a:d8:40:
20:be:16:d5:6d:6a:1b:9d:ed:fb:6d:ae:b2:79:32:
30:cc:d7:8f:a7:3e:89:af:3a:44:b7:21:43:7d:d2:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:A6:98:21:0E:7D:2F:19:E7:F5:C9:7B:24:97:05:91:23:F3:F1
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5e:90:53:bd:83:b6:98:be:1a:59:77:08:63:9a:dc:11:f3:
16:10:a8:1b:b0:eb:9a:59:32:bc:f4:c1:30:97:2e:c8:83:96:
7b:08:b2:78:79:62:b3:cc:db:7b:00:39:e6:b8:a5:ad:01:7a:
7d:30:97:9e:13:15:0e:ef:5a:70:3c:95:24:e7:d8:9b:b2:92:
be:58:f5:47:25:6b:d5:55:7a:4e:52:e1:12:2c:18:48:b3:04:
75:a1:b8:32:4c:86:77:e1:e1:b6:7f:3b:6d:ce:b9:16:a4:76:
c8:96:c1:b1:c7:83:a0:fe:30:4c:34:84:6c:eb:58:c5:92:69:
44:6f:0f:5a:0f:8b:a1:7a:8e:c9:4c:e5:a0:6d:b6:83:a2:62:
b6:d8:20:dd:e1:c1:d9:ec:77:b8:75:8b:a5:45:77:53:a7:cd:
bd:b3:f9:e3:b4:6b:4c:60:70:13:b1:6b:a7:10:83:e7:55:b9:
98:fd:74:ee:fb:1d:4e:67:5a:77:b3:ae:0e:39:d6:32:21:1d:
a7:dc:9d:5e:32:60:ea:fe:68:8b:02:da:11:0e:ab:da:46:d8:
7d:0e:d9:76:ab:f3:61:6f:84:84:52:0c:c5:45:ac:ad:4c:26:
ff:60:ec:bc:fc:0e:0f:1a:27:7c:5e:9a:28:97:d5:0e:23:00:
ee:67:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:28 2025 by rpki-client