Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: 2XS5tCfrwm94HeLGHEgKJyqkvAldshSl7vILZafRT4A=
Subject key identifier: AA:5C:40:D9:42:8F:DA:99:AB:7A:02:56:16:E6:AE:57:1A:DC:84:C8
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0AD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0ACE
Signing time: Thu 30 Jan 2025 19:28:19 +0000
Manifest this update: Thu 30 Jan 2025 19:28:19 +0000
Manifest next update: Thu 06 Feb 2025 19:28:19 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: SnmY/3mbPN/GZ68JxiEG0BNA1RvxTvfnqh0shK92O/Q=)
2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Tlot9sCT0dKzDi+iGMaa7IKkM12iDzM+MG45fS4fB3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: Jan 30 19:28:19 2025 GMT
Not After : Feb 6 19:28:19 2025 GMT
Subject: CN=679bd2d3-69fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:2e:43:ce:6c:9d:24:6f:02:d5:72:a1:b8:
04:7f:3e:d8:19:ef:c3:e7:a9:86:9a:a2:fe:84:3e:
66:24:bf:8e:07:4c:6f:e0:c8:3f:07:00:2f:c2:5d:
17:a0:8f:0e:4a:09:ab:b2:64:99:45:a7:3f:a2:f3:
cb:b5:86:98:bd:b2:a3:72:ef:bb:98:ef:da:29:52:
2b:57:c0:94:54:8c:6a:65:e6:f2:13:81:b2:fa:7e:
52:12:0c:bd:08:b9:b7:d5:57:01:3a:4f:40:00:c8:
92:22:e3:bd:3e:0c:3d:b5:34:e6:52:45:3d:c7:64:
f2:7e:1d:5f:e7:1e:62:62:82:d3:90:0f:65:d8:11:
76:08:e0:49:eb:90:73:c8:af:af:3e:6d:fd:67:47:
c0:f6:5a:b2:9a:4f:6d:40:48:81:eb:d3:b3:f8:e7:
59:c9:9f:b0:58:da:39:2c:ff:c0:ac:36:06:81:35:
78:fb:26:4e:89:52:32:6d:3d:8a:74:2c:d0:e5:5d:
b4:33:c1:08:9d:e7:9d:c4:92:ed:c0:27:05:39:55:
a3:09:d9:20:67:27:c6:b5:01:4c:6f:b9:b5:09:ce:
43:72:dd:4e:3b:6f:b0:91:4d:36:4f:3e:60:a2:ed:
7e:74:4f:27:0e:8a:ee:17:7c:3a:ca:b7:99:75:ac:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:40:D9:42:8F:DA:99:AB:7A:02:56:16:E6:AE:57:1A:DC:84:C8
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:c1:c2:c7:43:5a:ca:21:a9:b9:14:64:1a:1c:6b:36:a9:
2b:d0:3f:21:1b:e8:cd:07:36:b3:19:16:85:ea:8d:71:5e:1d:
b3:64:e4:aa:5e:df:01:5c:54:83:94:33:6f:c7:17:98:e3:b5:
39:90:69:51:a2:57:5e:c6:51:28:99:13:77:dc:2d:c6:46:13:
49:c0:10:43:39:cd:5d:4d:7c:8c:a1:8f:d6:ce:8a:e8:bb:f0:
18:78:d9:2c:85:39:4f:ee:3f:30:fb:6d:1b:cc:52:99:92:84:
58:0a:97:51:74:8e:b7:38:e0:aa:89:9a:cc:cc:31:58:95:43:
4f:7b:09:a2:3a:3c:c8:6c:ae:30:77:69:31:11:a9:3f:27:9f:
da:9d:4b:6c:a6:b6:c4:40:f5:38:d5:2f:f2:1d:52:03:38:fc:
b7:69:0c:e6:c8:d6:e3:aa:10:c6:1d:15:7d:44:4e:99:d9:25:
a7:4b:43:16:af:b4:51:b8:86:da:44:d3:e9:c1:66:a6:4a:fe:
9f:22:36:f7:a2:b1:47:69:bf:bc:b8:97:13:a4:c4:5c:a2:ce:
4b:4e:49:42:de:59:6f:a3:27:fb:de:a5:68:62:cb:4a:0d:6c:
74:d1:b2:f5:f4:9f:09:80:10:de:e3:06:3f:2e:d0:5f:28:75:
bb:68:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:59 2025 by rpki-client