Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier: smAnKfzbQj6fvwGr6B1NVo8YG0Dz92OtqIlitcDV5Dg=
Subject key identifier: 8E:1E:A2:FA:FD:56:1A:D6:8D:5A:B6:EE:12:85:9C:B0:61:83:0E:B3
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number: 0705
Signing time: Thu 30 Jan 2025 21:50:41 +0000
Manifest this update: Thu 30 Jan 2025 21:50:41 +0000
Manifest next update: Thu 06 Feb 2025 21:50:41 +0000
Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: EyeVIvkYWjNPcYRrWnoXLH528vaz3ixqLWZydW3m79k=)
2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: 0mX5AyQ3/wAE6Y3GapFs8PrduN5XApUo77DD01nsgSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Validity
Not Before: Jan 30 21:50:41 2025 GMT
Not After : Feb 6 21:50:41 2025 GMT
Subject: CN=679bf431-6dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:ef:dd:2b:71:68:9f:63:ff:c1:00:3a:d9:
ef:5b:ed:60:c9:56:90:12:49:7a:c1:46:21:1c:fe:
6a:c7:0f:1b:66:be:fa:b8:5a:52:5e:69:bd:fa:0a:
b2:f0:5c:6c:fb:ed:16:9c:1a:e3:8d:bc:4f:3d:f3:
d6:58:ab:2a:3f:a2:18:97:2a:37:78:d0:01:7f:68:
97:d1:af:4c:51:df:8f:9f:ec:c6:e2:af:9e:0e:9e:
38:9f:70:17:50:b6:6e:33:6c:7d:b6:ca:a6:b4:44:
03:50:a3:4f:fa:7b:c3:fc:02:8e:be:aa:f3:9b:e7:
e5:5c:7e:a6:eb:61:95:75:5a:b2:e6:64:cc:47:f7:
6e:c8:24:fe:ba:c7:73:71:14:3b:3f:9d:05:15:1d:
ab:79:f2:71:3e:93:a1:bb:4e:3f:9b:d7:60:41:01:
0f:1f:b0:9c:20:53:59:7e:15:12:65:50:61:19:f2:
51:5d:85:2d:7e:63:4c:3c:e3:87:33:fa:1d:0b:98:
6c:4f:ff:e0:a4:a7:ed:92:04:d7:56:94:b0:41:a6:
79:c0:e4:91:4d:73:02:f6:3e:36:99:09:96:3a:cb:
46:89:29:bc:e2:02:74:2c:a7:d8:d7:b5:c3:e7:7d:
58:b4:87:e6:1f:bb:f4:40:26:83:ba:a3:f2:70:a2:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:A2:FA:FD:56:1A:D6:8D:5A:B6:EE:12:85:9C:B0:61:83:0E:B3
X509v3 Authority Key Identifier:
keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:cd:cd:b8:00:81:89:0e:80:dd:f3:5c:16:79:d0:6c:9f:
ff:2b:42:08:62:e4:6d:21:b2:2a:a0:7e:ec:36:73:fa:6d:9d:
a0:14:e8:d2:d1:c0:40:24:4d:68:d5:9d:30:e4:d0:88:96:c1:
bd:58:9b:c0:22:69:73:50:12:d9:20:a9:69:62:9d:15:d4:98:
44:41:d9:53:61:7e:66:ec:de:05:77:94:c7:06:14:cc:08:22:
d8:53:69:83:23:5e:de:8e:4e:a1:ab:b3:6d:1c:6b:5b:97:6c:
ef:ba:cd:de:14:f6:a5:44:05:8a:35:e6:ef:11:30:23:3c:d6:
28:5a:26:15:93:a1:6d:c7:c9:f4:d5:8b:46:ef:eb:c1:63:55:
a1:1d:e4:fd:77:de:b3:5d:0e:f2:9e:42:88:0d:fb:b4:f2:fc:
6c:79:29:26:1f:fc:95:a9:55:5e:c6:d6:bc:c9:73:2d:0a:e6:
d3:ac:67:41:f9:49:1e:30:43:97:93:fb:b9:21:1a:a4:b3:a1:
e2:d2:fa:26:e9:14:ad:b6:a1:06:1c:5c:64:98:9e:e6:c0:e3:
f8:8c:c3:f3:d9:19:8a:2f:5e:fe:3f:34:50:dd:c7:7c:90:10:
06:8f:19:a6:5d:6f:3b:9b:b1:4d:40:14:3f:cc:16:73:22:02:
62:52:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:30 2025 by rpki-client