Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: NYOevBoJ+1igqWAl24TTuyHzN48+x85ZS+UYh7S743w=
Subject key identifier: 30:EE:79:65:25:F6:F3:47:B0:4C:3E:75:CC:FF:4B:D1:BF:0D:F6:5A
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 1656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 163D
Signing time: Fri 31 Jan 2025 16:43:19 +0000
Manifest this update: Fri 31 Jan 2025 16:43:18 +0000
Manifest next update: Fri 07 Feb 2025 16:43:18 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: Z4Fcb04WRWIZuxMEaJ1DLtU8crkj+TdP8tcuw/cZT2k=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: e5jgIESXFxNT6NU+78fDrpwylXFQS920y6o/aeQL2pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5718 (0x1656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Jan 31 16:43:18 2025 GMT
Not After : Feb 7 16:43:18 2025 GMT
Subject: CN=679cfda7-6031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:71:20:a5:57:43:19:f6:9c:09:61:48:9b:
99:a0:28:b9:40:ed:9c:2c:25:03:da:1f:0f:ec:5f:
7f:35:39:55:84:a6:2c:d2:99:2d:b8:c7:7a:2e:60:
ec:ba:4d:d2:c7:1a:ce:0e:0d:19:a2:66:a9:0b:6c:
16:b0:13:06:38:19:2b:31:5d:68:f6:98:61:9f:76:
55:a7:0e:2e:5c:cf:bb:c3:ae:58:81:40:ce:16:63:
af:b8:4c:e6:54:e1:0c:af:bd:d9:04:17:30:a6:e2:
f7:ff:fb:bb:4b:1a:fe:d6:9f:1c:3b:69:f7:26:da:
0a:ba:2c:2b:40:17:5a:6c:12:d8:35:db:e7:77:8a:
ff:be:a1:32:17:a6:dd:f9:f4:a9:80:c3:38:32:dd:
b7:af:85:c2:80:c4:75:a3:95:b9:76:c3:98:87:39:
a4:9a:3a:d6:49:37:76:ce:f8:c8:25:ac:fe:a7:54:
e5:b1:dc:9a:27:f5:87:13:b9:7b:a6:13:70:ff:65:
72:35:9d:b6:32:e7:36:6e:0c:85:b9:a2:2e:21:78:
b0:d1:94:7c:56:2e:ff:34:90:6a:83:0c:e4:a6:9a:
0a:a8:0b:19:9d:68:44:09:f1:a5:8a:be:20:44:69:
57:9f:af:63:ba:c6:7a:8f:34:fc:5e:61:8a:e3:fe:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:79:65:25:F6:F3:47:B0:4C:3E:75:CC:FF:4B:D1:BF:0D:F6:5A
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:f6:c4:b2:97:c5:22:1c:f1:1e:43:65:20:ed:14:64:7a:
06:cb:db:5e:f8:92:21:3e:0f:c6:04:2d:b5:d8:3b:03:da:ea:
2e:9a:9b:3e:87:a1:7f:a1:ac:23:57:fb:6a:62:27:76:52:29:
3d:67:b9:78:a0:14:02:18:b4:bc:52:3a:91:e8:81:76:31:bd:
b4:41:89:3e:c2:ba:67:39:d2:a2:94:b5:f1:a6:38:dc:e6:85:
40:e1:57:b9:a7:ac:97:15:b8:cd:88:b0:a8:f0:8e:1a:d9:7c:
06:fe:a1:32:a3:72:12:a2:ab:f9:81:dc:0f:9a:a2:6a:f5:e0:
e3:2a:26:36:22:53:bc:46:08:aa:ad:f1:a0:6d:8a:be:93:8e:
0a:72:27:9b:7a:53:06:39:07:07:35:e7:88:6f:a2:5e:b9:84:
e6:be:da:23:39:e3:a1:59:16:91:9d:78:76:ac:05:88:53:c8:
77:8a:c6:8f:17:e8:b7:2c:6a:22:7f:bf:3e:22:93:e1:c2:6e:
6d:87:58:3a:6f:f9:d1:ff:17:eb:52:c6:49:5f:87:ef:c2:9c:
52:34:3e:34:4b:7b:43:16:c6:f2:5d:5d:e5:75:10:3d:82:f7:
a9:20:a5:f7:bd:50:3f:65:a5:8b:12:e5:8e:03:d1:f1:14:05:
df:2a:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:08 2025 by rpki-client