Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: Pv93612Um78+0kmeDn8v+SuZt2cGekgkdMkTzWzPEF4=
Subject key identifier: B5:F5:CB:0D:5C:72:B0:64:32:34:47:2B:27:1C:78:6E:9F:C4:11:58
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 04BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 04B8
Signing time: Thu 30 Jan 2025 23:56:34 +0000
Manifest this update: Thu 30 Jan 2025 23:56:33 +0000
Manifest next update: Thu 06 Feb 2025 23:56:33 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: 1EsYu/NeNdMP0uQdFR1HyJJB+HAzp+FBFvsgSdmgOL0=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: UibVZP54wNfnJM5fmfROJ4sssLQa2oOrL7RimgDBnPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Jan 30 23:56:33 2025 GMT
Not After : Feb 6 23:56:33 2025 GMT
Subject: CN=679c11b1-ea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:49:e4:17:78:43:55:d6:52:67:14:bb:b6:
b7:c7:41:07:dc:08:81:06:a0:61:a7:f6:0d:6f:87:
53:dd:8f:6d:e8:a3:f1:03:e8:c4:ab:63:20:90:5d:
2f:78:35:5b:00:c4:84:52:60:b1:71:b2:e4:c1:2b:
ac:71:f5:b8:ce:0d:eb:88:bf:f9:75:9d:21:30:b3:
09:5e:c0:b7:e1:81:7c:85:a5:68:14:e8:72:25:0f:
d1:74:58:62:30:1b:58:d3:cd:c0:24:d8:3d:f8:c3:
df:40:67:b1:9d:33:dd:87:ef:db:3a:78:fb:db:8c:
0b:8c:c6:6d:3d:8a:4f:25:2e:77:b2:64:86:c4:57:
27:d5:8e:b7:04:cd:d9:49:47:09:ae:ce:83:9d:f0:
a8:63:2e:f6:d3:fb:d8:12:02:fd:c9:54:6e:9f:ef:
a5:c3:fd:98:a0:5f:6d:d9:31:8e:37:31:b6:a3:99:
39:8b:bb:09:84:62:fd:9c:cd:2b:ad:6a:84:59:ff:
3c:30:93:cb:c7:1e:7c:e8:db:ef:c4:b3:ef:d2:42:
1d:bd:b1:fa:19:6e:1f:36:b5:2b:38:90:8e:08:de:
85:f2:b3:22:ae:40:05:5a:a9:f9:7d:db:09:a9:2f:
85:90:d7:15:2e:d6:9d:40:53:e7:38:ca:ac:25:83:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:CB:0D:5C:72:B0:64:32:34:47:2B:27:1C:78:6E:9F:C4:11:58
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:c4:8e:30:94:0b:9f:e0:c2:ac:96:19:89:82:6d:c6:ea:
be:9e:19:d6:08:5b:d3:eb:76:00:f7:72:4e:95:7d:ee:f4:ad:
52:c5:61:14:e0:0d:91:7a:fc:fa:31:a0:a5:82:57:18:e8:d6:
41:26:c2:a9:a2:cd:7f:10:9e:30:61:b8:34:07:61:a1:39:17:
d0:15:cd:c2:a3:9c:60:f9:e0:86:20:7b:3b:e4:9c:87:a9:72:
90:26:12:f4:ca:00:1d:61:0f:22:54:11:51:a9:8a:e7:3c:d9:
dc:45:77:ab:50:4c:6f:7b:de:34:e4:64:7a:08:1a:1f:7e:88:
ea:76:64:c4:d5:af:fe:6e:12:43:9b:10:b1:ad:ab:2a:e9:41:
f3:f2:37:02:f0:b1:2e:c4:c7:f0:46:10:86:05:7c:53:06:e6:
ab:58:10:76:83:1d:14:96:cf:26:e8:72:a4:a9:2a:85:a2:27:
4a:fb:94:05:6d:8d:24:98:97:d3:6d:95:cf:12:b0:1b:48:90:
24:1d:5c:59:fb:f7:71:f3:dd:52:09:1a:7c:24:b4:20:59:80:
31:b2:c0:5b:2e:77:a2:88:90:40:23:38:02:45:4d:09:ee:89:
b6:6d:fd:ca:32:93:84:60:0a:62:57:a5:84:0c:fd:dc:63:9a:
4e:34:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:11 2025 by rpki-client