Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
File: iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json)
Hash identifier: OVsnvy2xr9lTga6bLZr+L8fkA9zAl+G6yf+mjYx2E04=
Subject key identifier: 1B:55:CC:D6:03:DE:27:C6:4D:1E:97:51:04:B6:6A:3F:15:EB:3E:4D
Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
Certificate issuer: /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 05:06:11 +0000
Manifest this update: Fri 31 Jan 2025 05:06:10 +0000
Manifest next update: Fri 07 Feb 2025 05:06:10 +0000
Files and hashes: 1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: NppeXcCih/yHVc7ToCqR1y2YuC1PK/V44MqYUYWPza4=)
2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: 6bbSohjUH92kmBLAIej1XLlPZDYIgyq80vuP91JdYrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Validity
Not Before: Jan 31 05:06:10 2025 GMT
Not After : Feb 7 05:06:10 2025 GMT
Subject: CN=679c5a42-0596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:9a:c8:00:79:f6:77:b3:65:e8:66:da:bc:
36:f4:c9:49:cf:db:eb:7e:0a:e5:fc:00:42:6a:00:
69:a3:20:d6:b7:74:44:06:44:66:0d:a2:93:08:0f:
ec:86:a9:45:5f:bb:29:e7:50:7f:be:a4:77:75:d3:
c9:c2:71:9a:76:7f:d4:72:b0:5d:3d:d9:aa:85:04:
b2:2a:be:fd:c0:a1:6d:06:e2:fb:0c:2e:81:56:71:
ab:89:5e:92:b9:0b:0a:5d:8d:b2:40:12:cc:e2:3f:
bc:72:8d:f7:0e:4e:50:dc:67:6d:86:36:1c:21:90:
d9:26:0b:e5:3a:c7:37:df:85:68:f8:a8:91:3d:31:
2a:05:aa:d9:7b:b2:d5:f6:df:4c:12:a0:d4:0a:fe:
64:ae:4d:12:b1:4d:f8:4d:10:38:e2:fd:c4:a9:d4:
15:2f:b8:20:f5:c0:16:04:6a:4a:e2:14:56:0c:cb:
dc:2c:57:52:5f:b6:85:2e:aa:b8:27:60:19:15:ce:
32:a5:bb:da:c6:1d:6c:31:31:19:9f:92:8a:a4:f8:
fa:e7:00:64:9b:19:04:c4:cb:97:25:95:be:e4:4c:
1d:94:2f:3a:37:f3:01:f9:32:c6:f1:ac:ed:df:51:
d2:53:08:4a:9e:47:d1:de:bd:31:ea:aa:5c:fc:35:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:CC:D6:03:DE:27:C6:4D:1E:97:51:04:B6:6A:3F:15:EB:3E:4D
X509v3 Authority Key Identifier:
keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:d3:92:d8:d1:8b:47:60:0b:fd:ce:88:10:51:43:f4:b4:
71:5e:a9:c1:f6:cf:95:4b:b5:20:87:b4:09:6e:dc:00:d0:7a:
07:3a:aa:76:f9:3f:81:73:7f:b8:df:16:29:ab:b2:09:a3:dd:
16:74:49:cf:f6:d7:e4:76:9d:89:91:1f:ea:28:2a:f2:fa:93:
6d:40:d5:8c:d9:69:b4:56:58:41:f8:0f:3d:aa:a4:c1:1e:cc:
4f:58:ca:27:a3:8a:7d:73:d7:1c:46:81:c5:28:cd:d4:76:9b:
6b:15:a8:c9:46:eb:0e:be:eb:89:c6:8a:e9:70:a0:01:a0:a6:
48:a4:4e:e4:07:02:c8:43:6b:51:31:17:08:cd:64:f5:c9:cd:
9e:7f:13:b9:db:c4:69:6f:52:53:ee:e3:37:98:e2:4d:6e:56:
5d:77:23:af:84:f6:13:d1:c3:48:cb:85:5a:75:cb:de:10:89:
ad:36:47:c1:2d:fc:59:35:ba:77:81:5b:59:46:0d:d4:69:6a:
ea:cf:27:31:d6:40:62:4b:25:ed:82:70:96:18:1c:e7:1e:21:
12:2b:7a:b6:5a:ad:d2:fd:c4:74:44:2d:5d:06:55:4c:20:32:
02:cd:0b:ac:61:cd:c6:c0:1d:5a:05:04:55:8c:44:aa:3a:5a:
bd:40:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:43 2025 by rpki-client