Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier: 9AHKiKsSAIdD8i9gto9gDr/h1l6uN1+hZWR4ONgs0K0=
Subject key identifier: 0C:90:26:E8:89:AD:69:E4:F2:55:7C:7F:A4:B8:A5:A6:67:6F:0C:16
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial: 0363
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number: 035F
Signing time: Fri 31 Jan 2025 01:00:36 +0000
Manifest this update: Fri 31 Jan 2025 01:00:36 +0000
Manifest next update: Fri 07 Feb 2025 01:00:36 +0000
Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: rrUAP0A7I9mOWjf4EtVwMIelrHBk3/OLV0jNFBDWVaA=)
2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: L901qTQEw8muSYE46ShEAdagWkbgFQt2yEJzIv31kfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867 (0x363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Validity
Not Before: Jan 31 01:00:36 2025 GMT
Not After : Feb 7 01:00:36 2025 GMT
Subject: CN=679c20b4-025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:89:6a:66:07:27:ae:5e:63:aa:92:a9:69:
b4:ab:09:36:5a:97:87:be:d6:0e:d7:6e:15:1e:f8:
39:aa:1a:f9:11:19:1e:af:28:ca:51:53:ff:75:fa:
ac:0c:67:91:39:96:14:53:74:df:d4:fc:a0:65:58:
d1:ee:f0:08:8b:d5:ab:ad:b1:b7:26:30:b6:33:62:
36:7d:3e:8a:4a:27:83:3a:bc:23:5c:d0:3e:51:21:
af:d1:1b:15:16:21:78:67:d7:b9:17:b1:32:78:33:
17:9f:2e:b9:a0:20:9f:55:65:d6:40:b3:2e:38:b4:
63:75:58:f7:cf:0e:58:23:4e:f7:e6:59:c6:1b:cb:
a9:8b:1e:4d:b2:c9:f9:b1:72:86:69:04:47:0c:74:
f6:a7:e9:a6:2a:b6:9b:71:29:01:c2:58:b1:c2:9b:
d1:62:90:6a:61:98:c3:87:ed:aa:be:71:9d:b3:08:
12:22:05:a1:7d:6c:f4:99:46:07:a5:b8:11:a7:25:
3c:66:fe:bd:13:b6:3c:89:37:d6:d9:3d:73:2f:06:
4d:79:94:18:97:70:b1:c3:3e:af:0b:dd:7d:27:91:
05:b4:c1:13:d6:bb:0b:99:7e:bf:d1:a9:e5:82:2b:
49:b0:7e:ce:38:a3:1a:3b:f8:79:29:1e:db:c2:7b:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:26:E8:89:AD:69:E4:F2:55:7C:7F:A4:B8:A5:A6:67:6F:0C:16
X509v3 Authority Key Identifier:
keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:6f:3a:96:04:bb:64:a2:ce:53:19:c3:67:7f:05:d1:5f:5f:
ca:16:87:42:27:e9:de:b6:6a:62:07:98:bb:ba:97:1b:65:bf:
ed:b1:7a:37:96:34:aa:93:a9:cc:1e:eb:e7:d5:d9:b0:15:37:
4b:81:54:64:7e:06:9a:16:a2:a0:b3:48:5f:e3:d8:90:2c:24:
22:fc:24:1a:04:ba:d5:49:2e:6d:36:5f:da:96:8c:7d:d5:79:
09:68:41:81:4d:40:50:2d:a3:16:87:ce:d4:36:73:7f:51:51:
38:6d:57:9f:d5:04:dc:1b:4a:46:1f:17:6e:9a:92:23:29:14:
7c:4f:62:81:0c:84:f0:fd:8b:ee:63:f7:1f:fc:d8:28:83:d2:
ce:81:5c:6f:fa:9c:22:be:0b:c5:9a:d7:23:cd:5b:00:b2:b5:
03:3d:26:65:1a:0a:4c:ca:cd:82:55:38:41:3f:0e:b7:c6:c4:
7d:f3:2f:ea:38:2d:ef:b1:b7:09:c3:1c:5a:a2:61:42:23:f7:
df:ff:a4:f7:73:d7:e2:51:33:ff:3d:30:7a:de:39:15:f0:ce:
c9:62:d6:40:70:92:23:9b:da:42:02:8f:69:6f:8a:86:80:13:
e4:f2:5c:5b:d5:3b:bf:cb:7f:01:46:2d:9f:1c:13:f1:42:23:
9a:d8:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:03 2025 by rpki-client