Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json)
Hash identifier: mgLtSEOp8y9vxrmiVSed+nUw1Mx7hQT30IpImhjKYzc=
Subject key identifier: 42:83:2B:30:14:25:E2:F5:80:CD:CE:57:C8:E1:DF:E9:40:5D:10:08
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
Manifest number: 016F
Signing time: Fri 31 Jan 2025 03:05:33 +0000
Manifest this update: Fri 31 Jan 2025 03:05:32 +0000
Manifest next update: Fri 07 Feb 2025 03:05:32 +0000
Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: Qvt7XPgoNqhtcL5OwmWFAiZ/Pck08Htv0QLXtL7jVyk=)
2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: S0QCets6nYQwhXbRnwnSRy3OBYGEXLOm6h5sFxoClJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Validity
Not Before: Jan 31 03:05:32 2025 GMT
Not After : Feb 7 03:05:32 2025 GMT
Subject: CN=679c3dfd-adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:75:7b:db:8e:e1:b5:7b:67:4e:a1:c4:1c:
a8:0a:0c:95:eb:36:01:ad:fb:6f:f7:18:42:16:39:
37:98:59:18:01:57:d9:67:15:bb:2c:9f:3e:46:4f:
fa:eb:f3:d4:3d:6e:de:5c:5c:73:d7:ab:bf:ce:9e:
d6:d4:06:fe:3b:66:74:ce:c7:5d:63:22:40:c3:bc:
f2:1b:3e:0a:03:08:23:39:65:8d:08:63:bb:2b:82:
b9:e1:ab:7d:c5:b7:32:90:15:f4:ac:d9:88:b5:2f:
3a:d9:93:70:e8:cc:d6:2b:eb:de:9b:42:aa:6b:6d:
29:1f:0f:b5:f6:e7:a6:6a:0c:97:bf:93:b0:dc:e3:
90:0c:42:43:d5:3a:a2:f2:20:31:20:b7:db:fd:7b:
7a:29:4f:23:87:1e:d0:cc:05:8f:ba:e3:d2:33:0b:
88:36:6c:4c:44:aa:03:ee:05:38:b5:ba:a1:d3:44:
8c:ed:bb:da:88:78:c1:4f:3f:1a:99:bc:8f:e2:5a:
a0:74:55:5b:3c:a2:8b:0b:c5:61:3f:45:5e:60:0e:
ab:44:a1:c9:db:46:1d:c3:4d:bb:c7:4f:16:7d:e8:
13:ba:41:e2:06:3e:18:bc:0d:51:16:72:37:5d:ee:
44:b0:ff:f6:d5:38:a0:89:e1:be:ec:06:97:04:2a:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:2B:30:14:25:E2:F5:80:CD:CE:57:C8:E1:DF:E9:40:5D:10:08
X509v3 Authority Key Identifier:
keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:b7:34:6b:50:41:d1:e1:6a:27:6c:4e:c8:ca:76:84:c8:
d5:70:3c:40:be:f3:22:99:ea:c7:a5:08:01:12:22:a9:3f:35:
ff:a1:a0:68:d0:cc:bb:3a:1a:6e:34:d9:25:07:75:d0:eb:62:
e9:21:c6:f6:40:9f:96:ac:e5:b5:8b:b4:d9:10:d2:d1:70:bf:
2d:55:b7:f9:95:9e:50:13:7a:cc:c8:bd:75:76:f4:a7:94:3d:
f2:1e:e5:b8:91:5a:5b:98:3b:ce:e6:99:13:95:53:c3:0a:27:
c0:22:19:47:7b:22:ae:55:56:45:4d:aa:b3:9f:17:94:1a:60:
eb:56:2d:d3:9c:7a:77:7a:63:0b:b0:61:2a:e2:8b:8f:92:ae:
2e:b9:92:17:f8:73:ff:1a:1b:4c:8b:70:3d:1d:d4:1d:22:fe:
65:43:11:50:f1:40:0b:b0:7f:df:28:9e:9b:d4:f0:28:bf:42:
be:b0:89:e7:87:07:63:93:8e:6d:5c:22:c9:4d:95:d2:0e:75:
76:87:62:dc:63:c5:17:58:77:8c:da:c3:84:f2:14:f0:9c:f1:
9f:87:2b:1d:bf:d8:5a:e4:2d:db:a1:77:51:dc:d1:ab:22:e2:
e8:3a:31:71:c8:77:44:95:55:7c:a0:dc:d1:d8:a0:d5:60:66:
1f:13:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:18 2025 by rpki-client