Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json)
Hash identifier: /rCjHeF74y1s1CSBw00jp85JRDK1Y1zLx9EmRkpYgYo=
Subject key identifier: 9E:0E:C3:72:A7:14:20:E1:87:51:E1:0B:77:1A:A0:CE:C1:50:24:FC
Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D
Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
Manifest number: 0151
Signing time: Fri 31 Jan 2025 03:24:28 +0000
Manifest this update: Fri 31 Jan 2025 03:24:27 +0000
Manifest next update: Fri 07 Feb 2025 03:24:27 +0000
Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: MMMqdDKDMhWUxCK+0JtZ+4SUmYLI29zH2hT1Xv8Z3A4=)
2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D
Validity
Not Before: Jan 31 03:24:27 2025 GMT
Not After : Feb 7 03:24:27 2025 GMT
Subject: CN=679c426b-4a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:4d:ae:6b:5d:52:85:37:81:a8:2f:9f:9b:
59:b7:b0:cd:92:51:35:67:28:e8:bd:cc:9a:b8:c2:
7c:30:09:d7:fe:32:df:b7:b9:63:1d:b9:c3:03:64:
fd:43:01:81:26:e9:e6:47:15:bc:d8:63:85:3e:64:
16:32:65:c0:f9:a9:25:6c:d9:f1:3a:8c:aa:02:36:
c2:a9:e4:10:a2:b3:ee:64:d3:77:07:18:b3:e3:cf:
24:be:f8:38:b0:f0:ab:a3:ab:33:11:0b:99:40:d0:
1c:f3:ff:92:ff:29:07:f7:a9:3a:42:68:c5:f4:8b:
bf:fa:85:e7:39:ce:53:9e:3b:cf:c8:25:6d:d2:84:
f9:0b:0e:ff:7e:6f:01:7f:d5:2d:93:f0:2c:78:61:
ef:d8:06:20:7e:57:22:d7:6e:66:9b:dd:c7:38:e9:
f7:48:d1:7a:13:08:15:e0:c0:d7:bb:17:f4:e0:72:
5c:7a:20:3c:f5:8d:f8:cc:7b:a7:88:10:82:d5:96:
3a:8b:cd:fe:3a:6c:2d:7c:b5:90:52:72:57:f6:d5:
e2:0b:d4:d3:f8:87:ae:d0:7c:b3:c1:42:19:6e:4b:
de:2a:71:c9:a5:cd:0c:ef:bb:5c:0f:f6:99:b1:5f:
e3:de:1f:d2:6d:fb:2b:14:eb:f4:23:ab:7c:57:72:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:C3:72:A7:14:20:E1:87:51:E1:0B:77:1A:A0:CE:C1:50:24:FC
X509v3 Authority Key Identifier:
keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:d3:ce:03:66:e4:38:b6:c9:50:de:cd:9f:20:d2:60:cc:
20:b5:ff:03:7e:38:6c:47:58:8a:66:53:77:28:eb:d9:bf:9b:
f2:c3:32:d9:b2:be:4c:fa:67:7b:23:bf:f0:80:3b:9c:cf:36:
1a:19:e2:15:de:69:25:08:42:cc:17:5b:7e:53:7b:62:26:a2:
8b:ac:00:51:8e:90:a4:ca:d6:38:57:ed:34:02:c0:c6:9b:8f:
46:f4:7f:9e:41:c5:68:3c:22:8f:ec:95:fc:49:e8:c6:c1:38:
18:04:74:62:8b:5c:e5:b6:38:0d:68:64:47:af:89:b9:cd:95:
fd:e3:42:c2:57:76:ec:e1:b7:53:8d:a7:b6:82:9d:a5:91:73:
52:ac:4f:78:3d:1b:e4:e2:79:2e:c6:46:85:90:c4:07:8e:23:
e5:c8:65:0f:6c:97:e5:42:30:91:db:e1:45:54:4b:7f:1b:98:
23:87:f3:cd:a2:a8:86:e4:15:73:51:ff:ff:51:04:60:32:66:
7a:b7:df:8c:1f:cf:c4:f1:ae:32:fe:66:50:97:aa:50:46:f1:
f3:28:f2:0c:5a:cb:86:f4:74:09:80:43:86:d4:79:12:d9:25:
e1:8e:b5:76:a0:3c:4a:48:81:31:59:9d:30:42:bf:86:5c:18:
44:21:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:21 2025 by rpki-client