Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
File: BD435E3ED6FEEC26F879A0542F609A272CC71307.mft (raw, json)
Hash identifier: mKB/6qJBQuJiAoa4Y/qLij0gNQQdfcNa/WeFkIz63So=
Subject key identifier: 8D:4A:87:F8:B5:16:B8:37:DB:30:D7:E5:2C:2D:D0:BD:2E:4F:F7:17
Authority key identifier: BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07
Certificate issuer: /CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307
Certificate serial: 7FCC24CE226BAFB0AB54616D4B6B6194385F5B41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
Manifest number: B4
Signing time: Fri 31 Jan 2025 08:37:23 +0000
Manifest this update: Fri 31 Jan 2025 08:32:23 +0000
Manifest next update: Sat 01 Feb 2025 09:26:23 +0000
Files and hashes: 1: BD435E3ED6FEEC26F879A0542F609A272CC71307.crl (hash: fi7nJSI5Q8egsSDnpNicONa5MDp7Z8coR9N/eQm+w7I=)
2: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: g2WPQKmcG8F9BNMuoo0qRMIr0xGyZZKzcqG6wAbcjO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cc:24:ce:22:6b:af:b0:ab:54:61:6d:4b:6b:61:94:38:5f:5b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307
Validity
Not Before: Jan 31 08:32:23 2025 GMT
Not After : Feb 1 09:26:23 2025 GMT
Subject: CN=8D4A87F8B516B837DB30D7E52C2DD0BD2E4FF717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:a1:38:83:50:fb:7e:54:c6:77:05:a2:31:
db:b7:e0:b9:f5:b5:87:92:a9:63:b2:16:35:cd:1d:
3d:e9:f1:7d:e4:4b:fd:a0:35:d3:de:1a:eb:e4:41:
23:b6:ed:93:9f:a8:b1:c0:a4:1b:fb:88:72:9a:03:
d4:28:2b:83:95:17:bb:1e:be:1c:e8:2c:07:62:d2:
48:b0:16:b4:98:43:1a:da:0c:7b:5d:73:8d:ab:93:
1c:22:88:7b:12:a8:07:17:2b:2b:0a:7e:d0:6d:08:
b1:1a:e4:66:47:68:4f:3a:7b:12:8c:f6:d0:e6:48:
72:29:10:45:ff:ea:5f:48:7d:60:db:2a:a5:6f:43:
18:a1:3e:d2:ec:af:01:99:90:ae:25:54:6a:5c:f4:
9d:3d:8c:3d:29:8d:84:60:99:60:f4:07:db:23:64:
fa:73:b7:e6:b1:75:68:e0:10:3f:6c:39:85:12:35:
26:37:a2:24:95:ab:9e:bd:6c:17:94:9d:81:90:96:
89:ac:c1:d7:c3:5e:f5:3c:93:d6:16:4a:fe:8b:56:
f5:6f:1d:a8:63:a8:54:b2:05:d7:44:db:5e:54:78:
fb:f9:36:70:cf:f2:a3:be:7a:fe:d8:88:3e:cf:45:
51:49:64:34:cf:d2:3b:7a:7a:5c:85:3d:21:e3:2c:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:87:F8:B5:16:B8:37:DB:30:D7:E5:2C:2D:D0:BD:2E:4F:F7:17
X509v3 Authority Key Identifier:
keyid:BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3c:11:67:e8:7c:9f:f8:30:c2:40:d6:5c:c2:63:87:bc:c7:
a0:af:9a:22:5a:78:e7:1d:49:7f:e2:61:da:cb:43:73:bd:6d:
22:53:5f:72:a7:9b:7a:99:60:4c:a8:3f:c0:0d:29:ad:c0:e9:
3c:c8:2f:71:f0:1f:52:7c:31:68:59:39:e6:3a:32:26:b5:13:
3f:ba:b3:5f:9d:94:17:a3:06:2d:ba:b7:49:02:60:bb:b0:e0:
48:c1:51:a7:14:9b:9d:3b:c3:8a:2a:20:00:4d:1e:0d:eb:59:
10:27:0b:71:f0:d4:cc:7c:2d:9c:53:01:f6:d2:24:9d:02:d1:
df:2d:45:34:78:aa:c4:6b:1f:db:5c:82:7b:13:57:52:ae:d5:
32:53:5d:dc:bf:69:8c:7b:9c:9d:be:bc:d3:1a:a8:d3:92:7c:
f2:5f:b9:73:1a:10:40:95:e8:79:ad:36:f8:a9:ae:69:fb:62:
1d:fd:19:e8:41:1e:15:e2:b0:17:3a:a1:a8:80:3f:d7:b3:d9:
61:28:b5:79:d4:c6:ca:96:c1:ff:b5:43:0c:dc:bd:98:20:a9:
bb:5c:67:3a:b2:1f:a3:16:61:a1:fa:0d:ef:0b:ce:90:c3:48:
20:40:1c:de:af:22:a4:90:07:1a:ed:e9:9e:18:f2:b4:06:69:
51:dd:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:57:59 2025 by rpki-client