Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
File: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft (raw, json)
Hash identifier: ZQaUPEY4t+eFSKGUbaso2DWETL12INNNN39WnfkUHy0=
Subject key identifier: D7:08:EB:84:98:86:CA:38:7A:74:37:2F:3A:5F:40:9B:18:CB:93:C1
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial: 045DD7BC050C0AD2C271A6C6243837F50DC29D3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
Manifest number: 046A
Signing time: Fri 31 Jan 2025 06:58:51 +0000
Manifest this update: Fri 31 Jan 2025 06:53:51 +0000
Manifest next update: Sat 01 Feb 2025 10:20:51 +0000
Files and hashes: 1: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (hash: Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w=)
2: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl (hash: izbAL/tl7Hj+i4UYzFl3JHySKjiDbhe7GE1RW9tIt2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5d:d7:bc:05:0c:0a:d2:c2:71:a6:c6:24:38:37:f5:0d:c2:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Validity
Not Before: Jan 31 06:53:51 2025 GMT
Not After : Feb 1 10:20:51 2025 GMT
Subject: CN=D708EB849886CA387A74372F3A5F409B18CB93C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:45:1b:04:05:4c:b4:f5:1d:a2:2a:28:98:
ca:b9:5a:bb:5b:e2:cd:21:57:46:7b:8b:ff:77:ea:
c9:0f:6f:c4:7a:25:62:e6:6c:de:35:f6:c0:29:59:
b5:38:b8:99:8a:c5:40:eb:5d:6b:22:9d:8e:72:77:
be:f0:d7:cd:44:bc:b5:63:ab:2b:ec:2f:e8:5f:1a:
8c:8c:1d:1f:b9:be:59:3b:c6:d0:db:09:ae:c8:fd:
9d:fa:50:f2:cc:5c:96:96:a4:66:bd:3a:b3:ee:0a:
9e:54:2d:6d:09:82:3f:4a:8d:90:92:dd:f7:ab:45:
12:03:26:66:d7:67:f3:57:75:ea:00:63:41:fd:e3:
fc:00:78:65:e1:c8:39:81:6f:4c:a7:8e:6f:82:bd:
e5:ca:a3:93:1f:4b:1e:11:f0:02:ed:cc:fc:f3:de:
d2:72:7f:96:93:fd:c1:75:44:66:07:77:c0:2f:f6:
c1:67:99:11:3b:48:51:4d:9b:f8:6b:3c:21:11:35:
88:90:2b:be:3b:3a:5b:1d:ad:4f:ef:81:d0:c7:a0:
60:c3:29:b0:a1:ce:30:7f:f1:8f:ee:ff:d9:2c:e8:
cb:37:4f:36:ff:8d:1b:6a:8d:a7:8e:7a:4c:3d:3b:
fa:82:71:a0:28:54:32:99:3a:c3:9d:41:aa:bb:5c:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:EB:84:98:86:CA:38:7A:74:37:2F:3A:5F:40:9B:18:CB:93:C1
X509v3 Authority Key Identifier:
keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:db:d7:b8:43:80:99:40:80:da:79:8f:de:8f:27:22:bd:
3b:ba:76:e7:42:f0:62:b5:01:13:d8:75:a8:86:25:d9:ed:27:
a2:80:54:70:d0:47:33:71:96:f5:64:8b:0e:b7:3c:88:32:d0:
76:d9:d5:38:81:3b:aa:e3:30:81:dc:32:80:da:bd:b7:4b:94:
53:0e:11:a4:b6:d0:49:98:e2:fe:71:19:99:84:b3:bb:f9:ac:
d9:f8:6b:a9:d6:31:f3:17:69:1d:9f:e5:cc:0f:5c:57:71:7c:
ca:58:2d:85:39:03:2b:81:fd:78:0d:ef:00:20:8b:ef:bc:e8:
d4:db:c9:75:5e:7a:0a:df:1a:fe:43:c2:51:3f:64:7d:d9:d6:
10:0b:50:55:b7:cc:25:1b:49:d6:5c:ee:12:17:b8:18:c1:4c:
d1:2d:37:76:5a:03:e9:7f:5b:d0:c1:78:9c:f5:fb:45:cb:ff:
a3:c7:b3:27:b5:85:51:63:b1:5d:02:ca:29:e2:f3:67:de:10:
42:20:0d:71:3c:ca:f1:27:1a:ac:d3:85:a5:5f:45:fc:e3:e4:
90:d3:cb:99:97:0d:f0:4a:f0:ad:0b:b9:ea:b9:62:3d:2e:42:
c3:af:bb:6a:75:81:a6:bb:7d:d1:0f:8d:18:4e:fb:6b:91:c9:
cf:c5:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:39 2025 by rpki-client