Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier: caCpuSKjqxPvMLGoMmRGNYhYT1JvFDsS12+rslFv9Jg=
Subject key identifier: 64:57:88:92:E0:5E:D3:44:BC:9E:53:1A:05:83:FF:A5:11:61:E8:4F
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number: 68
Signing time: Sat 29 Mar 2025 06:28:00 +0000
Manifest this update: Sat 29 Mar 2025 06:27:59 +0000
Manifest next update: Sat 05 Apr 2025 06:27:59 +0000
Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: myQgsapGuy1J7Us06Z6nNRHJyncZd/H0beYzk9KIXOk=)
2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=)
3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A
Validity
Not Before: Mar 29 06:27:59 2025 GMT
Not After : Apr 5 06:27:59 2025 GMT
Subject: CN=67e792ef-d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:fc:ff:7f:26:4d:49:4b:32:a9:e3:d1:4d:
f6:6c:b0:71:9c:c7:62:d5:bd:4c:b4:c8:51:12:bb:
55:17:16:db:6c:d0:33:fa:71:36:7b:d5:5d:2f:d3:
70:9c:f1:27:0a:b4:7e:2e:82:ff:c4:0a:e8:1b:4f:
08:3e:4d:2b:8e:fd:c3:22:e2:d3:59:22:4a:fa:16:
1f:ff:e9:5d:52:61:10:89:db:66:cb:5e:c8:4b:8c:
02:02:71:9b:d7:e5:03:92:8f:e7:0d:f8:64:27:8f:
89:74:cb:5b:41:6f:ec:03:36:5c:c4:54:62:de:5b:
20:04:21:64:94:f3:80:9f:9f:a1:9f:50:2f:e9:e6:
69:2c:03:f9:6c:04:33:97:9a:fb:04:57:24:cf:22:
bc:6c:06:20:e0:6d:9d:9a:32:49:67:a2:a5:71:9c:
40:9d:2e:f8:03:8d:fb:6e:a4:ad:3a:1c:03:f9:74:
7f:a3:5b:17:35:8f:b4:72:74:97:d8:c4:34:0c:dd:
d3:68:34:ce:e8:fa:09:4e:26:50:bd:52:9b:46:63:
ec:ec:7a:bb:a5:9e:b3:7e:e5:f2:7e:8d:c7:c4:00:
c3:74:1e:20:55:53:2b:8e:52:a8:e3:2b:63:7b:51:
e9:55:de:34:29:74:1c:a1:be:c6:4a:65:8d:1e:08:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:88:92:E0:5E:D3:44:BC:9E:53:1A:05:83:FF:A5:11:61:E8:4F
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:01:63:c2:02:e7:5a:05:a1:f4:f4:50:60:39:26:73:e3:86:
1c:1d:39:7d:20:4b:3b:39:a9:d3:92:d9:66:b5:4c:ed:1b:48:
29:0f:79:26:0b:6e:d3:fb:05:f8:97:c4:3c:a6:c3:8f:48:e1:
c1:7c:58:55:cb:0f:20:a0:75:7f:4f:5f:42:66:07:9d:3a:24:
a8:4e:02:e1:a0:04:06:91:0e:0f:67:42:40:16:14:12:6b:ce:
be:73:c9:c2:ee:d3:cd:dd:48:db:b9:5b:11:8e:85:1d:59:47:
45:88:58:52:19:9c:a1:82:f9:23:70:4a:dc:f8:d3:e5:b0:88:
02:98:2b:b8:ba:b6:4c:59:83:ef:f9:37:46:16:73:da:aa:5f:
6e:0d:ac:a7:22:ef:18:68:ef:34:68:8f:fd:42:6b:0e:eb:a0:
09:d4:c7:fb:62:2f:89:c3:fb:99:83:c7:a4:56:61:fe:71:3c:
21:06:8c:02:bf:3c:7c:c0:01:d1:9a:fa:ed:29:a4:5f:86:c9:
fc:47:25:be:01:61:de:d5:a8:d8:09:10:f0:96:9d:e0:56:07:
c3:a1:cc:e7:59:38:b0:7c:46:01:99:07:ec:af:3e:26:7a:16:
9c:31:6d:56:0a:05:8e:1d:ea:f1:08:f0:c6:b2:12:cf:27:2c:
e5:93:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:54 2025 by rpki-client