Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier: ky7NYbzzMfJ0+OpC8kzzPjKpI7WRqMINCqb46FCrDns=
Subject key identifier: 71:31:AB:64:F4:37:6D:42:A9:61:A6:A4:A6:BF:0F:16:09:CE:5E:C7
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number: 91
Signing time: Sat 29 Mar 2025 05:43:55 +0000
Manifest this update: Sat 29 Mar 2025 05:43:54 +0000
Manifest next update: Sat 05 Apr 2025 05:43:54 +0000
Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: jIh3P8VOOIM22eT6x17I6ik4/3WgaFwW6c5krWQJz/0=)
2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239
Validity
Not Before: Mar 29 05:43:54 2025 GMT
Not After : Apr 5 05:43:54 2025 GMT
Subject: CN=67e7889a-986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:47:04:0f:36:b1:69:ff:b9:99:33:53:d1:
82:59:78:42:2a:2e:41:2d:75:92:26:f2:fd:33:8f:
e4:f8:40:68:b2:31:af:26:dd:6d:ab:72:35:90:5c:
7e:18:55:a7:9f:8a:ff:3e:7b:9f:a8:4a:27:01:2f:
34:94:f2:d0:2b:c6:1d:9f:b3:38:30:86:53:5f:b4:
ff:e5:8b:df:fe:c5:02:e5:58:77:ab:b0:42:6f:c7:
25:d7:a1:54:df:ff:d1:72:69:2b:71:01:f6:4e:b3:
8c:99:93:fe:b0:4f:cc:17:66:76:ed:07:40:37:1f:
18:70:19:ba:25:ec:71:31:5b:81:f5:db:8d:28:19:
03:5d:4a:66:c2:95:83:76:8f:9c:77:a8:44:21:ad:
ca:7d:2c:3c:4d:43:fa:e6:2c:67:c9:ea:8f:3b:3e:
7d:94:e3:ba:15:0c:85:62:80:4d:a4:79:f2:e8:49:
16:45:a3:70:ce:94:66:f1:35:2f:5a:08:67:96:08:
bb:c8:e3:d3:74:23:52:c0:fa:7f:f9:50:8e:49:33:
03:b4:36:60:25:f0:c2:93:b4:06:e9:a4:49:8a:f1:
dd:3d:ed:d3:03:bf:1b:5a:95:9e:de:e5:2b:fc:ae:
38:9c:5d:27:6f:cc:bf:5a:05:ee:51:8f:28:0c:d7:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:AB:64:F4:37:6D:42:A9:61:A6:A4:A6:BF:0F:16:09:CE:5E:C7
X509v3 Authority Key Identifier:
keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:c3:1d:e5:b0:32:1f:16:6f:0f:35:dc:ab:8d:2e:53:6c:
32:eb:75:dd:c0:a0:14:30:0b:37:03:f5:43:fa:9d:93:a7:be:
18:59:ac:da:40:6e:7b:70:0c:fd:2f:a9:2b:22:f4:b4:59:9b:
b5:65:c0:f5:1b:7b:c4:b2:d8:2c:a6:a0:a1:21:53:b6:66:1d:
ac:7e:b0:13:d0:71:bd:a4:c9:0c:49:fa:8f:d4:26:d3:2e:cf:
ff:f1:6d:9d:21:d9:46:38:22:1b:c5:08:be:a7:93:4f:b6:35:
f9:7e:83:10:4f:8f:82:fb:e4:13:dc:29:9d:dc:53:e0:85:cd:
d5:cd:9c:f6:d4:47:a9:42:78:e5:24:db:d6:fb:57:7b:4c:70:
48:29:12:80:78:79:a1:df:f3:57:5a:66:8d:16:0d:24:07:73:
c9:14:d0:4b:ab:fd:8c:67:a7:0e:80:35:5f:70:cb:a4:20:29:
c9:10:64:08:5a:a0:2b:4f:e5:ca:35:3e:7c:04:c9:3f:ef:fb:
18:3d:ff:e7:eb:1b:fa:28:1c:17:c7:16:16:62:2a:ff:29:d0:
9a:9f:99:b4:79:eb:d0:8a:8c:ce:d2:1d:b3:e6:77:df:8f:e3:
8c:d8:73:1d:cf:ec:a8:82:6c:9a:e1:8f:ba:37:27:d4:2b:90:
fd:17:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:58 2025 by rpki-client