Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier: 3JhluNKbAY/gVwCmy1DBK93xAZbPUtPlNOWzZJProEA=
Subject key identifier: CD:BA:C5:50:87:6B:FC:14:72:0C:01:42:65:EC:B4:AF:36:42:F2:BC
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number: 045E
Signing time: Sat 29 Mar 2025 00:27:18 +0000
Manifest this update: Sat 29 Mar 2025 00:27:17 +0000
Manifest next update: Sat 05 Apr 2025 00:27:17 +0000
Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: E/e0+YyzWrvT6BAJvG+jOpNTwZgfTECNPJnZPtnXmug=)
2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: ep6/NjkJNZJDWkEDthfqanztHTbJuX44L/+Atn4MZWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080
Validity
Not Before: Mar 29 00:27:17 2025 GMT
Not After : Apr 5 00:27:17 2025 GMT
Subject: CN=67e73e66-1653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:ad:d5:03:f6:ba:89:f9:a1:6c:ef:83:08:
d6:6a:7e:f4:df:20:06:5c:a7:f2:88:6a:b6:8b:a1:
ea:66:99:ab:cf:be:e1:4a:af:9e:c3:e5:66:9d:a2:
19:d8:a9:21:4d:00:46:70:87:ea:cb:02:97:06:a6:
62:91:2c:3c:64:70:73:cb:a3:59:65:bd:c6:df:e2:
9d:ed:1b:e7:ba:6d:07:60:49:06:f7:0e:92:cd:26:
58:4a:c4:da:f8:0a:4b:fa:51:1a:7c:d3:9c:f0:eb:
4c:d6:97:df:c7:4e:31:cd:38:c6:31:13:57:6f:21:
f8:3e:3b:e2:f5:70:fa:e9:47:dc:8f:42:78:30:34:
4c:d0:c1:0a:af:79:22:57:0b:e0:e5:fd:ae:8d:df:
ad:35:4f:30:64:bb:01:74:4f:91:51:ce:cb:17:fa:
1d:5b:d1:35:ce:b8:66:3c:18:61:4a:4f:b7:1c:89:
43:d5:0d:30:c2:bb:4f:8d:91:57:12:f5:ee:8b:9d:
64:9c:aa:9b:66:1c:f9:27:78:0c:0f:3b:2c:f1:5c:
f2:80:ad:a1:9c:73:df:98:22:e2:47:02:e2:df:43:
9f:82:ab:cb:1c:3a:a0:0c:8d:60:6b:bc:a7:69:3a:
ac:d4:8d:9a:cc:0a:c5:26:54:6d:53:23:af:69:7a:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BA:C5:50:87:6B:FC:14:72:0C:01:42:65:EC:B4:AF:36:42:F2:BC
X509v3 Authority Key Identifier:
keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:45:ec:3d:e7:2e:c2:a6:7a:e9:c8:8c:90:8c:48:db:86:f5:
48:24:60:0b:04:4c:49:c8:91:b6:ec:33:72:93:96:94:06:74:
0a:a8:94:8c:a6:fe:22:6b:ff:31:6e:d8:23:b0:26:de:3d:c1:
5f:cb:f5:ee:f7:f3:e0:6d:24:2f:3d:24:ae:80:c9:96:08:51:
ae:1e:eb:a6:ac:2b:c4:01:e0:27:7f:93:db:8b:0d:0e:f3:c7:
90:c0:cc:ef:b5:f4:c9:a3:bf:7d:e9:c7:85:c6:95:6e:ae:02:
f2:2c:45:19:50:aa:4b:fd:86:74:73:ae:91:09:34:1e:ac:35:
07:0b:4d:0e:4c:4b:70:b0:02:6b:3a:af:12:24:dc:81:e5:78:
cf:c7:2f:b1:4f:5a:33:f3:4d:c5:27:c8:80:ba:1d:3b:1e:e4:
d0:9c:3d:42:83:80:e5:b1:df:c8:b8:73:9c:c4:43:4c:23:8e:
1e:08:f0:a7:9f:31:0b:19:d2:68:ce:51:9f:45:2e:5d:e8:f4:
45:3f:17:32:46:99:ce:c3:cf:dc:94:c0:4b:4a:c0:27:f7:f7:
25:52:25:74:62:a6:5c:fa:36:71:a2:f0:7b:fc:fc:97:91:fd:
a0:c1:1c:5d:61:88:d0:20:cf:d3:15:90:23:5e:08:41:36:aa:
42:21:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:27 2025 by rpki-client