Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json)
Hash identifier: WyvWvSLKAaUWoKPbWyTnMcCexqF/EjXCTyb3xszUQWs=
Subject key identifier: F3:D1:C7:2A:15:2E:92:D5:08:12:72:E3:53:4D:14:1E:40:00:90:5E
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial: 1B08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
Manifest number: 1B01
Signing time: Fri 28 Mar 2025 16:24:49 +0000
Manifest this update: Fri 28 Mar 2025 16:24:49 +0000
Manifest next update: Fri 04 Apr 2025 16:24:49 +0000
Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: 8rNqoTAS+7zPiKKkmSv1urByHrTh6UMv7M8xzbXAp3s=)
2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6920 (0x1b08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B14
Validity
Not Before: Mar 28 16:24:49 2025 GMT
Not After : Apr 4 16:24:49 2025 GMT
Subject: CN=67e6cd51-e437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:f9:be:a7:ab:67:fb:34:ad:ec:5e:19:bd:
04:d0:26:ac:90:fa:2c:e2:a8:d7:b4:a1:59:91:1f:
9a:b0:69:9e:99:2b:bf:dc:d0:8f:87:e8:30:f4:e3:
d1:28:80:cc:f3:15:96:d7:89:ee:3c:43:a4:01:26:
08:f3:b9:62:26:16:7d:5d:f8:32:45:dd:df:d9:6b:
a4:3c:1b:d6:b9:84:78:f6:2b:d1:3a:80:3f:54:87:
d3:39:91:1a:7a:9b:6f:70:26:d1:50:73:97:c4:0f:
3c:a5:53:50:9f:8b:cf:a8:84:89:47:a7:c4:9f:6b:
dd:6d:52:bd:3d:a2:7c:70:7a:ec:8f:f7:3d:ae:4d:
5e:f0:1d:6b:3d:44:ff:ee:37:39:b9:69:f2:13:7d:
26:78:f3:68:fb:da:4d:f8:75:b2:7c:d9:2c:bd:b1:
af:02:c9:3a:7b:e9:25:42:d9:4b:cc:8e:7f:e4:9c:
38:56:f7:5d:56:29:01:bd:8f:b6:4c:03:37:97:2e:
3e:41:a3:c5:77:82:5a:60:77:a7:08:0d:cd:04:2c:
53:a4:54:06:59:fa:97:f4:d5:a5:1e:50:e0:1d:64:
9e:4e:25:2f:cd:ad:ec:8a:76:48:17:7f:02:c3:73:
68:41:ef:70:39:5c:0a:fd:47:d9:c7:82:f6:de:b5:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:C7:2A:15:2E:92:D5:08:12:72:E3:53:4D:14:1E:40:00:90:5E
X509v3 Authority Key Identifier:
keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:6c:d8:f3:78:6a:98:44:03:41:86:e1:d3:6a:f6:c8:41:
b7:03:ce:4d:59:4f:fc:9c:3c:43:2a:f5:07:8d:93:ef:cd:6a:
c4:63:10:cc:18:9d:c9:68:85:8c:7e:56:91:c0:35:64:89:20:
f0:12:81:e7:38:c5:c2:7e:74:ae:34:30:54:24:68:37:15:17:
c8:43:c3:eb:fa:ea:fa:b4:c1:78:c8:eb:0c:55:46:20:b0:89:
65:ff:e5:f8:7f:70:f9:c4:4a:85:ff:9a:59:56:3b:f9:0b:93:
1d:af:d4:42:94:3d:a0:3b:f4:ee:6d:53:81:c1:22:c9:ac:42:
4c:97:15:e7:39:45:69:da:a8:63:b0:86:d6:bc:35:7f:fb:bf:
95:ec:a6:17:9a:b9:0b:aa:78:21:56:d2:f8:5d:35:ff:d7:cc:
cd:e5:ae:1e:8b:33:3c:10:23:c1:aa:f8:80:2d:a7:75:bb:6c:
ff:33:23:d3:ab:da:e8:35:74:b7:03:46:28:ad:9f:8c:cf:a0:
34:d7:6c:38:06:c1:8a:12:4d:9e:f2:44:9e:cc:6f:3a:92:a8:
ec:b6:6d:48:0d:24:39:61:68:c8:97:bc:c4:6b:f1:a9:86:43:
7b:1f:ec:78:85:fb:8e:c4:cf:87:07:1d:f4:a2:8c:e4:a2:0b:
4c:61:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:56 2025 by rpki-client