Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
File: BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft (raw, json)
Hash identifier: 2BxUhQDuy+rtxy+xNJ014UJNNXmcdD6NAory5AKUYQ0=
Subject key identifier: D2:D9:FC:8C:15:62:EE:93:AC:C0:96:8B:1E:67:A5:EF:80:A8:30:39
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
Manifest number: 0142
Signing time: Sat 29 Mar 2025 03:55:52 +0000
Manifest this update: Sat 29 Mar 2025 03:55:52 +0000
Manifest next update: Sat 05 Apr 2025 03:55:52 +0000
Files and hashes: 1: BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl (hash: TgJFdcvCR5cjosVej8Bu5f+JOTVw5BglPNLeSZ6QHLc=)
2: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (hash: /DTvOzCxzqSPZ3Y9r1E+ZaauKupsblc8p2z5X3vzC38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BFAB
Validity
Not Before: Mar 29 03:55:52 2025 GMT
Not After : Apr 5 03:55:52 2025 GMT
Subject: CN=67e76f48-bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:b2:be:a7:64:df:69:cd:2c:a9:cf:0c:28:
eb:38:11:51:0e:e2:9b:8c:b7:a2:3b:a8:3d:a2:24:
73:0d:f8:95:21:75:4c:ad:c0:93:fb:d0:c2:7f:6b:
ef:58:2c:f1:ff:2b:11:94:65:6e:2e:d1:c3:8c:78:
52:e8:c8:e3:51:bc:9d:d2:c0:bf:27:ed:42:d9:ce:
3e:09:a3:bf:4b:72:67:7b:0c:10:db:e9:eb:ec:46:
89:22:72:47:27:f3:57:0e:4c:ae:5f:41:f6:c7:44:
eb:af:91:81:44:34:5c:40:04:dd:d5:55:65:06:c9:
77:a1:8d:9d:5a:d3:a8:47:0d:e9:73:cf:cb:ce:64:
07:77:02:eb:58:d2:e4:dc:21:37:60:d3:f3:34:aa:
08:34:9a:57:6d:c2:e3:76:fa:a7:14:34:1a:a1:ff:
11:22:19:a1:a3:12:26:aa:91:65:a1:e1:13:3e:2d:
1f:3e:ef:f7:1b:bc:3d:45:64:f7:31:53:67:2c:ef:
fc:87:b8:44:4e:a3:04:6c:ad:f7:3a:bc:37:c2:3f:
fa:d8:3e:c1:4b:19:2b:96:10:b5:1c:58:fd:60:95:
4d:3c:50:58:d0:37:00:af:88:5c:b1:5c:a0:a3:a6:
83:fc:29:15:2c:b1:4f:cb:c9:db:c7:83:63:32:6d:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:FC:8C:15:62:EE:93:AC:C0:96:8B:1E:67:A5:EF:80:A8:30:39
X509v3 Authority Key Identifier:
keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:6f:90:60:96:e5:88:1e:56:09:a5:13:78:40:7b:a6:b3:
9d:ee:80:53:41:43:e7:e2:30:01:3c:b0:0b:a0:b2:c6:b7:aa:
b0:fd:38:e8:f0:27:5b:b4:c9:d1:2d:cf:5b:0c:10:e7:6b:f2:
5b:4f:5c:e7:7d:3f:39:d1:4a:99:96:d1:0a:e1:4d:3d:e8:ac:
c0:3a:d1:bf:54:5d:c6:35:d2:c2:58:82:d0:14:83:00:5e:71:
28:b3:f2:98:c4:8f:bc:b1:64:7a:28:41:c2:fe:96:0e:ae:30:
d5:8e:bb:3c:bb:34:a3:20:54:f4:4d:1f:2e:5a:12:6b:40:a0:
4a:72:c9:35:4e:1f:28:a2:37:ae:13:38:8e:c4:19:d0:83:d1:
bd:3a:c7:63:29:fb:9d:aa:a4:72:a3:10:d0:a8:5a:87:99:6a:
29:43:7e:92:b3:ad:1d:16:32:65:c6:e3:4b:da:36:fb:c0:0b:
29:17:de:cc:b9:5e:c5:5c:46:e4:57:a3:73:e1:d0:86:3a:17:
0b:9a:5d:a0:f6:2d:d5:39:b6:65:ea:c7:2b:f4:53:72:19:ed:
f3:91:a2:81:54:20:0a:a5:82:59:e5:9e:b9:9e:e8:f9:50:44:
97:cf:2c:17:bf:54:5a:8d:e6:03:0d:e2:0f:6e:3f:f9:f6:63:
10:c5:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:25 2025 by rpki-client