Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft
File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json)
Hash identifier: T/efCM7JvZ9hLZUJpSl3iKDL61eD4Juy37r5j2EDyFM=
Subject key identifier: EA:BD:E7:FA:C2:C7:32:D6:A0:56:E2:3B:6C:BA:EE:DE:2D:8B:17:F2
Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E
Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft
Manifest number: 03A8
Signing time: Sat 29 Mar 2025 00:58:55 +0000
Manifest this update: Sat 29 Mar 2025 00:58:54 +0000
Manifest next update: Sat 05 Apr 2025 00:58:54 +0000
Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: pQOXVeHzNyYySblEVOsSrfRi0UJ1aihf6Y9w3CV2MO4=)
2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: Z8nOZSdO25Utl4pPDw4ubtfpNujKkQIc0psO5bVfVdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F536
Validity
Not Before: Mar 29 00:58:54 2025 GMT
Not After : Apr 5 00:58:54 2025 GMT
Subject: CN=67e745ce-416a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:81:63:2c:73:57:4f:c6:48:f9:aa:11:d6:
ea:90:57:51:dc:cb:46:95:fe:99:44:e8:26:75:d2:
41:cb:43:67:bb:76:ef:ad:d2:e8:16:e6:02:11:30:
ed:d9:31:42:2d:a5:07:28:87:ac:23:70:c5:1e:1f:
69:c7:55:1e:ec:88:52:54:c6:82:e2:1a:97:62:f5:
df:66:aa:14:dc:41:60:a6:b3:92:e5:7f:a6:2d:d8:
13:fc:2e:d0:a5:c3:a7:bb:40:d7:2f:6e:34:3a:ab:
8c:d5:0e:90:45:6a:a4:ac:c3:62:85:2e:de:35:d5:
d5:82:dc:f3:eb:79:e5:c0:dd:19:f7:7b:a3:57:9d:
5e:1b:f2:9c:78:fa:98:7c:f5:db:43:fd:df:0c:8e:
23:66:fd:20:0c:c0:89:48:cd:23:2d:f7:d1:03:6a:
b0:77:5b:ed:82:2f:59:96:28:f4:d3:e6:5d:6f:9e:
5c:f3:1e:6e:00:68:27:f6:0f:17:a5:48:2c:c4:ac:
2d:82:a6:41:e9:82:a3:92:91:ad:53:04:e7:52:ef:
5e:c2:4f:20:37:84:1b:c9:f9:f1:07:f3:9a:24:05:
11:41:b0:18:46:61:8d:ba:cb:f1:ee:4d:74:1a:54:
77:fe:04:4e:aa:1d:81:b3:12:eb:13:b4:7e:1a:05:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:E7:FA:C2:C7:32:D6:A0:56:E2:3B:6C:BA:EE:DE:2D:8B:17:F2
X509v3 Authority Key Identifier:
keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e3:ed:8a:ef:64:b2:1b:02:64:8b:75:5e:92:6a:32:76:ba:
9f:ff:ca:6f:ac:aa:9c:a8:2a:27:b8:90:78:1f:14:2f:2a:cc:
f3:12:f9:f5:29:75:c7:35:2d:af:63:eb:6c:84:b4:a1:a5:c7:
ac:7b:7b:0a:5d:6f:9a:90:3c:fa:07:21:90:e5:df:9a:5e:4a:
01:e5:2b:0f:01:6d:f5:ae:08:e5:29:37:9c:cc:82:33:b5:d3:
ee:fe:68:65:8f:e7:2b:af:84:a5:83:23:78:b1:6d:43:3d:69:
1d:6c:af:7a:18:cd:21:99:01:4c:01:e6:f2:60:55:d2:09:60:
8d:eb:28:a9:ad:76:8f:22:24:57:b8:03:05:2f:86:97:63:7a:
ba:4f:50:75:65:09:3f:0f:fe:d8:3a:cc:94:3f:20:49:9e:7d:
79:d5:ab:29:de:c4:a4:08:0b:d1:82:c6:b7:10:9e:bd:17:a7:
1d:5c:ce:43:47:dc:d2:e7:ac:5f:e8:a0:a2:e2:0f:22:cd:b8:
1c:9a:af:13:a2:78:d9:a0:7b:b3:ef:2c:30:d0:d4:06:e4:11:
3b:1d:5b:31:5a:08:80:0d:dd:2f:f9:68:ff:49:d3:f5:66:37:
14:b2:6f:b8:c7:99:61:05:42:9d:5e:80:3a:3b:85:93:93:51:
ef:9e:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:18 2025 by rpki-client