Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json)
Hash identifier: t2UaWS4ueAfU326JwBnUz0xkNcpyZV1hGhaKX/jKGkw=
Subject key identifier: 34:64:8E:D9:3F:69:BC:AE:A3:8D:69:AE:9F:00:D1:98:9A:53:68:E9
Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
Manifest number: 06D4
Signing time: Fri 28 Mar 2025 22:22:24 +0000
Manifest this update: Fri 28 Mar 2025 22:22:23 +0000
Manifest next update: Fri 04 Apr 2025 22:22:23 +0000
Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: adm4eI6JjouengREPujzWXVgAw1e26+KPZnBhSVSZTg=)
2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54FE
Validity
Not Before: Mar 28 22:22:23 2025 GMT
Not After : Apr 4 22:22:23 2025 GMT
Subject: CN=67e7211f-bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:4d:78:3d:8f:dc:b8:3c:e6:6c:7f:51:13:
d2:ad:b0:e3:b2:91:ad:9c:4c:55:e6:3d:df:42:03:
e8:b0:f1:14:68:55:63:5d:d8:a3:43:de:aa:57:ec:
9d:ef:da:cf:4b:52:17:6c:3e:b0:93:72:0c:62:de:
25:cf:14:fd:ed:a9:76:e4:49:63:17:f7:74:d9:49:
1b:5f:ce:a9:27:ae:54:eb:1e:83:01:ec:28:32:8d:
bc:99:13:9b:98:de:bc:86:8a:5a:f1:05:10:55:fe:
d7:bd:7c:dd:b2:51:a4:30:25:95:7b:95:49:0a:f4:
c5:bd:96:41:ce:48:39:89:54:75:29:08:22:27:9c:
cd:15:be:b4:76:28:9b:a6:aa:9f:31:91:d2:7f:ea:
1b:dc:03:60:fe:d4:ca:14:1f:28:4c:4a:d8:8d:96:
4e:c8:09:2e:57:1f:66:be:14:02:2c:61:bd:49:4b:
08:5c:dd:5a:84:27:93:60:af:4c:bb:84:02:0c:8f:
d7:95:55:be:a3:ab:15:ba:8d:a3:4a:a4:c7:f1:d7:
bc:41:56:aa:47:97:e4:a8:27:0e:78:dd:d9:c7:8f:
78:58:8f:e7:0c:ec:18:07:e8:b6:14:6e:a7:e1:ac:
73:ec:1c:6a:64:a4:37:90:65:01:d6:94:99:0c:8f:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:8E:D9:3F:69:BC:AE:A3:8D:69:AE:9F:00:D1:98:9A:53:68:E9
X509v3 Authority Key Identifier:
keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:40:c1:a1:e4:be:e8:40:1f:a6:4a:ef:d3:f8:37:f3:bf:
ce:24:cc:f3:9e:c6:08:32:00:86:3f:f0:27:50:12:d7:3f:7c:
79:76:fc:3c:84:3c:49:3a:de:0e:a7:3b:31:66:58:86:9a:73:
73:89:2e:b7:f5:79:ad:87:0a:5e:40:a9:42:5b:9e:42:3c:33:
4e:80:83:e5:8e:bc:dd:bd:4a:a9:e9:b4:c2:e4:b6:b6:c8:4b:
a6:13:f6:ea:61:0a:13:1e:aa:90:73:5b:15:8f:f3:4d:2d:8b:
29:21:88:00:17:78:11:1e:57:f3:e7:d3:fc:f5:0f:f8:1d:63:
f0:3a:8a:b7:14:9b:f0:34:b1:cb:e8:d2:8c:1a:3b:92:1b:2e:
4b:9a:1b:55:77:dd:b2:2f:6a:08:b7:bf:da:b9:fd:b2:0a:5a:
a9:a2:e3:1a:09:50:84:7d:89:89:a8:ca:ad:49:47:ce:00:dd:
22:e7:88:07:c0:e6:14:ed:2c:d2:e3:e3:81:b0:6f:32:53:04:
41:6c:04:02:02:90:b5:7d:e3:8a:86:c5:aa:ac:27:d8:1d:10:
1a:c3:41:6c:90:f2:43:ce:91:12:5f:ef:0c:a4:6f:c4:c5:fa:
5d:db:9e:23:48:bf:b4:dd:88:81:87:c5:5b:b3:b3:30:e3:26:
01:48:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:43 2025 by rpki-client