Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: FykdMm0+K78QdHIEF21DWcZw9CDW/bhRn1X4jZ8hWSI=
Subject key identifier: 32:32:AA:66:6E:FD:B4:80:CE:D9:0C:32:00:57:7B:DA:75:BB:0B:34
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 05FD
Signing time: Fri 28 Mar 2025 23:12:50 +0000
Manifest this update: Fri 28 Mar 2025 23:12:49 +0000
Manifest next update: Fri 04 Apr 2025 23:12:49 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: ceJGd4P4A2oaMdiPllYNR9K+8iFxZ2lUEUHdES3FNOY=)
2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: TgPklgLkA3xdg2IBb89UQztEAT8+HE02bwjfwGq7aRA=)
3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: ZNMqu5n7q8yqgioaOoz8FWOCKn32okK52a+TXFMlmIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3
Validity
Not Before: Mar 28 23:12:49 2025 GMT
Not After : Apr 4 23:12:49 2025 GMT
Subject: CN=67e72cf2-3f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:3d:8b:03:95:fc:ed:ff:28:22:be:d7:bc:
e0:39:6e:55:99:1b:26:68:1a:d6:1e:22:f8:82:d1:
5e:e8:83:70:de:1a:6f:e9:9a:45:08:dc:b1:a8:db:
32:36:11:47:9f:52:07:65:b4:69:3a:ce:66:02:c5:
96:6d:ce:eb:b9:c6:67:1d:2c:22:ea:00:ba:48:9d:
b6:61:97:11:c2:29:5c:6f:10:64:04:5b:ba:10:12:
35:ef:f6:cb:50:22:37:58:8d:8c:72:0a:ff:0f:fa:
0a:5d:29:21:4b:5c:b7:9f:e7:4f:6b:e0:5b:f3:68:
ff:c6:e0:b1:7d:dd:dd:de:20:3f:b7:6b:01:bb:01:
d4:ce:12:f3:99:ab:f7:75:62:44:1e:47:81:91:cd:
4b:9c:93:1f:43:cb:68:d5:25:0e:ae:e1:3f:21:cd:
47:0b:85:c1:07:98:43:15:e1:b0:b2:08:3b:78:c1:
d5:82:72:8c:8d:89:4a:93:2e:7d:91:10:8f:9c:38:
3c:ce:9c:a0:15:56:55:b9:78:e5:2e:ae:c0:51:31:
04:6b:33:aa:dd:e5:bf:96:45:dd:32:ae:bd:48:aa:
a6:64:00:43:30:54:8c:9b:e4:7e:a2:c5:16:b9:fa:
1a:7a:9c:ff:15:94:75:50:d9:8f:00:4c:f2:e4:11:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:AA:66:6E:FD:B4:80:CE:D9:0C:32:00:57:7B:DA:75:BB:0B:34
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:5c:46:c7:f9:12:24:80:68:6c:a9:dd:8a:12:72:60:a5:
41:0e:5a:e2:23:e4:d5:f0:56:0d:49:87:5f:18:8f:2d:87:31:
82:e7:1f:19:a7:a6:af:81:98:9e:12:50:0b:48:96:09:b3:43:
52:f6:05:a2:83:8d:b8:b2:28:0a:00:93:c5:3b:a6:58:d3:b5:
bc:41:79:0f:20:5d:b4:ae:39:ef:74:97:14:3a:89:e2:aa:61:
a3:19:99:6a:52:5c:1a:35:e2:ae:1d:7d:47:95:f7:80:19:70:
8e:08:42:1f:17:5e:79:53:15:fa:e9:18:c7:c4:b3:d1:6d:7e:
03:d5:d0:42:08:10:2e:a9:56:5e:89:33:af:39:c0:20:a2:d7:
9d:c4:8f:44:5e:ad:35:ec:0f:8b:5a:28:0f:3c:d3:8a:7f:56:
73:b2:3c:62:a2:49:f3:07:03:e9:01:ae:55:51:f0:24:d7:46:
78:62:9f:ba:aa:33:2d:c8:5d:24:77:31:38:c3:ad:e3:17:ca:
87:dd:5f:02:1a:e0:b8:b9:a8:19:a2:b3:be:60:0f:29:8f:68:
e8:91:1c:bb:fa:06:67:13:dc:54:19:72:88:de:c3:0e:44:7b:
44:52:65:06:99:25:a8:de:b9:a5:7b:2f:b0:d1:34:99:26:12:
a5:ae:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:14:39 2025 by rpki-client