Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: Kuy/21tBeqUaJ+XoLHkHJ1osUetnXWgr4bbS1+kTUU8=
Subject key identifier: 68:52:83:C1:2C:EF:07:9A:4C:7A:19:AC:1B:A1:3C:08:98:C5:A1:06
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 1672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 1659
Signing time: Fri 28 Mar 2025 16:49:22 +0000
Manifest this update: Fri 28 Mar 2025 16:49:21 +0000
Manifest next update: Fri 04 Apr 2025 16:49:21 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: /RrmKTPp4gPAUq+GiT4uV81wGUoOacVtdE/IRhWTgnk=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: e5jgIESXFxNT6NU+78fDrpwylXFQS920y6o/aeQL2pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5746 (0x1672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8
Validity
Not Before: Mar 28 16:49:21 2025 GMT
Not After : Apr 4 16:49:21 2025 GMT
Subject: CN=67e6d311-2b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:3b:cf:54:21:75:db:46:5d:79:d6:9e:3e:
a8:07:a0:11:95:7f:92:0b:0f:2f:a6:4c:46:41:93:
88:62:a0:fc:bf:c2:0a:e7:78:df:f7:89:67:76:74:
c8:7e:f9:94:95:07:7a:68:e2:00:df:56:80:a2:85:
31:09:78:56:9b:3c:fe:78:6e:c3:5c:a1:79:ad:06:
86:39:bb:9f:89:ff:5b:3f:1c:2e:e5:1e:3d:8f:97:
d3:f8:1f:1a:b4:57:cf:76:1c:ba:04:cf:0f:ba:6c:
c4:07:2f:f0:12:46:b6:37:d5:71:1e:05:e8:d2:0a:
c8:24:68:9f:b0:13:21:50:2a:98:0c:32:80:f6:df:
60:16:c4:22:26:82:67:2e:10:90:2b:2e:fe:dd:88:
6d:79:64:9d:98:72:ee:ab:63:bf:39:5d:cb:76:1b:
ae:07:3a:c4:f1:bd:1f:ec:8c:77:2c:9e:8f:0a:84:
0d:ff:97:9f:9c:b2:65:0a:f2:04:ef:f0:15:88:f6:
17:f2:f3:57:51:b6:1b:51:2d:5e:fb:7a:a9:40:24:
b7:2e:01:a5:fc:28:18:e7:84:e9:a2:71:7f:17:cb:
84:c9:d3:2f:9e:01:a0:34:cc:b9:e2:ae:bb:72:ed:
85:eb:1d:53:22:de:87:1b:1f:c0:8c:b0:4e:9a:4c:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:83:C1:2C:EF:07:9A:4C:7A:19:AC:1B:A1:3C:08:98:C5:A1:06
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:2c:aa:e4:8e:0b:0a:77:02:b9:b9:ab:5f:80:2d:2e:47:ba:
f5:5e:18:75:87:2c:e6:b7:a7:87:4f:e5:ae:fc:a9:a8:c1:c4:
9a:63:28:41:59:d3:a4:2c:68:ef:42:bd:05:41:ed:38:b1:4c:
e8:36:a4:ba:98:1c:2e:18:e3:f3:c7:a1:55:6f:08:fd:d8:41:
e8:ad:b6:76:3c:97:a4:b4:06:6c:ee:f1:26:68:f2:72:ad:1d:
9f:57:d6:6b:c9:43:f7:80:83:e0:0b:61:de:d2:8a:fe:52:8a:
8b:06:cf:55:e9:37:96:83:0c:a2:3c:9b:bf:8a:1c:82:02:b3:
99:37:68:7a:9a:79:c3:07:7f:47:ff:cd:be:29:6c:a9:70:93:
7e:03:a3:5d:81:72:75:53:17:61:75:fd:f2:79:78:58:98:2c:
24:97:b1:0c:b9:41:ef:d6:50:ed:70:48:87:94:ac:10:51:73:
93:01:43:af:d2:a4:73:0d:ec:91:72:c5:68:ab:61:c1:b3:c6:
c5:85:06:d3:4d:18:67:23:9c:2c:1c:62:b0:da:3a:3a:f8:07:
e1:be:52:06:cb:04:cc:9e:5d:30:0d:7c:d1:61:54:cf:07:a1:
2f:50:1a:52:75:61:d0:36:88:49:b0:d6:0d:4c:9e:95:c6:08:
ba:c0:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:33 2025 by rpki-client