Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
File: rNBOSci3K74B41N1Wc9MlHMO1d8.mft (raw, json)
Hash identifier: Gis4RHW1plNxjJh2B8IqrnSyj9KQtpSulqYg6J77o0U=
Subject key identifier: 12:25:4B:5A:7A:70:B5:58:D6:85:DE:9D:5E:99:87:B6:F7:6E:FA:AA
Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Certificate serial: 0BDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
Manifest number: 0BC4
Signing time: Thu 06 Feb 2025 18:37:28 +0000
Manifest this update: Thu 06 Feb 2025 18:37:27 +0000
Manifest next update: Thu 13 Feb 2025 18:37:27 +0000
Files and hashes: 1: rNBOSci3K74B41N1Wc9MlHMO1d8.crl (hash: hNHXPk1zB57+at172ToIy3zMxMV2+RwanC1vpNzp/jQ=)
2: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (hash: XY+sDSJ/dwyBXoksPoe89W4xWnpcKIWltzR3I9IWqk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3037 (0xbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411B3, serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Validity
Not Before: Feb 6 18:37:27 2025 GMT
Not After : Feb 13 18:37:27 2025 GMT
Subject: CN=67a50167-122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:23:90:1f:e1:0b:3a:58:56:48:12:8f:50:
9f:71:ad:45:61:ca:43:af:6f:ca:74:10:83:4e:8e:
cb:cc:6d:f8:35:96:c0:a5:95:93:84:47:e5:fd:68:
0d:78:f9:5a:1a:66:da:2d:bb:a1:71:ee:f4:73:49:
0b:fb:49:4a:06:f4:b3:3b:72:dd:86:2d:38:2a:b3:
ca:85:24:83:70:1c:44:3c:c1:91:27:0b:a2:fc:f1:
5a:76:a1:35:74:12:d8:dc:24:a9:98:de:97:f4:91:
fa:50:04:48:a6:a3:48:b6:2c:11:b0:be:e1:4e:12:
0a:b3:8d:31:90:8d:2e:37:b4:19:60:41:37:b4:21:
6a:36:bc:02:c5:35:b9:1b:67:2e:75:99:a4:a7:ab:
71:f3:61:26:73:0f:30:c3:af:c7:dc:a1:a1:e4:75:
58:df:11:94:19:27:53:1c:3b:93:84:bd:3f:4a:4d:
57:cf:8e:39:8d:0e:d0:79:99:60:54:ff:ee:ac:24:
21:bc:5a:8d:8e:57:f1:6b:b3:97:4d:88:b3:2c:35:
44:3b:a0:d0:d4:28:b3:23:93:99:a5:7e:e7:7b:42:
c6:0b:e2:3c:78:f3:dd:3e:df:cd:0f:5b:62:2f:da:
0b:f5:0d:88:f8:50:02:3e:33:48:a0:f9:99:f3:1e:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:4B:5A:7A:70:B5:58:D6:85:DE:9D:5E:99:87:B6:F7:6E:FA:AA
X509v3 Authority Key Identifier:
keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:40:41:5f:f5:23:7c:b5:f9:54:b3:3a:8d:38:c8:d7:d5:
9f:93:e2:2e:80:5b:f2:a2:d7:bd:ea:f2:71:35:bd:32:f6:9c:
68:f6:d0:2e:75:2f:96:54:38:11:85:75:00:20:ec:29:a1:47:
44:ab:39:4d:80:66:22:12:44:bc:39:ca:7d:d2:5b:08:fb:e6:
3b:8f:f5:78:69:a7:d8:4a:38:36:2d:6a:ca:fc:0c:cf:af:c9:
03:1c:68:70:68:ed:62:32:9c:9a:a5:a7:d7:c5:00:8a:20:5c:
4c:74:ee:83:07:28:ae:61:5b:7d:7e:ee:af:86:98:62:9e:2d:
5b:f2:f1:51:58:c4:2b:35:eb:14:db:63:c9:70:23:5b:48:b4:
76:7f:53:c3:d9:3d:07:ff:2f:55:4f:c4:ef:6e:77:86:18:44:
bb:79:db:d0:b7:37:5a:d5:d1:85:d1:5a:b8:d1:6f:ec:d6:1f:
31:bb:b9:c6:21:f9:59:e1:1c:a9:c1:ae:f5:7c:01:06:ab:d2:
85:dc:63:32:18:96:eb:79:b8:f5:26:ce:19:84:83:dc:73:6b:
5b:20:89:2a:d9:29:69:d0:77:d2:0e:30:25:62:33:fe:f9:4a:
cc:c4:f2:90:c5:f1:2a:1c:83:46:f2:e0:d1:39:93:57:e6:f3:
3a:f2:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:44:04 2025 by rpki-client