Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier: KA31YUJ/+aoUjVwxNfDbOus2u0LeuM2ga5ZkTkNimbw=
Subject key identifier: F1:41:98:22:A8:4F:BA:9E:7D:2B:54:98:AB:90:6B:32:DE:B8:EF:9F
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number: 0327
Signing time: Fri 31 Jan 2025 01:11:43 +0000
Manifest this update: Fri 31 Jan 2025 01:11:43 +0000
Manifest next update: Fri 07 Feb 2025 01:11:43 +0000
Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: 0LV6KMtCgqSQ/KHaIn5xRJwXlrJqo9buhgYfDgaRixg=)
2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Validity
Not Before: Jan 31 01:11:43 2025 GMT
Not After : Feb 7 01:11:43 2025 GMT
Subject: CN=679c234f-234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:3f:13:c5:f2:e7:0b:c6:fd:b2:09:ea:46:
06:ba:b9:3d:57:48:da:73:94:4b:9a:e9:5f:1b:c3:
74:24:e4:00:d9:76:70:01:6f:b0:9b:42:a4:e2:26:
b8:8f:75:70:09:cf:59:a8:d2:73:a4:c8:a2:12:6d:
f6:24:2c:ea:bc:a5:fd:12:70:f1:d9:4f:89:23:12:
18:d5:a3:e2:49:bf:fd:82:5e:a8:92:ec:8f:0b:b8:
c7:3d:10:88:a4:be:e2:8b:ee:ec:9d:ee:12:50:44:
0c:e2:7b:59:c0:86:e0:82:15:50:f8:bd:b7:12:7d:
8d:f7:b2:0e:46:cd:50:d6:4e:00:8c:e4:e8:be:4c:
b0:45:ad:b0:51:0f:4e:e9:36:72:44:c7:f0:67:18:
c6:f7:bd:87:80:f3:75:51:9c:df:94:d5:bd:f1:22:
41:ba:4e:7b:93:97:b5:7b:b9:7b:38:15:c6:4f:a4:
0e:31:0e:58:01:de:7a:f5:a7:d6:08:43:c2:19:a9:
10:be:03:7f:b9:48:f2:71:58:a2:26:16:32:8e:ab:
e8:bb:8b:dc:23:6a:0b:06:cf:b3:93:e1:20:5e:d6:
b3:c5:5a:e2:fd:0a:a9:83:62:22:0a:2f:6b:e8:cd:
4f:07:69:47:cb:56:cb:a6:ee:ac:d9:ee:c4:08:c9:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:98:22:A8:4F:BA:9E:7D:2B:54:98:AB:90:6B:32:DE:B8:EF:9F
X509v3 Authority Key Identifier:
keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fa:2e:56:4c:e1:30:e4:38:2a:06:a0:63:eb:8e:4b:35:a5:
03:04:fb:bd:c1:de:ca:74:d9:59:b4:be:e9:1d:a2:ae:e8:d3:
19:1c:90:7d:e8:27:e4:e7:c3:b3:c4:f5:6b:a4:0c:8c:8e:8c:
3b:d1:16:d6:89:47:e2:07:67:0a:0e:ab:05:2f:48:ad:6e:d5:
5f:c2:0c:05:9e:e6:42:75:db:4f:83:0d:93:f6:53:91:fa:2f:
bf:d8:4e:9a:e4:ee:1c:ae:4c:e4:66:e1:9f:5f:c6:78:2c:77:
7c:db:67:be:c6:11:67:16:70:65:eb:2b:5c:17:45:90:36:56:
76:15:0e:f0:f4:e6:dc:34:4e:6b:75:71:d8:fb:5d:f9:bd:8a:
f5:26:9c:a1:91:f2:77:11:ce:3b:f3:ae:6f:43:88:2c:6e:4b:
24:b7:0f:a3:64:3d:7d:07:b0:e1:b4:48:1e:3d:d0:90:e7:0e:
bd:b0:ef:dc:65:78:57:a5:f8:3a:b3:e7:b2:4e:97:2b:26:46:
b5:48:ba:21:cd:b6:85:96:dd:a8:73:cb:3c:89:5e:37:ae:6e:
fe:c1:1e:a4:c9:cd:e1:4e:64:f1:78:b5:45:d9:fb:67:28:2d:
c8:69:ef:2d:02:0a:70:92:0a:41:06:65:72:47:df:ef:19:27:
50:de:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:14 2025 by rpki-client