Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier: mzTJU6fnrkqPtbZG0cP08dUngpGJBny3Z98mDwBqovU=
Subject key identifier: 98:52:26:3F:0D:92:C6:27:27:EB:96:9C:B7:BF:91:C7:34:B0:E6:5B
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial: 173D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number: 172E
Signing time: Fri 31 Jan 2025 16:37:19 +0000
Manifest this update: Fri 31 Jan 2025 16:37:18 +0000
Manifest next update: Fri 07 Feb 2025 16:37:18 +0000
Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: oG6LSZDzhUanoVvkErMHgZmzP9UEq1MNOHbYA58SqQI=)
2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: HaGuDMDdtzMMm3o6+XeqS8/R5NYbXvco+c9bwnRUeLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5949 (0x173d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Validity
Not Before: Jan 31 16:37:18 2025 GMT
Not After : Feb 7 16:37:18 2025 GMT
Subject: CN=679cfc3f-bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:08:24:8a:29:a2:23:52:9b:19:cc:c7:c3:
52:23:42:6a:c2:f7:88:0e:95:d3:da:c9:3b:8d:7d:
37:1e:ac:bd:a8:c7:bf:35:23:ba:ee:bf:99:e7:04:
62:d7:8d:1b:ea:60:bd:29:56:7a:f2:66:29:30:40:
3a:ad:2f:9a:12:78:24:94:29:90:91:1f:fc:7a:1d:
36:6f:e0:b6:b0:86:ef:8e:5a:97:6e:cd:57:0f:53:
b4:2d:ed:a5:35:fb:d0:d0:43:d6:bb:f2:04:b7:03:
3a:77:47:27:76:85:60:f3:c9:fc:5b:90:15:ed:0e:
8c:d9:a1:4e:4e:bd:bb:d4:28:f8:a9:55:d0:d8:0c:
b5:76:66:33:16:31:ec:a9:e3:ba:90:58:27:e0:37:
df:cb:83:74:11:f2:ff:02:22:47:68:e9:bf:66:ab:
6b:64:cb:36:6c:a1:9f:47:e3:2f:73:a5:a1:98:9d:
65:c6:6b:4e:50:ce:10:87:f0:25:65:5d:54:21:6c:
90:38:8a:8b:51:10:0d:00:be:19:51:d7:c3:7b:47:
4b:90:f5:f1:b6:82:0e:0d:13:d8:f0:ae:d6:a1:13:
5f:c8:7d:e8:52:86:9f:d5:30:df:bc:36:2a:2a:8a:
9e:d7:25:d9:cc:3c:40:c4:21:e1:27:92:20:83:5e:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:26:3F:0D:92:C6:27:27:EB:96:9C:B7:BF:91:C7:34:B0:E6:5B
X509v3 Authority Key Identifier:
keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:9d:13:11:87:c0:b5:cf:0d:b7:b4:46:f2:6a:ee:48:45:
48:39:81:ac:cc:7b:2b:a3:54:88:d0:f0:c9:1d:4b:49:98:6c:
6b:15:5c:39:71:60:65:0c:e2:be:e2:51:98:13:4f:58:91:ca:
6b:ec:5e:e0:8d:17:d3:e2:2a:7c:ce:e4:8d:70:c3:ba:15:e3:
f0:b7:55:96:8c:10:d6:01:31:39:6e:44:96:81:18:f7:35:fe:
bf:e9:ac:28:e8:97:7f:de:3a:8b:e7:30:ea:4f:ea:0e:97:51:
15:6c:49:69:70:92:d8:44:8d:e3:c1:cd:53:ff:14:45:94:d0:
20:51:2d:1d:bb:98:0e:21:cf:d6:bf:6f:44:8a:e3:e6:90:fc:
7e:cb:bc:ef:a3:7a:c9:19:ef:43:08:24:ec:a5:04:9c:62:0b:
b8:e2:dc:44:b6:10:18:85:69:7b:62:c2:bd:15:17:ae:36:35:
57:f7:f0:8b:fd:b2:77:95:82:d8:22:4f:e5:27:2f:3a:b5:56:
4c:15:f5:50:58:a7:e4:77:0a:0d:94:8d:be:0d:ab:fb:1a:12:
9e:d3:21:cc:71:8d:70:49:88:33:63:cf:c5:33:47:4b:4a:84:
cc:78:dc:02:25:cd:81:16:47:e6:81:ab:29:15:29:cf:20:d6:
0f:14:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:30 2025 by rpki-client