Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier: 0tNYq1UbyMm18O9sSYC+3XX+6n7rEFOUrvb81q5CaOg=
Subject key identifier: 2E:AA:DF:E4:52:A6:A8:48:D7:FF:CC:BD:1F:F7:41:88:6A:BD:22:9C
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number: 67
Signing time: Fri 31 Jan 2025 06:00:39 +0000
Manifest this update: Fri 31 Jan 2025 06:00:38 +0000
Manifest next update: Fri 07 Feb 2025 06:00:38 +0000
Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: JXgqhqG4SuwKM9tH6S5cYMKPqyokXc++s9QDJa96+gE=)
2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=)
3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Jan 31 06:00:38 2025 GMT
Not After : Feb 7 06:00:38 2025 GMT
Subject: CN=679c6706-4783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:a8:1c:c2:66:e6:38:dc:d2:c8:ed:23:9f:
e6:c5:c3:ce:eb:77:da:76:c0:8b:71:2f:77:3a:5c:
d4:de:b3:43:85:71:26:01:b8:84:92:a3:76:88:74:
64:43:b7:57:89:05:62:59:38:64:e0:9e:c1:41:14:
d5:22:40:b4:f7:74:19:f1:49:9a:6f:d8:17:f6:40:
00:7c:67:09:cf:a0:01:a4:03:8f:ff:85:0f:a0:93:
a6:f2:4a:03:f1:9b:2c:dd:32:32:7d:54:a7:1b:3c:
26:24:cf:a8:45:c1:bd:ee:4b:4f:c9:c3:9e:5e:9b:
2f:24:25:5d:4f:41:2b:d6:dc:ad:2d:77:ee:b9:62:
80:61:d9:0a:d6:99:2f:77:aa:4f:25:e2:e9:1e:eb:
bb:6c:86:7b:6f:9d:0f:59:db:c1:2b:a0:33:36:79:
53:de:89:b6:2f:ba:30:70:17:15:7b:cb:4b:b3:45:
4e:84:78:65:f1:e2:5d:9e:08:80:6b:e9:b1:25:76:
d3:1c:9a:63:47:f6:44:16:47:8c:57:02:11:05:4f:
04:3e:f8:ef:df:61:5b:8e:f0:7a:41:22:c5:bb:89:
07:46:c5:53:4b:b4:14:88:50:71:37:d7:46:3e:b1:
da:a7:70:f8:ed:77:f7:b1:1d:54:5b:d9:db:33:44:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:DF:E4:52:A6:A8:48:D7:FF:CC:BD:1F:F7:41:88:6A:BD:22:9C
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:28:12:5d:5b:6f:71:e2:91:c3:b7:9c:c6:95:31:e9:dc:
87:fc:b6:dd:57:1c:b1:8f:30:89:78:1b:0d:e2:46:d9:a6:03:
e6:64:93:b3:66:2e:0e:c6:ff:ba:8d:e4:e9:1b:84:f4:46:15:
f1:32:02:c3:fc:1e:bf:1d:86:92:7c:c3:85:5c:a8:2b:1f:b4:
c7:ea:d5:7a:cc:07:b1:27:12:7e:be:f3:2e:2b:64:e4:f5:de:
58:74:43:c9:d4:15:7f:4d:f0:a5:7b:b0:05:13:d0:48:c4:36:
62:d4:8c:70:a3:59:5f:50:0f:58:b4:d5:68:fe:e2:7e:d7:de:
74:65:e0:90:26:12:38:9a:5b:27:5c:eb:00:3e:37:31:e1:41:
c4:b1:16:6e:61:58:41:f6:20:cf:38:bf:b7:44:75:05:f4:50:
9c:1d:01:1a:c2:1a:e9:cd:7c:41:9a:01:11:6d:cc:b2:74:e7:
11:95:5f:f7:e2:7a:b1:66:2a:da:45:dd:db:72:dd:c9:ec:ec:
d8:97:e6:eb:51:de:39:42:17:41:83:7f:0b:a0:55:32:a0:41:
3a:2a:8d:4c:e4:66:9e:be:c9:c8:bd:68:06:bd:49:1f:a7:d0:
13:e1:65:fe:a8:c7:a8:80:f6:6e:f0:a8:f3:95:dd:27:d1:4d:
a3:04:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:11:58 2025 by rpki-client