Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json)
Hash identifier: /XDgM1EuQURnzL6hLZ0JfRQzBPrdYVqZlmaKgfbPeW0=
Subject key identifier: 05:36:41:E8:4E:82:3B:76:D6:03:2C:A8:71:97:13:4B:75:42:D6:DC
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial: 17C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
Manifest number: 17A9
Signing time: Fri 31 Jan 2025 16:35:12 +0000
Manifest this update: Fri 31 Jan 2025 16:35:11 +0000
Manifest next update: Fri 07 Feb 2025 16:35:11 +0000
Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: fLf+R1grUU5s39DyVEFqRjTPQI967/+83raf0bqNsGU=)
2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: AJVJFbnvPCGmDcQ1w9Ifor0vZahtLKDl6qkkbnsRLEw=)
3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Validity
Not Before: Jan 31 16:35:11 2025 GMT
Not After : Feb 7 16:35:11 2025 GMT
Subject: CN=679cfbbf-0111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:c5:59:48:7f:1d:54:ee:2d:67:23:8d:ae:
6b:55:e0:4d:ea:4e:6a:b3:5c:b0:6a:2c:0a:10:79:
02:49:6b:74:a0:12:ae:bd:fa:62:36:31:f6:40:b4:
7e:ce:4f:a8:f8:be:38:87:f0:7c:67:ed:7f:40:88:
f2:6d:6f:ac:2a:0d:9f:d6:ca:63:a6:5e:69:fc:1b:
9b:61:10:e3:3e:5d:58:ce:fd:56:d2:ca:ea:47:76:
8f:74:96:a2:df:e8:9e:9a:94:b0:55:cb:df:2c:5d:
6e:b2:74:78:0e:54:9d:5e:eb:f4:dc:16:44:a3:72:
87:b6:bb:03:73:99:d9:07:5b:b3:4d:d3:70:02:18:
5a:b2:e2:f7:57:00:3f:bc:dd:40:a3:54:ac:c0:7b:
d4:b1:2b:79:ee:f2:6c:d9:26:ab:ed:cc:9c:c1:7c:
23:0f:54:7f:51:de:c7:1c:35:3f:69:03:d4:6d:8d:
8d:bf:e3:51:e1:64:0f:04:df:0f:80:2d:e8:51:08:
e3:b1:b9:29:19:38:d5:73:17:16:b7:93:a4:aa:45:
ca:3f:d8:51:38:06:e2:58:0e:68:87:6b:4d:c6:fe:
0b:24:53:6e:8f:d1:86:d7:98:0c:04:e8:99:95:18:
3b:1a:ab:7d:b6:83:19:c5:48:eb:24:94:36:d1:3e:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:36:41:E8:4E:82:3B:76:D6:03:2C:A8:71:97:13:4B:75:42:D6:DC
X509v3 Authority Key Identifier:
keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:4f:a6:d1:50:25:2d:bf:a4:9d:58:e1:5d:9a:c5:70:42:
63:37:fd:18:ea:85:72:07:53:c3:78:82:90:49:7a:15:bb:1c:
a2:02:94:17:3c:a3:92:e7:90:c8:0e:6e:1f:ec:01:c1:70:8c:
5b:5a:e6:fc:69:b8:be:c1:9f:07:46:c6:f0:82:b7:ba:29:4c:
a7:a4:03:e6:a4:fe:a4:5f:57:dd:8a:b7:4d:fc:aa:1c:dd:2b:
6c:b6:ad:0d:51:d5:14:2a:5a:78:64:f6:b0:b1:e6:a6:98:2e:
94:2b:ee:ea:fc:57:ed:48:f5:c6:75:a0:d9:c3:ca:e0:8a:ab:
33:dd:b5:88:d0:0c:0c:2d:a0:e4:3d:da:2b:f0:cb:3a:26:2a:
f1:17:3d:90:2d:ef:9c:32:f5:5e:1f:c2:2b:a9:e9:92:f0:1a:
7a:e2:1a:a5:e4:c5:19:fd:77:4c:29:1f:1a:0c:8a:11:87:22:
c9:e0:fd:a4:b1:3c:dc:ac:f9:16:4d:e1:92:87:38:b9:91:83:
83:ef:0b:85:be:88:6a:94:d5:d2:a7:87:a0:62:31:18:f8:17:
76:85:3f:28:a2:a0:20:0d:e6:02:48:92:6e:50:ad:a0:15:34:
0b:d3:3d:dc:55:a8:cb:de:28:15:8b:9e:63:5c:07:0e:9c:5e:
51:fb:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:48 2025 by rpki-client