Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json)
Hash identifier: ThmqzIMQS1IJPyuKDYCm7jpagDEg/LHJUX/fnJ7b3oE=
Subject key identifier: E5:BE:2E:DB:CE:CE:61:CD:25:DA:DE:6D:B4:B6:E8:92:A1:6E:48:AC
Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Certificate serial: 0D10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
Manifest number: 0D05
Signing time: Fri 31 Jan 2025 18:01:58 +0000
Manifest this update: Fri 31 Jan 2025 18:01:57 +0000
Manifest next update: Fri 07 Feb 2025 18:01:57 +0000
Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: MSdlCC6K0om6tNf0/3Bg4MwDuaXB6TeFriagFk45Oog=)
2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
Validity
Not Before: Jan 31 18:01:57 2025 GMT
Not After : Feb 7 18:01:57 2025 GMT
Subject: CN=679d1015-0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:b2:99:3a:c5:fc:61:5f:05:6d:83:61:a1:
78:8a:3f:b6:38:0d:e5:d4:d5:ab:de:1b:9d:d7:58:
d8:f2:38:f7:c4:24:45:96:eb:f3:9c:69:57:f6:20:
98:f5:1f:f5:10:39:d1:b1:aa:f9:89:7b:ee:1e:cc:
5c:5c:7f:72:88:0c:38:11:3a:1f:2d:45:83:94:d3:
62:d3:5a:5e:2f:0d:48:0c:db:8f:08:9c:60:ba:5f:
25:bf:ba:cb:55:13:ab:bc:7c:76:a9:8f:1c:b1:a6:
ca:f1:f9:73:4c:f7:d5:f8:d5:24:25:dc:f8:d9:6d:
4c:57:9e:84:50:c2:9b:3d:9d:02:b6:c3:10:09:6e:
d5:61:f9:d4:1e:ef:c1:73:73:04:8a:c7:22:0d:ff:
28:09:7d:c4:48:35:2e:2a:8d:5c:ac:bd:0d:45:7b:
1c:32:33:0b:f7:59:40:44:96:d4:48:14:76:6a:65:
96:6e:6e:2c:82:32:dc:4f:37:c7:f4:a1:3d:8a:37:
b6:30:a3:1e:a6:61:0f:f9:c9:12:ef:45:0e:f2:e4:
dc:9a:f3:86:51:ba:75:83:d5:82:f9:41:09:23:56:
a0:76:20:d4:8a:c7:e8:9d:b5:b3:87:3b:f7:ec:6e:
44:93:b0:e2:c7:ee:7a:5f:fc:d3:66:bf:fa:c1:57:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:2E:DB:CE:CE:61:CD:25:DA:DE:6D:B4:B6:E8:92:A1:6E:48:AC
X509v3 Authority Key Identifier:
keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:44:d3:4d:b9:94:cd:a1:9b:cc:90:af:f8:0e:35:45:d2:20:
67:06:19:6a:a0:1f:4e:4d:4b:6f:ea:83:a1:40:42:86:b2:a3:
95:f4:2e:b9:da:55:30:36:b8:2a:43:99:53:be:a8:9b:6c:7b:
94:a9:51:b9:95:fc:44:c1:2c:84:1c:a2:1b:be:68:a5:c4:c1:
cd:75:44:fa:e0:37:b3:a9:1c:e3:83:c6:1b:1b:df:89:38:aa:
f6:1b:0b:00:11:6b:a7:d8:32:59:a4:a0:bb:0a:a1:45:3c:29:
00:0b:e7:49:46:44:57:00:5e:de:8d:50:c3:38:c6:2a:f7:c6:
2d:e1:69:0d:bc:e8:5c:ba:18:d0:93:40:11:13:c4:1a:5f:e9:
f0:76:46:ba:23:30:1c:a6:75:ec:aa:9f:3d:f5:7c:9c:b2:84:
d1:45:69:62:98:5d:de:26:43:ff:f6:af:5c:4e:b4:68:59:90:
b1:15:18:11:d9:b8:19:f4:29:83:a8:b1:cc:92:47:a8:28:54:
5b:39:84:f9:4d:62:f3:27:3d:5b:69:c1:1b:a8:92:72:56:de:
fc:ed:c4:4a:e4:35:e8:7a:50:48:fd:ee:d5:ef:08:3f:d3:fc:
21:a4:61:a2:ce:e3:ea:78:32:47:8e:24:e0:d9:69:6c:7c:30:
a8:a9:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:06 2025 by rpki-client