Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File: JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier: yx1TI+7ScnBUmnNOr4rPc3S5GQoPNXS0cyf0loOCd6w=
Subject key identifier: A4:A0:75:7A:91:66:2A:37:0E:F5:4A:04:72:C5:96:A0:9B:3E:5C:D0
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number: 23
Signing time: Fri 31 Jan 2025 06:54:57 +0000
Manifest this update: Fri 31 Jan 2025 06:54:57 +0000
Manifest next update: Fri 07 Feb 2025 06:54:57 +0000
Files and hashes: 1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: XmiZesMyxGLnYy1L0ar3S+3HJNAyyWZpZczD4j/sSP0=)
2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=)
3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=)
4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Validity
Not Before: Jan 31 06:54:57 2025 GMT
Not After : Feb 7 06:54:57 2025 GMT
Subject: CN=679c73c1-fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:ef:5c:8c:db:21:fc:3c:19:bd:5f:ad:1d:
9c:6d:e8:29:7b:1c:c1:77:7f:ea:39:50:fa:93:52:
5c:62:d0:6c:9f:e8:93:1c:4f:13:2f:f3:2f:cf:4c:
29:12:2f:7a:d0:03:4d:4b:a9:c8:19:cf:1b:fb:1e:
40:b0:b2:24:fb:6b:2a:89:0b:d0:7a:21:b8:6b:72:
d8:4b:58:5d:c2:4a:e5:0f:db:77:fc:3f:7e:6c:b9:
00:a8:13:30:5a:42:8e:3b:25:82:d0:cb:24:fc:18:
7c:26:77:89:e4:16:02:c9:67:aa:1e:c1:f3:68:00:
99:47:85:5b:85:98:92:31:d2:df:6c:81:c4:ff:78:
e7:d3:ca:23:15:5f:12:4d:8e:0a:e4:65:34:2a:e8:
ea:f7:78:1c:51:8f:d7:ab:98:46:c4:36:6c:3f:e7:
c1:05:32:55:e2:be:d9:55:5c:02:4a:ae:2b:5c:86:
48:5a:00:5d:8f:91:e3:82:08:5d:4e:c8:4b:76:8e:
aa:8c:b2:60:81:c7:1c:63:33:2e:55:8d:eb:2c:48:
0b:8d:75:d5:89:6c:fd:52:fd:19:62:23:ad:e8:cc:
41:a5:6b:b5:37:94:56:cf:a7:d5:83:b0:49:67:e6:
e2:47:0a:77:10:05:2e:2d:79:2a:c2:37:ae:76:6b:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:75:7A:91:66:2A:37:0E:F5:4A:04:72:C5:96:A0:9B:3E:5C:D0
X509v3 Authority Key Identifier:
keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:90:c3:bc:7f:e9:c7:db:0c:0f:3c:ba:89:c6:49:b4:23:ba:
25:d6:54:07:11:d6:e1:25:76:85:c8:44:70:f7:56:f1:60:e3:
99:a9:26:56:b5:be:57:b7:55:32:2e:84:96:75:65:b7:83:d3:
b6:d3:4d:d3:e7:51:5a:38:69:33:f8:97:cb:02:9d:68:57:05:
0f:df:cd:35:6d:41:82:43:dd:67:08:3c:fb:e5:9b:a8:22:af:
99:01:18:e7:d8:34:1c:e4:16:d5:df:a2:98:e0:10:b9:2b:2c:
9f:db:2c:bf:cf:9d:3d:f8:e1:c5:e5:cd:7a:55:eb:f1:0e:d4:
de:ad:c6:8a:b2:a9:18:82:42:fc:82:07:b4:fe:fe:c0:1f:83:
b3:20:e3:fd:07:52:f3:34:11:41:43:88:04:37:9f:8a:2c:1a:
fb:69:2f:ec:16:40:44:80:b9:ed:f8:c3:ab:26:9a:4e:c3:b8:
82:d5:a9:85:3f:c4:37:82:80:ab:7e:6d:31:ce:50:c3:cd:f1:
af:03:6e:1b:1a:65:79:99:8c:44:65:a1:2d:c2:c6:3f:b6:48:
f5:69:29:45:1b:19:f0:ff:da:82:54:36:3d:06:30:dc:20:1a:
fc:4e:59:e0:31:5f:cb:94:bf:83:45:e4:78:8a:22:24:7d:26:
77:c5:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:55:46 2025 by rpki-client