Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier: JuIVFuk4ISoEMLn3j6NAbktyfyTGQ+O3s9hcSuB6CYo=
Subject key identifier: 41:35:B1:95:E9:D1:63:CC:9D:C8:76:6D:6E:E8:DA:4C:8D:B2:96:CB
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number: 0BEA
Signing time: Fri 31 Jan 2025 18:37:09 +0000
Manifest this update: Fri 31 Jan 2025 18:37:08 +0000
Manifest next update: Fri 07 Feb 2025 18:37:08 +0000
Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: 4uIhe68VnsMW1KxQXJC6l2VAHpmI4aD9WerXVhCi354=)
2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Validity
Not Before: Jan 31 18:37:08 2025 GMT
Not After : Feb 7 18:37:08 2025 GMT
Subject: CN=679d1855-63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:6a:6b:21:b9:cc:ff:b7:72:4a:65:5c:d9:
f6:10:73:a5:0e:94:39:ce:a9:be:10:b8:18:c5:29:
42:46:49:b4:0c:69:cf:01:d1:7e:4a:19:04:b2:2d:
6c:2e:62:35:5f:6e:d4:c8:af:20:6c:85:7c:6e:fe:
cb:ea:5d:6b:c6:fb:88:a4:d0:ea:87:65:69:c7:5f:
ea:a2:ed:d5:86:92:1e:0e:9d:a6:1f:28:5c:74:17:
22:8f:af:e4:de:75:52:07:bc:f1:e7:71:37:1a:ff:
4c:20:de:27:74:f4:7c:57:fa:12:3d:c0:8d:7f:8e:
ab:39:10:8a:8b:59:3d:2a:c9:17:9c:2a:47:36:a3:
1a:ac:ea:db:aa:b3:15:55:40:ce:05:3b:33:eb:1e:
22:a4:99:5e:c1:64:24:7f:bf:ca:66:8b:ce:ef:b6:
ad:7e:d2:61:e7:3c:1c:d1:6a:c2:b5:c2:68:b6:a8:
27:26:00:9c:50:4f:24:4c:4b:c0:31:2b:10:6a:a2:
d5:aa:50:2c:11:08:f2:51:50:4b:a8:dc:3d:ff:c4:
be:15:d5:d2:d6:ef:72:41:07:a0:86:71:cb:b1:55:
04:eb:c2:6c:bc:20:7a:67:d2:3d:67:c1:46:89:ed:
94:11:cf:ad:2f:57:69:27:84:ae:eb:b8:6f:d7:7f:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:B1:95:E9:D1:63:CC:9D:C8:76:6D:6E:E8:DA:4C:8D:B2:96:CB
X509v3 Authority Key Identifier:
keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:9d:01:44:2c:ca:15:f1:7e:69:5e:11:3a:aa:e2:ac:17:
11:46:f5:88:4a:19:d1:ab:df:7b:eb:24:ad:2c:a6:66:b9:ca:
d3:7c:0e:e2:00:2d:61:11:33:63:5e:0d:29:3b:eb:b3:ab:d4:
53:ac:d5:59:be:21:78:26:f8:db:49:65:b1:a5:53:23:9e:58:
2a:c3:b8:14:34:c5:cb:d5:48:15:fb:20:fa:68:01:60:24:36:
fb:e9:9b:54:c4:24:6f:41:06:3d:bb:30:c5:1a:6d:71:e3:c1:
26:c7:46:04:73:6d:48:ed:5b:2c:2d:91:b1:70:f6:27:8b:74:
60:90:fe:b3:83:b8:61:cf:ed:ed:f1:12:99:e6:ac:da:1d:ac:
79:47:8a:8a:f9:35:19:d9:77:e5:12:0b:ca:e9:7a:90:b2:cd:
f4:0f:01:1f:91:f7:46:fb:2a:91:11:21:df:87:69:ac:a1:4d:
d0:3a:99:48:df:c5:12:ee:ed:de:5c:9f:3e:f8:0f:e5:fe:82:
1b:df:21:33:5f:cf:5f:b0:ed:23:f0:75:d5:fc:d7:35:5d:62:
b9:45:eb:88:ae:d9:85:ec:c6:67:c1:22:21:c0:fc:d5:21:c1:
14:b3:2a:d0:f1:2b:01:5c:7f:b2:ad:1f:49:f3:a9:45:16:6e:
9e:a0:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:09 2025 by rpki-client