Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File: jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier: tlYGTtS/QceWLtR8NTj+k6t4Ut9r5wn34LtIvyrHJiU=
Subject key identifier: C2:2A:78:E3:47:08:FA:33:6A:C7:A2:6B:5C:84:85:75:F9:46:0E:F4
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer: /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 05:14:30 +0000
Manifest this update: Fri 31 Jan 2025 05:14:30 +0000
Manifest next update: Fri 07 Feb 2025 05:14:30 +0000
Files and hashes: 1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: hCo18pvYKxkrW5lmJTMjochF9vOzbEeNQIol/asWPn8=)
2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: T5x6SlXjPX7mxME3pbp1iBlGxmK0O/jrZnmPz8dQ2E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Validity
Not Before: Jan 31 05:14:30 2025 GMT
Not After : Feb 7 05:14:30 2025 GMT
Subject: CN=679c5c36-637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:91:d5:98:99:a3:ac:94:f1:a9:98:25:d4:
f0:b2:c3:29:5f:d4:1f:20:1f:68:5a:c4:ca:8d:de:
5b:50:4b:81:08:f5:04:04:c0:80:9f:27:1f:1f:53:
b3:71:28:48:f8:5e:e4:15:58:9e:c5:b4:4c:31:59:
35:a6:61:65:36:4b:6a:3f:9f:97:af:cb:33:30:1c:
af:6c:ae:83:bb:f1:2f:a8:44:bd:0a:a1:ef:99:45:
3f:a8:0e:d2:dc:90:af:b8:92:f7:eb:d0:50:44:34:
b4:ee:e3:1a:65:da:ef:db:d4:60:56:2f:a5:4e:ec:
8c:c0:4d:4e:00:bb:c1:d1:64:5b:36:c0:d1:a9:04:
2d:20:ff:1b:c1:6f:5c:36:1b:e8:3b:f2:49:d7:ac:
08:27:bf:46:f7:a1:6c:e4:b6:b5:a1:77:47:aa:ad:
4d:c0:30:9d:ad:b8:73:38:93:4d:68:98:0e:9b:28:
8f:bb:f0:69:52:ed:f1:16:96:70:ce:f1:99:11:5b:
da:10:0d:e8:c3:e6:45:cf:17:25:f4:97:52:3e:36:
ee:b7:8d:27:9a:b5:72:7f:be:b5:e2:f2:e2:e2:00:
a8:5e:9d:2f:dd:e5:a7:ed:86:50:04:a1:87:30:0e:
a2:88:f6:1c:cc:b9:84:1b:a7:c2:cd:cc:4f:53:f8:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:78:E3:47:08:FA:33:6A:C7:A2:6B:5C:84:85:75:F9:46:0E:F4
X509v3 Authority Key Identifier:
keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ce:57:28:58:21:6b:69:80:83:ba:2d:5d:86:bf:e8:01:56:
d1:4e:20:86:fb:43:c7:59:80:e6:81:99:01:7a:ad:33:08:a6:
c0:3b:34:1a:17:c5:c9:4f:57:88:b3:dc:74:64:61:61:9d:84:
18:bc:99:9f:c1:b3:f0:17:e4:5a:83:ff:54:5e:c1:d5:1c:f0:
84:86:a9:66:88:be:7a:65:c2:84:4f:97:51:6b:06:3e:09:6b:
01:0f:70:18:2e:03:c0:08:29:6d:f0:e6:40:ee:49:c8:a0:56:
f5:3a:97:c8:d8:fd:74:23:93:19:12:75:bf:a4:00:3b:85:16:
f1:ae:c7:f2:1a:96:a6:10:9a:f7:17:fb:91:28:f0:d0:39:b5:
b3:cd:61:40:86:00:3e:e1:d4:a0:d3:fe:b7:51:c2:90:56:1f:
13:b8:28:31:d4:dc:62:3e:0a:d0:7c:4a:58:f7:76:e4:04:7d:
13:9e:46:cb:2d:0b:73:5c:02:c1:44:95:17:a5:07:3a:61:57:
af:31:98:fe:26:03:18:b0:19:ac:f2:3d:af:f1:70:61:bb:3f:
a1:da:fe:09:f7:a1:6e:de:49:b8:7d:2c:e4:f5:73:9e:e0:4a:
26:20:50:50:b7:ff:c1:20:37:03:77:f8:27:19:1f:c0:0d:ac:
2d:c1:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:29 2025 by rpki-client