Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json)
Hash identifier: mq/thZRl2mu/jjan8TGX56OdqzPNrtNoX6CWMSaWFCs=
Subject key identifier: 71:A7:01:3B:5C:BF:4C:3F:EA:8E:F3:DC:24:6E:78:3C:17:8C:82:89
Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Certificate serial: 2998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
Manifest number: 298F
Signing time: Fri 31 Jan 2025 15:37:38 +0000
Manifest this update: Fri 31 Jan 2025 15:37:38 +0000
Manifest next update: Fri 07 Feb 2025 15:37:38 +0000
Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: qy0ggCbFXQ8yrIBR6j7Xj/bdNYjJqUENd2MuZdotB7c=)
2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: v8ikpVeIaeLPw7BPTH8hEvqeozL1b7cNZXyGxnhNLLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10648 (0x2998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28
Validity
Not Before: Jan 31 15:37:38 2025 GMT
Not After : Feb 7 15:37:38 2025 GMT
Subject: CN=679cee42-f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:77:f9:09:75:c0:8f:6f:c2:2a:b1:47:2f:
02:e0:d9:95:2b:57:88:5c:6f:45:fc:4d:51:cb:e2:
ff:12:f5:94:60:de:74:90:ab:dc:12:83:6b:69:0f:
d3:2a:5b:e9:16:00:ed:42:6e:66:bb:d5:c3:56:7f:
87:4c:9b:28:a1:6f:12:fd:66:af:99:69:52:d4:03:
09:1f:c3:86:8e:4e:51:13:c6:bf:bb:18:67:e1:17:
10:c8:bc:48:66:01:a8:02:b7:98:06:cd:9f:c5:89:
b5:bf:a7:33:7d:6d:31:7a:38:93:e0:c6:6d:21:d5:
25:df:1d:8b:d7:c1:3e:19:f2:1c:26:53:f4:6a:9a:
6e:93:e4:ce:7f:72:22:23:79:f1:b6:d8:9f:13:b0:
4b:b4:d7:f8:b1:76:e8:6a:e4:e9:a8:e0:c7:f8:bb:
15:d4:5a:9e:c9:b2:93:7a:18:4e:af:d2:4b:5e:d1:
0a:62:13:b1:6c:9e:b1:ab:b5:68:77:42:be:75:05:
da:07:59:73:84:d3:c3:32:28:ab:94:7f:32:55:2c:
d6:66:bf:5a:36:38:51:42:a7:59:d9:16:24:8d:1d:
48:01:dd:a1:3b:f9:ee:5d:a5:c9:9d:6a:c1:fb:3b:
2c:4f:e6:17:41:3d:cb:16:af:3d:24:61:03:58:c5:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:01:3B:5C:BF:4C:3F:EA:8E:F3:DC:24:6E:78:3C:17:8C:82:89
X509v3 Authority Key Identifier:
keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:51:cb:7e:f2:e5:c1:06:05:33:05:6a:d3:ce:4c:9f:5b:
6b:20:b6:79:34:b4:41:1e:14:85:46:6e:4e:f7:97:81:62:3e:
a3:c3:26:90:7b:2a:a2:cb:a3:9a:67:d3:a4:93:f5:47:76:bc:
c8:dd:98:dd:c8:da:86:bc:82:31:42:ce:a9:8c:8d:40:c3:19:
9e:92:23:38:66:1f:28:fd:20:39:76:d0:1e:02:74:aa:7f:c0:
2c:e0:ca:f9:51:b4:9f:07:a5:42:0b:e2:d9:27:21:3b:b5:bd:
84:e4:a0:31:4e:b9:95:9c:64:6d:ba:c2:b5:3e:de:45:2c:a2:
37:e5:a8:c9:45:e8:3a:6c:bb:13:9e:4d:ad:6f:62:ae:60:c7:
27:6b:a1:6c:4e:32:3f:05:33:42:c1:8b:1b:c2:5b:98:8a:55:
d5:2a:a5:2f:87:c7:08:f5:c5:c5:e7:53:44:7a:e0:1e:83:9c:
bd:9a:ef:fd:85:59:af:40:8a:c2:81:85:26:5c:02:c1:6c:4e:
3a:8b:e0:59:75:60:3b:5e:87:36:e4:b7:90:24:a1:40:45:9a:
55:17:2f:f5:6e:66:e4:08:5d:2f:e8:9f:73:c4:94:7f:d4:e8:
ce:20:75:15:81:b9:74:2e:97:52:2e:7a:17:ec:22:c1:7a:5a:
c7:48:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:55 2025 by rpki-client