Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: S9EveVfHmIbZR34euouyig4mnP2z+kZZjfYGPK3riWI=
Subject key identifier: 71:E2:83:E9:30:B7:BE:6A:8C:13:AB:DB:9F:C6:9E:2E:71:61:70:63
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 0473
Signing time: Fri 31 Jan 2025 00:09:08 +0000
Manifest this update: Fri 31 Jan 2025 00:09:07 +0000
Manifest next update: Fri 07 Feb 2025 00:09:07 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: SJE7Kg/KjflJLA3SjW5BaMfFpx2GMCuXRoRnIhXKucU=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Validity
Not Before: Jan 31 00:09:07 2025 GMT
Not After : Feb 7 00:09:07 2025 GMT
Subject: CN=679c14a4-5ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:81:e6:86:af:c7:c4:91:de:9e:47:dc:35:
b5:8f:65:1e:05:53:c7:13:38:d1:c3:21:94:7e:5d:
66:c2:4b:b4:9f:4a:2e:64:67:13:f4:30:ba:13:cd:
12:3d:dc:d4:fd:c5:fb:72:77:c3:01:8e:ac:a5:b2:
b5:18:f5:da:95:af:18:b0:d4:31:33:fb:b9:2e:e2:
b7:66:e3:07:9e:4b:14:78:7d:e9:2d:53:9a:51:34:
10:c6:aa:d0:c1:fc:3a:b7:94:f6:0e:83:68:7c:c2:
e3:ac:ee:a7:7b:45:f2:50:95:90:71:b9:30:7e:c3:
c8:2f:5b:6e:7a:05:b3:25:7c:29:17:7b:9b:18:2c:
af:e6:66:b8:54:f3:f3:c7:78:54:f6:79:4f:58:c0:
72:d4:31:be:67:3c:6c:f3:f4:c0:09:ad:6e:c0:d2:
f8:84:67:32:a8:6f:68:e7:5a:8f:4e:3a:b5:48:cb:
15:1e:be:63:4d:4e:2a:16:17:8e:bb:c5:31:90:54:
bc:d6:07:58:38:02:9a:21:c9:f1:36:c3:0b:62:4b:
a3:a4:e2:aa:80:2d:5c:81:60:be:c0:49:68:30:82:
75:25:a8:b9:83:fa:de:fd:af:a4:0b:76:c3:d7:39:
d3:16:23:7d:45:d7:9c:e9:10:02:01:7b:2a:eb:4a:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:83:E9:30:B7:BE:6A:8C:13:AB:DB:9F:C6:9E:2E:71:61:70:63
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:2a:51:25:9d:a3:56:35:21:53:1f:c7:81:63:2d:b8:75:
0d:5a:f6:76:08:7a:da:b8:1e:a8:19:30:d6:46:f5:23:02:cc:
f2:1b:34:7e:19:77:7d:e2:b8:94:56:35:2a:0e:ae:fd:24:fb:
a1:eb:07:96:0b:66:02:e5:34:97:de:a9:14:73:9f:9a:ed:db:
7e:60:a2:cc:20:63:1f:7b:0c:90:92:d5:f0:cb:ef:66:72:b6:
7e:57:da:f2:f5:ec:9a:e1:5d:a7:2c:86:0d:3c:ac:aa:68:50:
fd:f5:66:38:6b:1c:9a:9c:a4:fe:de:87:b3:81:d9:ee:19:89:
30:32:f8:88:63:95:35:b9:39:cf:48:87:89:6d:ce:92:c3:aa:
d1:1d:cd:d1:5d:ca:e3:aa:75:aa:00:23:0b:4e:5d:98:24:1f:
14:ff:2b:02:c5:65:c9:aa:51:fd:00:5b:58:c1:c7:35:76:b3:
7b:ae:37:ee:7c:21:d7:34:f7:41:5f:a4:58:a1:b7:00:88:f6:
9b:b7:d8:b8:4a:01:18:5d:9c:04:5d:d6:3b:bb:9c:d2:93:20:
45:10:18:8c:6f:4b:0f:4c:35:9a:4c:07:0d:ce:ca:01:03:fc:
ea:34:88:1e:3a:2b:8c:2c:43:f8:d9:ec:b4:f7:fd:cd:ab:02:
24:5e:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:18 2025 by rpki-client