Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json)
Hash identifier: 7CRnACE6OwKIwKjiCpKbCDGhqXIfqYU81H8aYHbyXzI=
Subject key identifier: 31:36:62:81:BD:49:5F:BB:A3:D0:28:5C:34:96:69:E1:D0:1A:2B:8C
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial: 1BD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
Manifest number: 1BBF
Signing time: Fri 31 Jan 2025 16:14:54 +0000
Manifest this update: Fri 31 Jan 2025 16:14:53 +0000
Manifest next update: Fri 07 Feb 2025 16:14:53 +0000
Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: lO3uoY0Z6S73S78b0yCS3aHI1J8G0KUsOHPN10w5ipQ=)
2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7127 (0x1bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Validity
Not Before: Jan 31 16:14:53 2025 GMT
Not After : Feb 7 16:14:53 2025 GMT
Subject: CN=679cf6fd-0dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:b3:e2:5e:2c:6a:61:d8:d7:e2:c7:db:fd:
ce:1b:c8:f3:01:70:36:04:83:47:49:be:c5:94:41:
3d:54:1c:c1:a0:2a:b3:02:fc:41:c9:41:14:f8:42:
3a:ef:e4:83:d1:79:ff:10:54:58:16:c2:57:bf:01:
e5:24:5f:7c:f7:3b:15:a0:42:f2:a8:39:01:60:56:
74:1f:e0:16:4c:e5:fd:21:6e:98:c7:7d:8e:08:52:
92:a4:ff:e9:2f:e4:50:64:91:26:37:85:86:79:73:
30:00:7e:4f:b6:65:4c:1e:98:11:91:4d:5a:f8:dc:
6b:b3:71:19:74:b2:a9:2b:1e:a1:b0:5c:b3:49:25:
20:58:31:e7:a3:02:3b:ac:64:53:55:65:c3:23:52:
ca:ab:38:a8:82:5e:10:d9:af:92:62:bf:dd:bb:f0:
ae:15:74:fa:3c:d0:0f:ce:42:06:60:d0:3d:26:d3:
23:77:80:e0:9d:de:56:c1:44:65:45:be:b4:c5:fd:
97:c6:5a:86:3e:78:cf:72:cd:ce:98:84:0a:38:07:
0b:8b:0f:dc:01:f5:ee:69:21:3e:2d:a6:24:4f:88:
b4:7f:3a:be:f1:a6:76:1f:f0:42:e2:4b:52:c8:9b:
10:8f:88:f1:fb:46:5a:1d:8d:cb:1f:b6:df:80:09:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:62:81:BD:49:5F:BB:A3:D0:28:5C:34:96:69:E1:D0:1A:2B:8C
X509v3 Authority Key Identifier:
keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:70:df:17:13:57:f4:aa:91:d6:59:0e:cd:ab:1c:6c:5c:f4:
3a:d5:e3:c0:71:e3:d4:e5:62:f7:97:58:1d:ed:03:95:5e:e1:
56:df:5b:0b:fd:27:62:e7:18:07:0c:d6:8d:8f:7d:58:97:5c:
5a:a5:00:07:94:d1:2f:41:2a:db:c4:03:2d:10:a5:d4:57:ef:
94:b3:0d:4a:cd:cd:25:74:db:4c:f9:42:b6:dc:51:a5:18:84:
56:f9:a1:82:0f:43:1b:5c:db:eb:e2:eb:d6:3a:7e:3a:65:1e:
3d:64:4d:f0:40:6a:80:e4:52:4a:19:ed:32:42:0b:be:2e:88:
e0:9e:55:9c:1f:d4:fd:1f:ef:34:3f:b5:2a:cf:01:e3:98:8e:
e9:9d:3a:24:0f:8d:01:fe:65:03:b5:05:8e:dd:4d:77:bd:1b:
cc:ab:59:34:a0:e6:8c:1f:42:24:09:ee:6d:b3:de:a3:87:76:
35:79:d4:94:06:2c:88:b5:4c:7f:b3:e9:ef:e3:cb:fc:e5:a3:
14:d9:52:1b:34:41:67:a7:4e:b3:ad:b4:1f:7e:04:33:1c:56:
4f:73:20:94:a5:bc:8a:e1:08:5b:3a:82:70:ba:0e:8f:cd:2b:
3c:3d:97:6b:e8:e5:28:40:50:5a:3f:e9:18:e2:fc:09:c0:1d:
89:51:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:45 2025 by rpki-client