Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json)
Hash identifier: nUEIPVBXTiSLQuGoTbriZHhP6aepcJv73oDgLjPq89o=
Subject key identifier: 39:C5:6A:47:78:70:B5:4D:AE:5C:89:7D:1E:FD:D8:6E:76:97:EE:09
Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Certificate serial: 345B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
Manifest number: 3452
Signing time: Fri 31 Jan 2025 15:11:39 +0000
Manifest this update: Fri 31 Jan 2025 15:11:38 +0000
Manifest next update: Fri 07 Feb 2025 15:11:38 +0000
Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: D+psNpAq8G+NBpX+2Id5s/l/xVx7yz7QPsH01NrJZ3k=)
2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13403 (0x345b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5
Validity
Not Before: Jan 31 15:11:38 2025 GMT
Not After : Feb 7 15:11:38 2025 GMT
Subject: CN=679ce82a-553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:a4:09:b5:14:d8:ac:ac:85:23:8f:1e:8c:
df:0c:e4:e7:28:11:02:66:d2:1f:c5:d9:33:a4:99:
93:d4:91:15:63:35:62:ba:f2:28:e4:7a:1a:4b:dc:
42:c8:62:db:45:b9:ae:66:49:6e:49:3d:6c:e1:98:
25:30:7f:41:cc:3e:be:6a:26:4f:ea:f2:5c:6d:13:
69:be:5c:13:54:f7:0f:4c:a7:54:d7:aa:6d:fd:3c:
07:e2:17:e8:da:3d:43:3d:58:90:b3:29:d9:7c:d1:
c2:d2:27:67:72:4a:6d:d4:07:df:ba:6b:b1:8e:35:
54:68:84:c8:ba:d3:95:71:98:b9:5e:7f:50:7b:de:
e5:1b:29:b0:cc:8f:19:f4:13:dd:71:aa:6e:f0:44:
4b:4c:77:18:36:a4:f4:67:a6:fc:15:6d:fd:ae:7f:
00:51:47:1c:33:27:e6:4e:73:b9:64:61:ee:75:b6:
77:a9:a9:a7:3d:96:8a:0b:7f:18:a7:9f:64:9a:80:
92:13:fb:ae:b6:80:2b:a4:21:90:80:b1:16:55:b6:
84:30:c0:b0:fd:09:c5:0a:b6:e1:08:75:97:47:de:
f9:52:e3:98:d5:47:b5:0d:6a:8d:b3:d6:a4:1c:9b:
13:37:06:e1:2b:2b:c3:4b:32:46:45:2c:33:2a:da:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:6A:47:78:70:B5:4D:AE:5C:89:7D:1E:FD:D8:6E:76:97:EE:09
X509v3 Authority Key Identifier:
keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:7e:1f:f2:37:11:2c:c3:8d:64:0a:ea:a8:b7:d6:6b:12:
b0:f4:60:30:8a:ce:42:46:2e:36:86:37:e2:60:41:02:69:54:
6b:d7:70:06:ef:49:90:fe:e8:14:52:28:da:b3:1f:b2:d5:22:
8d:46:29:de:21:34:9a:d5:ad:2d:9d:42:7a:e7:b1:1b:be:7f:
ad:8d:ea:f2:1f:71:fc:78:cc:6f:ea:ef:42:2e:b9:9b:89:09:
d7:bd:a4:e5:6f:b4:b0:2d:28:36:78:ab:2b:c4:8d:41:3c:2e:
a0:3b:3b:45:b1:1b:cb:a0:e1:5f:cd:e8:bb:0b:1a:36:6a:a2:
20:55:32:ad:bb:f4:a1:01:1b:7c:78:7c:97:43:8b:e2:bc:3c:
85:96:76:7f:88:3d:94:ec:f9:9f:60:6d:f7:5d:a3:39:c6:c7:
88:fb:33:15:6b:ed:14:9e:67:10:36:b0:1f:86:a2:92:19:b6:
cc:96:31:75:35:e4:34:3e:fc:a0:bb:ba:ad:f7:0b:9d:cb:d9:
fe:87:f1:3e:f1:2e:9c:f9:13:6c:6f:9e:b0:8c:12:6d:d9:db:
aa:da:73:f8:ef:7c:b9:b3:3a:20:fa:a5:c2:cc:39:e3:76:ba:
d5:30:97:8f:6b:8c:02:20:99:4a:f1:bb:8d:85:f0:4c:56:81:
48:27:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:07 2025 by rpki-client