Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json)
Hash identifier: iJ4DOYtv7TE3jqFY2sWelNntNlWA+Pu1lmH18n0iKnk=
Subject key identifier: 86:F0:EB:4D:09:3B:A2:CC:56:3F:C7:66:A1:80:7F:7F:A8:23:DE:A7
Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Certificate serial: 06FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
Manifest number: 06F8
Signing time: Thu 30 Jan 2025 21:53:03 +0000
Manifest this update: Thu 30 Jan 2025 21:53:02 +0000
Manifest next update: Thu 06 Feb 2025 21:53:02 +0000
Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: MNkvm7OUJsyf1LPeJqyjmCIVwDH5kxFsOYVHLlUDCCk=)
2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: pS+rknsKIRFZxced71y+WLIWbrwwq2gZOSPnZeQrMOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115
Validity
Not Before: Jan 30 21:53:02 2025 GMT
Not After : Feb 6 21:53:02 2025 GMT
Subject: CN=679bf4be-bed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:90:60:de:3a:e6:d3:4d:3d:bb:c8:0d:6c:
86:be:4a:9c:df:6f:9c:71:bb:84:1d:94:b5:c5:81:
39:56:cd:84:d7:86:f9:31:ee:2d:d8:44:42:05:16:
ac:e7:3b:07:ad:ae:4a:3a:af:3d:aa:bc:2d:d5:0a:
17:f6:a9:11:ac:d2:a9:3a:1c:d2:ce:57:b0:e7:93:
31:16:b8:80:19:a4:bf:49:38:ec:b2:e8:7f:6f:06:
03:1c:cf:e6:14:77:3d:d4:d5:cb:a7:02:54:46:9a:
9b:c1:8b:96:b2:f3:ed:bc:cf:e9:4f:f7:c8:e9:35:
5f:20:3f:52:23:a4:4c:1b:63:7f:1a:3a:3f:4c:76:
4d:00:2e:ce:e2:12:01:a5:da:43:94:eb:07:bf:af:
6f:cf:fb:92:4a:10:25:4b:95:14:46:a8:65:0d:c5:
6d:b5:e6:71:21:64:66:ef:a3:79:b9:5e:f5:30:db:
c4:21:9b:b2:06:89:f8:0d:2f:20:00:22:7c:94:45:
e3:37:6f:a8:ed:68:53:67:87:df:79:e7:61:19:88:
78:bd:e9:95:21:f1:c1:08:32:2e:47:16:bf:ee:3e:
b0:73:e8:83:1f:a5:c7:a3:f3:7c:f9:10:92:4b:72:
aa:07:bc:56:eb:e2:cd:55:1c:4c:4d:15:9e:14:1d:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:EB:4D:09:3B:A2:CC:56:3F:C7:66:A1:80:7F:7F:A8:23:DE:A7
X509v3 Authority Key Identifier:
keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:98:fb:8a:85:b4:ce:5f:cc:53:04:a4:d4:a1:38:22:8a:
73:df:61:48:c4:e7:38:97:6d:96:7f:f4:4a:bb:24:2b:34:bf:
b2:86:c1:80:05:da:d6:5f:ae:6d:a8:9c:3b:4d:99:c3:15:a4:
4d:3b:cb:42:e8:bd:96:2c:c4:27:43:a4:71:4e:00:eb:22:d9:
ba:5a:73:dc:ce:a3:97:7b:ef:f1:e5:41:db:1f:ca:0d:94:8a:
b6:c8:5a:7c:54:5f:40:ff:1c:8b:84:55:d7:6e:8c:1a:4c:e8:
43:1c:41:ac:13:34:8a:dc:ee:7e:51:ce:5a:a5:7c:85:cd:49:
24:d7:f9:2f:63:7f:5e:e5:17:22:22:a3:35:5c:29:7b:53:d7:
2a:23:74:a3:ac:0d:b6:18:b9:cb:cd:4f:16:17:cb:80:da:7b:
29:29:71:be:0e:cd:70:6d:5a:f8:84:1f:19:ae:76:7c:32:2b:
e4:cf:8f:5f:c6:eb:7c:83:56:48:ba:3e:21:c7:eb:23:27:9b:
4e:56:20:0d:a1:44:fa:1f:d5:ab:fa:36:ee:d8:4d:48:61:27:
84:3b:c4:85:76:e0:74:4a:7c:52:30:01:3b:e6:0d:98:c9:fc:
25:09:82:9a:3e:6f:6c:39:38:bb:4c:8e:ca:d0:1a:4b:63:7a:
2d:3f:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:17 2025 by rpki-client