Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier: KVGGP4twH442byEk7SZpC2wiYaNzHr7pxGRlQdhmSIk=
Subject key identifier: C4:56:CD:9E:88:D8:36:12:BB:96:FC:CF:2D:1E:43:35:4C:3B:D3:20
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial: 15CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number: 15C2
Signing time: Fri 31 Jan 2025 16:47:26 +0000
Manifest this update: Fri 31 Jan 2025 16:47:25 +0000
Manifest next update: Fri 07 Feb 2025 16:47:25 +0000
Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: nJb6uN2S2jxAto2jCJ02MDM/APGw1UL8gGYZS+/N68I=)
2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: /hIx3mzyw1pxmzQaCmAbiibJg316E47fCKoUq9VHgdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5579 (0x15cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Validity
Not Before: Jan 31 16:47:25 2025 GMT
Not After : Feb 7 16:47:25 2025 GMT
Subject: CN=679cfe9d-afcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:5b:91:30:e3:ad:89:db:53:ca:66:48:c9:
b9:df:43:d7:6f:cc:d6:ae:1b:7f:9e:df:02:14:af:
fb:31:e3:36:a0:7a:bd:d8:e1:31:55:98:7e:ec:ed:
e0:a9:30:ab:4a:f6:50:42:7d:9a:a2:32:14:39:eb:
79:98:e8:a3:af:56:9c:59:33:96:e9:53:ee:1a:a4:
5e:ca:00:ed:74:a6:ce:e6:86:47:e7:b6:8c:5c:a4:
36:02:98:47:99:c7:2a:9f:c7:32:36:81:82:e3:0e:
03:b8:99:75:62:bd:b9:f5:ae:02:f6:39:95:1a:0e:
e1:70:b4:71:f4:a4:a9:c8:7f:5c:d2:05:b0:02:c7:
94:36:23:5f:07:6f:43:a9:81:ac:2d:98:e2:6c:87:
48:4e:05:96:49:73:cb:b6:0e:c4:42:ac:1b:bb:af:
b9:98:0e:69:82:62:9e:2e:52:cd:40:32:cc:b8:39:
c2:b6:c5:75:76:96:75:7a:b7:14:74:b2:fd:8e:4c:
88:7b:fc:af:e3:45:e6:ca:92:f7:75:37:e3:a7:72:
cc:20:b6:4a:4d:90:a6:e6:87:88:29:e8:7b:32:99:
60:c6:6a:d9:04:3c:a0:a5:36:ac:d5:f5:ca:4b:c5:
53:4c:48:0c:96:f1:f6:06:25:63:a9:7a:e2:28:ef:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:CD:9E:88:D8:36:12:BB:96:FC:CF:2D:1E:43:35:4C:3B:D3:20
X509v3 Authority Key Identifier:
keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:c1:15:c5:a4:93:b4:5d:06:0a:ac:af:38:f1:f9:93:06:
37:9c:e3:62:ee:e8:b3:d5:f1:28:ac:94:3a:e2:92:b4:3f:7c:
01:ef:d2:35:c9:be:b1:c5:73:34:8e:66:f1:38:14:91:a5:1f:
79:07:64:05:46:fd:41:c3:95:51:81:32:91:41:17:88:f1:8a:
a1:1d:76:7f:a3:62:39:2e:d3:6e:76:54:f3:fa:5d:46:02:26:
82:c2:ab:5d:ca:e4:b9:a1:55:ce:56:cb:d6:94:46:d0:2b:84:
ec:4c:11:9c:d4:c6:32:3b:87:44:8f:7a:f0:1a:b6:1b:61:66:
69:3a:e1:4c:9e:54:eb:42:97:f5:5e:18:91:75:76:61:a5:8c:
d1:63:22:3c:ec:80:3f:eb:31:af:41:af:6c:69:51:da:eb:a5:
af:d5:44:c2:1c:a5:f6:63:df:ab:f2:b9:03:66:cd:13:bd:76:
54:93:b0:a5:63:c4:a3:bb:7f:1b:22:e2:16:3d:67:ed:01:64:
02:6b:d6:34:03:5f:56:bb:50:06:df:6a:bd:5b:84:d2:b6:9d:
bc:70:aa:f4:bf:15:eb:26:fc:a2:25:c8:37:c4:37:66:da:1f:
67:fb:5d:bf:39:96:a1:91:1b:8e:56:5c:22:d8:cc:8c:2e:28:
1f:79:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:58 2025 by rpki-client