Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json)
Hash identifier: UgOR3sf42RUVJsaITjKPe/Qbb3f2v4WlxY1Fw+9HyKo=
Subject key identifier: E2:6F:3D:81:F6:02:A7:ED:1A:64:14:3B:82:4F:73:EB:E4:C3:62:67
Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
Manifest number: 013C
Signing time: Fri 31 Jan 2025 03:34:38 +0000
Manifest this update: Fri 31 Jan 2025 03:34:38 +0000
Manifest next update: Fri 07 Feb 2025 03:34:38 +0000
Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: /nnjJuoL1wLykHNzcaw9JwBpfUTq8P+yAfqTwVhssiY=)
2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: u3KQ4+2IgJpu2VdTdgcmH5lKk3YgiV3NcKX66uGGiko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066
Validity
Not Before: Jan 31 03:34:38 2025 GMT
Not After : Feb 7 03:34:38 2025 GMT
Subject: CN=679c44ce-b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:74:1e:0e:59:82:36:fa:cf:87:dd:85:2b:
39:74:af:ba:76:c3:e0:b5:6a:d8:ce:b0:5b:9b:e8:
09:9f:74:4a:69:aa:bc:97:cc:2f:01:18:c3:a4:5e:
d0:bd:7b:0e:65:7f:b0:39:d2:6a:9f:2f:b4:27:57:
84:66:c7:5e:c8:a7:00:9a:3d:f9:95:ff:ea:94:3b:
2e:3e:4b:33:91:3d:3b:d8:26:b6:30:a4:30:cb:7f:
ab:06:a3:e4:b0:cb:b3:2d:70:58:5f:73:e6:b4:dc:
a6:57:57:74:c1:4b:f8:74:22:d3:bb:b1:7f:90:f5:
95:73:89:ec:79:26:e1:54:3f:f9:84:f3:89:88:99:
0b:d7:92:c4:a5:6b:6f:22:d4:cf:9e:f9:fd:a6:cd:
78:81:dd:9b:fb:6c:59:6b:46:5d:ea:7f:a0:7d:1d:
be:13:91:60:3c:fe:4c:5e:77:c8:ab:f6:46:6a:5b:
f5:57:42:10:ca:88:b4:86:dc:35:7b:84:4f:fc:8b:
47:b2:d6:39:70:8e:51:03:72:fa:c1:76:5d:84:3a:
39:18:59:ad:36:e7:56:96:8c:d3:a9:c2:aa:2b:5e:
a6:5a:8e:b8:0b:57:8b:e0:1e:54:61:cf:20:fb:36:
bf:d1:b3:74:c5:4c:f6:45:34:5f:a4:23:40:ce:1f:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:3D:81:F6:02:A7:ED:1A:64:14:3B:82:4F:73:EB:E4:C3:62:67
X509v3 Authority Key Identifier:
keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:bf:0d:51:01:b6:33:69:2c:79:d4:75:92:af:75:16:21:
88:64:50:d0:f0:04:0b:03:3f:8a:b0:81:d3:80:a1:97:92:2b:
58:13:ac:e3:e6:a0:1a:ae:2d:47:2e:f5:3a:f2:50:d7:14:ee:
05:79:cc:3e:78:37:2e:f6:50:01:00:f9:fa:8d:e2:8c:e8:51:
57:c5:30:9e:d7:0e:f0:e3:ca:e7:cf:8b:99:df:3b:20:68:c6:
eb:cd:2d:ef:ec:1d:99:6c:e4:20:4f:64:b3:30:4b:4d:3f:90:
e0:d4:b2:e8:e7:6d:f1:83:78:92:72:c3:89:c2:9a:fd:6d:d2:
1d:e8:52:67:d2:ac:dc:50:00:2f:41:fe:e0:7c:23:57:35:92:
0f:80:ae:fe:14:c8:02:15:87:d9:19:15:f7:92:b4:de:1e:11:
01:27:0c:4d:4f:d1:57:44:f3:cb:76:cb:a4:2d:29:07:88:18:
c7:c2:e0:8b:13:ce:b6:af:ce:cf:13:33:12:da:4f:4b:13:5e:
bd:72:05:26:cd:d8:c9:c9:5e:a4:6c:fb:85:72:3b:22:2f:94:
b3:52:68:f6:c7:37:a5:45:a4:71:55:93:07:ed:b3:74:d4:75:
6a:4c:2f:60:a5:40:72:88:91:a4:7b:09:6f:75:72:17:93:a8:
32:a3:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:09 2025 by rpki-client