Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier: BTCs+GN+7U4RFBK8xVPRz0Nw6+DCAm/k0ey6Re5t5Es=
Subject key identifier: 8E:32:70:EC:51:2D:CA:8B:EF:57:62:2B:D2:83:8B:17:0A:3D:C6:90
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial: 2084
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number: 207E
Signing time: Fri 31 Jan 2025 15:58:22 +0000
Manifest this update: Fri 31 Jan 2025 15:58:22 +0000
Manifest next update: Fri 07 Feb 2025 15:58:22 +0000
Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: zbBuojTD0VaRdnKAI0rv4zPiByopHvnVBJkCFsg/yYk=)
2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: RK88f3wdCzpNPguWSTl9nYVYkHw1B7h/b164CfD8hi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8324 (0x2084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Validity
Not Before: Jan 31 15:58:22 2025 GMT
Not After : Feb 7 15:58:22 2025 GMT
Subject: CN=679cf31e-a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:d8:ac:65:a4:1f:84:8b:cc:7a:b6:1b:73:
3c:c4:4a:cd:34:87:29:7a:db:21:c7:b0:c1:88:fa:
86:4b:5d:ba:88:71:a0:c1:70:20:32:3c:eb:3c:de:
63:b3:a5:06:9c:a4:16:f5:03:01:38:e7:38:29:8a:
3b:6f:eb:c6:53:8c:ba:ab:77:8f:93:23:40:2c:b5:
59:f1:f6:dd:cc:92:89:50:dd:d0:6a:f1:4f:30:00:
b5:01:e1:6f:58:58:9a:4f:32:b6:01:93:bb:80:4a:
6b:c5:ba:b3:26:a5:18:a3:f6:14:a4:c3:8a:63:52:
58:2a:a5:26:bd:80:53:84:9b:06:a1:a1:a6:ab:e7:
35:d0:95:ff:87:18:12:39:4a:2b:b8:e8:17:bb:7b:
ad:65:b1:58:b1:32:b5:94:86:18:7e:d3:01:40:1a:
8e:a3:e8:8d:61:1f:7e:4a:09:20:59:7e:38:4a:a2:
dd:11:d4:bf:99:3c:84:d4:20:e5:fa:37:70:72:45:
6b:65:98:18:6b:21:5b:e3:04:8a:2e:fb:21:f0:01:
26:70:07:04:1f:0c:38:48:b0:f3:52:07:54:02:82:
60:8e:c8:19:69:36:28:be:61:6b:08:83:0c:8f:e5:
19:ea:a4:88:f9:a1:ad:da:89:d4:1b:76:6b:5b:87:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:70:EC:51:2D:CA:8B:EF:57:62:2B:D2:83:8B:17:0A:3D:C6:90
X509v3 Authority Key Identifier:
keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dc:83:7f:b4:63:30:06:72:35:8a:f7:48:42:64:ca:a6:d6:
b0:8c:ae:7b:39:ff:04:97:0b:24:fb:eb:78:e8:75:3c:d6:f6:
92:4e:0b:30:a5:be:29:e1:9f:7a:65:de:1a:49:e4:24:c9:5c:
cd:3b:2f:62:25:b4:97:1e:f5:cc:76:d3:3f:9c:05:9a:3a:7d:
e0:97:15:be:62:eb:4a:f8:93:6d:59:65:c3:6e:4e:28:c0:9d:
93:38:42:73:be:a1:51:94:47:21:24:82:8c:98:83:0d:44:99:
ff:9e:ea:97:34:44:04:af:6f:a1:d1:5b:25:e2:33:9a:55:04:
01:ac:57:ba:d4:79:d4:41:8c:82:6a:c9:1f:cf:57:ed:dd:0d:
0e:1e:ab:59:65:92:df:4b:75:ee:8b:91:5c:f9:07:05:dd:6b:
22:20:80:5b:ee:c5:96:03:29:54:f2:b8:24:51:df:0d:e0:55:
01:b6:2f:61:3c:7c:34:fc:43:d3:56:c6:15:5c:42:e7:3f:a9:
5f:72:5c:19:f3:a6:cf:22:5c:e6:ad:37:d1:d9:8a:04:46:de:
88:88:f7:18:df:bf:12:e6:ee:ba:66:18:02:a2:13:a6:55:50:
4a:50:74:d5:69:39:82:52:68:2d:a7:50:1f:74:37:8d:80:95:
38:4f:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:18 2025 by rpki-client