Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier: BZJMrZW40N7AXvcjYaW5uNARjViTRMtuqb5opJlqkcM=
Subject key identifier: B2:D8:68:D4:F6:24:A3:BA:1E:5C:3A:1F:82:67:8A:0D:5B:CF:67:C9
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number: 01BF
Signing time: Fri 31 Jan 2025 02:21:26 +0000
Manifest this update: Fri 31 Jan 2025 02:21:26 +0000
Manifest next update: Fri 07 Feb 2025 02:21:26 +0000
Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: MV63VaO+GYjxHjy6w1S/lz6JnleXXzIE5PVQAlXFHdk=)
2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: Q+xBXhtidbH61CzoWLEFSg+uEFF8i0uaB/q+T0AhmlA=)
3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: i/k+PMmPjEOn62f4++TqWacooyVJfp9CI/snYpM2THY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Jan 31 02:21:26 2025 GMT
Not After : Feb 7 02:21:26 2025 GMT
Subject: CN=679c33a6-16b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:c8:56:38:db:6c:01:cd:3d:32:e9:d0:42:
03:f3:fc:ca:72:27:2a:61:57:1c:60:66:71:8f:da:
59:5d:51:1d:54:16:ee:39:b0:17:27:f7:e0:f2:c2:
25:bb:10:99:92:1e:a8:32:df:34:c3:43:ed:6d:43:
ee:7e:a9:69:71:68:a2:5a:3b:4c:7a:1a:b2:16:bd:
e1:cf:da:13:08:cc:53:73:b7:11:fd:c7:b2:7c:73:
dc:25:5f:54:ee:cf:08:2a:90:60:54:de:db:d1:41:
70:a1:93:1d:a0:c4:48:2c:5b:5a:a5:35:ac:01:58:
b0:41:e5:7f:b8:16:1c:2b:87:e3:dc:f4:27:30:d1:
f8:d1:0b:7e:7c:7f:60:d9:d2:74:5a:02:64:7d:cd:
9f:af:75:61:6e:cb:8f:1e:c5:1e:d1:90:c7:b6:9d:
e1:fe:3b:e1:06:d5:80:02:eb:68:72:c7:a5:7e:e9:
f6:8d:f2:d9:22:2f:fe:13:4f:2b:d6:a4:e9:d1:ab:
8e:8a:ab:2a:31:5a:e4:e7:d2:4b:d2:41:81:10:a1:
cd:0e:47:68:c7:7f:fe:6b:9d:4e:af:c6:71:f1:cf:
b8:41:d1:01:98:98:a9:b7:69:e1:d0:51:a4:68:ed:
b3:96:95:89:28:3a:ae:dc:0d:28:d6:67:59:59:36:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:68:D4:F6:24:A3:BA:1E:5C:3A:1F:82:67:8A:0D:5B:CF:67:C9
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8f:c9:43:75:2f:0e:10:23:72:0e:be:9f:7e:39:7c:7f:d2:
13:ed:a1:36:a1:12:bb:91:08:21:c9:39:d3:00:f0:a2:8b:6c:
61:90:26:20:03:62:94:af:1a:f9:ed:01:b7:c3:c7:5f:82:03:
36:fa:4b:0e:76:38:b6:b4:06:ef:62:b7:77:e7:87:81:cf:4d:
1d:a8:d1:27:37:aa:32:53:66:85:3c:85:3f:e2:a2:71:c7:a9:
89:14:f2:b8:7c:47:30:ca:32:6a:0f:f2:53:f2:a1:74:37:5b:
ad:e5:34:a4:63:ab:18:e1:cc:3d:0c:89:91:39:a9:62:f3:57:
5e:a7:07:9c:67:2e:8c:2b:75:de:5d:79:02:d2:a3:89:1a:a8:
e6:2c:5c:88:67:ca:74:eb:b0:1d:cd:f9:f8:98:c9:66:fc:66:
8b:94:b7:29:35:38:42:91:c6:67:10:ae:07:3b:4d:e9:ed:93:
02:87:03:ae:05:10:ee:02:94:48:c3:92:39:4d:02:8a:82:17:
cd:07:eb:14:27:d4:84:07:e1:ad:6d:9b:86:13:93:37:a6:04:
42:77:8a:69:89:f2:3b:62:8c:c0:2c:e5:6a:06:04:ff:88:46:
c4:dd:d8:ba:07:e2:08:bc:34:2f:0a:ec:b5:eb:67:50:3f:c6:
8a:cc:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:15 2025 by rpki-client