Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json)
Hash identifier: w3547KQeJi+5s4dlUVycCyvOIQlN5cWaewKe7/gVomI=
Subject key identifier: 1E:8F:1C:F2:BA:02:C9:4B:20:BA:7B:AB:39:15:51:A5:18:56:38:A9
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
Manifest number: A4
Signing time: Fri 31 Jan 2025 05:23:01 +0000
Manifest this update: Fri 31 Jan 2025 05:23:00 +0000
Manifest next update: Fri 07 Feb 2025 05:23:00 +0000
Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: O4Yq8xvaaxugW5N1XScQXrKHtL/OhPayQlOb2dr9r24=)
2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=)
3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Validity
Not Before: Jan 31 05:23:00 2025 GMT
Not After : Feb 7 05:23:00 2025 GMT
Subject: CN=679c5e35-ca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:02:4a:b5:09:dc:13:93:fe:dc:61:00:f9:
73:ee:c7:e5:26:3a:61:77:09:bd:e2:c0:84:da:03:
da:3e:2f:43:64:9f:a2:00:19:42:a5:2d:4c:4e:70:
82:84:89:5e:74:e5:7d:98:d7:41:89:6f:28:ee:5b:
07:1d:72:5d:bb:2d:4e:6a:2d:9f:d1:4d:38:79:99:
d5:78:13:92:93:06:2e:c6:5c:ff:0f:3e:02:d5:96:
aa:fe:86:c5:7a:e3:0a:51:7e:0f:76:89:29:7d:fd:
0a:b1:64:06:c1:5a:27:71:14:d2:3e:f6:08:1e:7d:
86:e1:cb:6d:78:fc:2c:a8:a7:6e:7e:d6:34:03:f3:
04:30:76:d9:76:22:43:2a:18:9d:35:e8:a3:69:06:
1d:8d:50:44:19:1d:7a:5d:41:17:f3:d0:75:dd:78:
13:91:8f:5c:a6:5d:7c:86:04:b6:f7:f5:c0:49:4d:
90:05:bf:4c:a6:23:ef:d4:24:44:1b:ef:e0:69:ef:
87:a2:b6:14:54:0c:60:e2:e4:4b:c5:d9:31:4b:9c:
6b:4b:83:95:96:00:b5:d5:2e:f9:e8:d4:ac:85:07:
7e:67:0d:fb:2d:28:e4:c3:2e:b8:cc:85:71:80:1c:
f3:c9:ea:8e:d9:eb:46:03:5d:8b:8e:b9:5c:97:ee:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:1C:F2:BA:02:C9:4B:20:BA:7B:AB:39:15:51:A5:18:56:38:A9
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:19:1e:51:d9:e1:f3:b9:1d:66:71:e3:36:76:73:d3:e1:
c6:2e:32:80:fe:8b:a0:28:bb:22:78:02:a5:6f:0f:33:6a:af:
9d:c8:97:c2:32:ef:a5:f9:e4:97:c0:c3:2a:ef:ee:d3:eb:ad:
ce:4d:37:94:4d:f6:2e:0e:8f:4a:eb:3b:9d:17:30:e9:72:43:
3f:d4:ba:58:f7:05:2d:08:64:b6:8c:36:88:4a:8b:bb:e0:3b:
a4:22:03:35:c7:04:ca:3b:fe:69:ad:f0:74:04:16:47:ef:c7:
f0:1c:ca:f8:8d:45:14:80:0b:19:3d:25:e3:4b:5f:5e:ca:d0:
cf:5c:68:f7:3d:58:11:d1:1e:4b:94:08:84:8f:e7:72:e9:ef:
b6:3e:1a:83:71:8d:88:dd:60:e2:61:94:56:6a:74:1c:92:c3:
5b:ef:de:d3:2f:54:98:e6:f1:57:6a:1a:ea:c9:77:55:b2:6b:
b4:15:80:18:7a:23:6a:88:fe:46:14:b7:11:5e:c8:95:04:55:
ec:24:3b:db:87:1a:16:4c:f3:e5:64:82:38:d8:b1:31:8d:28:
5f:1d:ab:a4:01:b7:6c:f1:87:f9:59:6c:6f:c7:c7:00:f1:33:
48:16:bf:09:0a:24:43:f4:ec:36:42:38:63:8a:9f:20:02:06:
78:30:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:02:13 2025 by rpki-client