Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json)
Hash identifier: Nx0g14N7LKnAIRhtHFBB2sgweQh2VJsKStpPQIscWUw=
Subject key identifier: 31:B7:6B:DA:80:8E:CA:77:5F:D3:6C:73:FF:EB:2D:90:00:00:66:50
Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Certificate serial: 04FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
Manifest number: 04F8
Signing time: Thu 30 Jan 2025 23:42:32 +0000
Manifest this update: Thu 30 Jan 2025 23:42:31 +0000
Manifest next update: Thu 06 Feb 2025 23:42:31 +0000
Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: f2wbsTLTYtBJg06YrhiI7SQLsb73fG/Zfdr0tPrAIxA=)
2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376
Validity
Not Before: Jan 30 23:42:31 2025 GMT
Not After : Feb 6 23:42:31 2025 GMT
Subject: CN=679c0e68-d480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:b1:7a:54:d4:c0:23:9c:60:b2:d1:95:34:
f7:e3:c6:8c:8c:57:73:35:03:d4:1b:32:cf:f3:eb:
c6:3a:64:8d:e7:61:0c:67:f8:82:61:96:6f:e3:59:
a7:ff:c5:7c:e6:5d:bc:df:9d:21:ed:4d:38:61:da:
74:36:5f:f6:0f:3b:ee:00:e3:7d:21:56:18:6c:b2:
26:8e:a8:12:f8:d2:6d:59:61:e9:27:61:82:f1:31:
52:64:cf:d3:ba:fa:26:e3:6a:44:5f:cd:7a:92:76:
11:a6:e9:0d:47:6d:a3:92:58:ab:c4:79:ce:e8:e5:
e4:18:82:25:c0:59:9a:34:a1:1c:d3:89:33:0d:d4:
8b:75:43:7e:98:df:5c:84:60:c1:a2:76:3d:76:15:
3a:db:45:cd:43:fb:98:3f:11:55:5a:0a:8a:d5:3e:
af:79:07:89:b7:b3:1e:1d:3a:af:4c:8b:84:d6:b5:
45:6f:bc:7e:52:cf:36:42:96:37:b5:7b:2e:bf:21:
6d:d2:34:82:00:2b:1c:03:27:3a:d9:e8:5e:a0:59:
84:3a:a5:a2:3e:e2:74:10:e6:f7:b5:8b:3e:2a:07:
a8:f5:17:66:c9:f6:7d:37:5d:52:61:ac:ba:63:64:
2f:c2:ba:2c:f3:71:73:a7:70:a5:2c:d0:5c:47:de:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:6B:DA:80:8E:CA:77:5F:D3:6C:73:FF:EB:2D:90:00:00:66:50
X509v3 Authority Key Identifier:
keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:bb:09:4c:08:7a:6c:21:8a:d6:5b:aa:5f:98:bd:72:f5:
2d:41:51:b1:4c:d3:73:86:a6:a8:6d:ec:73:fd:c5:2c:69:e8:
37:07:32:13:4f:1f:60:bb:a2:78:93:6c:ac:48:57:58:03:89:
75:cf:6c:06:39:8e:5d:ef:7d:93:0b:91:75:ee:11:94:e0:71:
d1:b3:d1:eb:2d:6c:7e:f8:d3:ae:07:15:d1:55:eb:a7:7f:41:
1d:4c:a8:ff:e4:54:24:d0:9c:5b:59:2c:72:66:e2:1a:77:71:
36:cb:40:01:2c:6f:84:40:43:be:fb:ad:e4:ca:fa:7b:dd:c1:
04:ec:2f:e8:b3:c0:fb:5f:e6:24:3c:ad:7a:e9:c4:05:4e:2a:
b9:c1:86:82:56:bd:fa:3f:f1:f1:27:03:f4:12:5d:b3:b6:2b:
d7:32:a4:e0:cf:27:bc:5b:bf:43:ec:ea:e3:33:54:4a:f1:20:
80:a1:4b:45:4f:00:f1:0e:d7:16:b1:22:97:94:52:a1:89:87:
92:90:ac:10:e1:cf:ba:5b:0a:53:32:77:94:83:74:25:94:98:
b9:f4:66:7f:3a:eb:85:7b:06:b4:53:3f:64:40:9f:98:8c:bd:
7f:05:ce:15:98:44:71:0d:61:36:b0:05:f2:f9:8f:01:32:39:
46:75:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:17:41 2025 by rpki-client