Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft
File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json)
Hash identifier: N4/OGYkxFAWlNbvc9/LL3BYjeckFbQ+Cjpo4/2NgWjI=
Subject key identifier: CE:8A:CD:B7:3E:42:2A:A4:63:7A:1C:E1:1C:4F:8A:AF:66:81:FD:AB
Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18
Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft
Manifest number: 0242
Signing time: Fri 31 Jan 2025 01:56:37 +0000
Manifest this update: Fri 31 Jan 2025 01:56:36 +0000
Manifest next update: Fri 07 Feb 2025 01:56:36 +0000
Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: QGw2oA7tyfebRlnDmDAM4EJZVxEUcUu49jYi+qIWXn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118
Validity
Not Before: Jan 31 01:56:36 2025 GMT
Not After : Feb 7 01:56:36 2025 GMT
Subject: CN=679c2dd4-718b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:e2:e1:40:a0:65:5e:49:f4:ac:f1:ae:a8:
21:e2:3c:d6:d1:97:b0:d7:9b:7c:fe:ff:95:db:97:
89:a6:d4:f0:51:20:a4:fb:f0:d1:71:ce:d1:8c:1f:
6f:2e:b8:54:a1:9a:4d:2e:ef:db:27:ba:2e:c6:03:
1d:1f:03:60:e5:33:73:51:f0:b5:25:41:dc:2e:68:
34:5a:2d:43:08:70:ee:54:c1:b5:00:e5:48:c4:f2:
73:3b:d4:49:02:97:16:d8:f6:6a:ed:b7:cf:56:a1:
da:37:26:79:80:04:f9:3c:cd:02:ee:33:21:40:75:
75:48:32:ae:83:a4:eb:73:72:34:32:d8:74:59:71:
0d:de:5c:94:c1:aa:08:8a:29:2b:35:6c:45:ba:1d:
4c:7f:18:73:6e:8e:14:50:73:a5:93:74:9f:2e:fa:
10:9f:59:59:d0:a6:21:bc:95:40:c1:de:43:c0:58:
a3:98:ce:ee:b3:93:f5:1f:bd:8f:22:3d:ff:57:91:
43:05:74:11:22:ec:41:4e:b7:e4:64:88:bc:8d:d7:
c0:9f:28:59:71:14:20:e7:45:66:ce:88:8e:f1:44:
42:82:83:cc:b2:6a:3f:ad:36:9f:49:32:92:fd:6a:
08:8c:bc:6a:37:87:0d:66:e0:18:65:2a:42:d5:27:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:CD:B7:3E:42:2A:A4:63:7A:1C:E1:1C:4F:8A:AF:66:81:FD:AB
X509v3 Authority Key Identifier:
keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:c5:78:ed:11:c6:1b:f9:97:82:af:a3:03:13:29:90:6f:
42:2b:e0:fd:c3:d8:8c:b0:49:93:7a:86:6b:97:30:7a:b0:0d:
67:65:31:d6:82:20:dc:a8:68:6f:18:c8:82:f7:22:57:be:12:
02:af:b5:68:85:a9:86:81:94:6e:55:81:33:a5:85:25:69:70:
57:85:34:ab:17:97:e3:b0:1c:31:ae:01:a8:67:53:d0:29:62:
e9:da:e5:e3:14:0f:86:cb:f8:24:82:ff:4a:01:57:7f:30:56:
ab:10:40:e6:ab:8a:71:36:fb:6e:72:dd:e9:1c:a8:9f:3a:ae:
39:9d:f6:ce:32:ff:dd:73:3c:46:7f:47:67:2b:93:f2:c4:b5:
2c:4c:d5:f7:c7:99:05:8c:d5:5f:45:dd:88:04:54:d5:2c:dc:
fb:b8:d4:2a:34:46:67:cc:b9:b6:e2:bb:43:52:37:b9:96:af:
21:ad:9f:0b:5c:48:39:66:e2:d2:d4:8b:71:33:92:07:9c:8e:
c8:a4:71:ce:4f:86:7e:51:f0:4d:66:03:bf:c1:3a:03:b1:56:
e0:19:8f:40:f6:95:96:d4:a5:2c:9b:a2:7d:5b:68:0a:ee:42:
79:29:32:15:9c:d4:40:2c:47:e9:05:2c:75:23:a9:f5:33:d8:
f0:86:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:58 2025 by rpki-client