Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier: o38wJlDq8fqVzH7oGj5n/Qo0pLKSOEfRkXF+lvzUJh0=
Subject key identifier: 0A:72:65:71:20:5F:AA:A3:BC:3C:45:8F:E9:11:76:7D:90:33:4A:3C
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number: 0243
Signing time: Fri 31 Jan 2025 01:57:14 +0000
Manifest this update: Fri 31 Jan 2025 01:57:13 +0000
Manifest next update: Fri 07 Feb 2025 01:57:13 +0000
Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: iVZQMt3zhTmq+4HFCZuE/WLI1DDOxvKG6Pb1TOHk7Rw=)
2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Validity
Not Before: Jan 31 01:57:13 2025 GMT
Not After : Feb 7 01:57:13 2025 GMT
Subject: CN=679c2dfa-1003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:04:6b:e8:5b:ef:07:aa:d3:e5:3d:0f:1c:
f5:09:82:05:a8:ef:20:51:65:78:4b:e8:10:4e:1e:
99:3c:90:73:c5:11:c8:85:8b:b2:af:31:71:dc:b4:
04:c0:1d:3b:47:f2:61:be:3c:6b:16:a2:82:eb:1f:
da:bd:47:f4:80:67:bc:7c:60:cd:a0:6d:91:b4:11:
7a:73:64:6b:4a:33:65:dd:53:69:28:f1:70:df:17:
79:17:84:cd:09:6f:8a:14:c1:e9:58:6f:9c:a2:b8:
94:c2:78:10:de:d6:5b:76:d4:c3:32:24:88:36:db:
98:68:f7:cb:a2:c3:58:7f:3b:b2:d3:41:5a:4f:f0:
6c:ba:78:af:4a:2a:44:9f:fb:3e:49:06:17:08:eb:
e4:a6:41:d5:1e:37:22:04:2c:3e:f8:9a:e2:b6:c1:
83:f6:d4:4d:70:a0:4c:fe:e1:e8:51:01:54:ac:65:
4c:10:30:2f:a5:53:8e:6a:2a:e8:4e:7e:0c:6a:a9:
8b:e9:59:10:73:20:ba:61:c3:49:91:9f:93:41:33:
3b:cd:99:d8:25:2c:c4:8e:ee:91:ce:8f:68:37:5e:
0d:f3:65:52:9c:dc:31:98:1b:c4:91:96:ef:44:bd:
27:05:25:56:ae:f8:4f:21:4d:24:91:1e:0c:a2:ff:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:65:71:20:5F:AA:A3:BC:3C:45:8F:E9:11:76:7D:90:33:4A:3C
X509v3 Authority Key Identifier:
keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:ff:49:df:6d:ae:fd:85:f1:66:67:05:68:ce:cf:cc:88:
56:aa:51:61:d7:2d:c5:71:10:f0:e2:3d:0c:7e:45:46:c4:48:
41:c3:61:43:ec:6c:64:d2:b1:c5:17:9c:95:dd:23:c0:7b:4e:
9c:e6:b4:d3:fc:2d:71:54:19:29:84:c5:c2:2a:48:81:f2:f3:
5f:33:a7:cb:6b:f3:27:d0:da:6b:ed:2a:d8:43:cd:a9:67:d8:
eb:1d:50:9f:99:f8:50:65:8f:c8:48:48:fc:c9:d7:a4:04:5f:
ae:9d:eb:f4:66:4e:8d:ea:e9:04:55:c5:40:db:8b:08:76:16:
24:e2:62:c2:29:95:b4:07:c0:dc:0d:52:6d:ad:44:07:e7:01:
18:cc:6f:ed:26:2f:61:52:f2:06:4a:d0:f5:98:81:7d:68:7b:
78:03:27:07:b5:24:da:6c:92:d8:0e:66:b6:ed:1e:aa:25:f8:
17:d0:95:77:b3:ea:6a:5d:76:c7:3b:9f:c1:34:1c:c5:10:f5:
78:65:5c:dc:82:90:49:9e:21:54:ab:6f:ea:26:f4:2d:e9:be:
44:e3:11:c2:e1:3d:ab:0b:e8:bc:fc:a0:6f:9b:80:c2:f7:b3:
fd:9b:04:b0:c8:7b:34:46:d1:51:b4:06:6f:04:37:eb:89:5b:
64:aa:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:37 2025 by rpki-client