Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier: EWPm6oqZKTrNTt6ipR/M6GGQflpAAxPL28jiKGqD2xc=
Subject key identifier: 55:58:A5:BE:42:ED:3F:6C:FA:DD:3A:47:C8:40:12:83:04:B7:40:F2
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number: 65
Signing time: Fri 31 Jan 2025 06:01:18 +0000
Manifest this update: Fri 31 Jan 2025 06:01:18 +0000
Manifest next update: Fri 07 Feb 2025 06:01:17 +0000
Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: NxCNiLrYw+qZLe9wtvKeitQUyFtHz40AilrgEKETC2M=)
2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Validity
Not Before: Jan 31 06:01:18 2025 GMT
Not After : Feb 7 06:01:17 2025 GMT
Subject: CN=679c672e-7bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:96:f8:c1:de:3c:5f:a6:80:9e:45:81:3c:
04:8e:21:9d:70:ac:72:af:c4:4f:8a:e2:10:90:e4:
4f:30:17:a8:70:1a:28:c2:56:dd:d8:33:7c:ea:e8:
7d:31:3d:89:a2:09:d2:5b:ac:d6:8a:2a:53:ff:94:
47:c6:5a:4f:6d:46:75:43:9e:1e:c6:2a:d3:3f:a7:
ed:f0:15:61:bb:c2:4f:9d:50:e7:43:38:ab:f3:68:
e2:91:ed:b6:15:d7:69:52:a8:f9:6f:9f:c0:ba:29:
ec:1f:21:92:15:e6:a0:c4:e6:86:14:99:a7:8f:4d:
84:0c:3c:5d:59:d3:1f:03:9d:f3:d0:42:c7:a6:7b:
eb:b4:52:62:ef:db:59:f2:ce:1b:9e:9b:b4:62:44:
8c:a4:13:c7:74:a9:7d:eb:50:d6:8d:07:05:a7:57:
47:eb:0b:09:cb:58:ee:1e:22:19:36:93:69:6e:8d:
33:7d:e8:cd:50:e0:2f:d4:60:39:49:8e:ad:a1:d6:
4c:ce:56:fa:0b:00:c9:fd:29:49:f0:10:4b:d5:e3:
98:63:82:2b:27:87:58:b2:8d:3d:9b:d6:99:0b:02:
e5:34:b2:b0:75:89:85:f3:70:9a:7a:17:80:fe:38:
5a:fb:e7:b7:c0:94:ea:60:6f:94:eb:14:a6:bc:66:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:A5:BE:42:ED:3F:6C:FA:DD:3A:47:C8:40:12:83:04:B7:40:F2
X509v3 Authority Key Identifier:
keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:10:1c:33:d1:2c:78:be:4f:67:b4:49:eb:f1:d3:39:24:
6b:8c:71:36:38:21:5a:e3:c7:cc:a5:c8:f6:51:c6:b2:94:8c:
2d:68:08:b6:7a:56:e6:da:e1:eb:66:b6:b2:0f:1f:f6:a5:3b:
e9:30:d9:0a:8d:68:ce:c9:1d:27:2b:f6:e4:e7:2f:3b:e4:24:
8e:ad:84:3c:1f:32:30:ff:f4:be:09:b9:4e:45:ef:10:81:3a:
66:6c:4d:16:fc:ee:df:0d:e3:a3:41:13:d2:ca:3c:ec:1b:5e:
d3:12:c2:9b:d1:f0:ac:42:71:95:d2:2f:26:6e:92:ff:16:18:
84:57:3d:bf:dc:05:38:f1:ce:6f:4a:5c:df:ef:3e:16:06:27:
68:ce:98:95:38:c0:80:2a:21:0b:2f:3d:9e:dc:00:a6:02:35:
e8:25:b4:50:85:6d:5e:53:32:7a:8c:82:7d:bc:89:03:ef:2b:
c6:12:6b:35:4a:41:b8:94:e5:49:27:d0:fb:c8:5a:26:d9:57:
ad:1b:6a:8c:22:8c:f6:35:74:48:27:23:9e:3a:cf:a6:6f:71:
b4:22:1d:1d:d7:c3:aa:96:8b:ca:5c:95:96:fc:da:88:a9:29:
48:c3:a9:0d:ef:75:64:25:6b:59:cb:cd:9e:01:69:31:c1:10:
8c:47:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:18 2025 by rpki-client