Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
File: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json)
Hash identifier: +RsGLDKNoJSf2JVC6Jd0D+aSlKC8+CisbkZyH+ILmno=
Subject key identifier: 3D:80:93:EA:31:E6:50:9F:73:D1:9F:32:6F:43:36:C9:74:E2:AB:43
Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F
Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
Manifest number: 02E2
Signing time: Fri 31 Jan 2025 01:26:21 +0000
Manifest this update: Fri 31 Jan 2025 01:26:21 +0000
Manifest next update: Fri 07 Feb 2025 01:26:21 +0000
Files and hashes: 1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: fLNLiMxlNovIhncSBBcpYWpW7IB80diRsOdNraZ/2Zg=)
2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: YtkawvfO7yeuU6y5W4AKOD+xrJidxM5yq8UxdQskunc=)
3: 0E3C1B3E7F9B11EFB3A18650C4F9AE02.roa (hash: NTWtz3XRI466vgMgJNYPHPV7KaEaKes8YjQ4ENseuEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F
Validity
Not Before: Jan 31 01:26:21 2025 GMT
Not After : Feb 7 01:26:21 2025 GMT
Subject: CN=679c26bd-bb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:0c:8a:2f:52:dd:1a:c8:33:3b:c2:b4:3f:
fb:db:36:73:e7:34:73:31:36:09:ce:c8:d3:5e:85:
be:d9:c1:94:43:12:18:93:cb:ff:c0:15:49:bf:26:
35:45:66:86:76:38:48:b4:a3:22:a3:dd:b5:13:fc:
e2:8b:2e:bf:0b:c8:3b:95:6e:d6:e8:b3:29:a0:53:
4b:cd:02:c1:5a:e6:a2:7a:72:d3:77:4c:c8:bb:44:
e6:d2:d9:f0:5c:3f:9b:de:26:06:7b:21:d5:01:bd:
cf:62:50:0f:b8:9c:d4:bd:1c:9b:c1:43:38:0b:47:
ed:76:ac:ac:41:b2:8e:37:53:5c:80:7d:40:a3:c3:
18:17:8a:4d:c5:c5:ef:8b:b1:62:e4:67:14:50:1b:
63:42:65:41:cf:34:29:7b:e7:a3:cf:d6:41:42:6d:
92:b5:f4:bd:68:6d:f7:4e:67:13:65:7e:17:3d:24:
74:98:ac:25:b6:cf:aa:b3:04:02:64:e1:b9:34:80:
55:e5:d4:33:09:6c:6e:d6:b8:73:fc:19:99:b5:63:
cf:eb:da:10:3e:e7:1d:a9:c8:2f:e8:96:0e:1c:b5:
5d:ad:cd:7b:da:61:5f:b1:c7:b8:3d:4d:c1:1e:34:
92:1c:a4:0b:54:94:b0:ee:98:eb:b6:e8:79:16:a4:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:93:EA:31:E6:50:9F:73:D1:9F:32:6F:43:36:C9:74:E2:AB:43
X509v3 Authority Key Identifier:
keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5b:ab:a9:d7:eb:c5:a8:3f:42:3f:c3:21:bb:94:89:95:a3:
84:76:75:c3:38:98:80:84:3b:04:1a:93:9b:7b:57:fa:11:14:
c4:8b:e8:6c:aa:43:e2:12:93:f5:92:a1:63:16:0c:53:2f:88:
13:d1:cb:79:78:ab:f2:a3:50:f9:2b:fc:b4:19:cf:38:bb:1f:
36:7c:79:72:58:09:e1:cc:02:39:d0:a4:8e:d6:fa:d7:61:f5:
2b:b7:cd:f3:a3:d8:19:72:f5:08:38:37:a2:40:a9:23:50:b9:
52:d6:07:af:3e:b7:cd:8b:0f:70:a6:63:97:68:50:01:bb:49:
4c:f7:c6:41:4a:e8:c7:ea:18:1c:02:67:3f:e7:1b:5c:3f:d9:
80:28:5d:6a:67:0b:eb:b6:6d:bd:1c:65:2b:dc:d6:98:79:9d:
3e:ca:f1:8c:3a:48:32:bb:c6:fe:20:0a:34:aa:07:27:9a:1a:
21:d0:02:aa:27:28:a9:da:a9:62:eb:cf:85:ba:43:ef:6c:b9:
da:03:b4:82:b5:4c:b8:63:6a:bc:04:e3:79:2f:fd:fe:e6:3e:
98:4a:32:a1:e2:ff:c0:ef:0c:84:37:80:f9:b4:49:e9:30:ce:
33:e2:59:b0:31:9a:65:ca:7c:b9:fd:6c:b0:5c:0a:aa:75:2e:
7f:4c:bb:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy
NzM2MjM1OUYwHhcNMjUwMTMxMDEyNjIxWhcNMjUwMjA3MDEyNjIxWjAYMRYwFAYD
VQQDEw02NzljMjZiZC1iYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIkMii9S3RrIMzvCtD/72zZz5zRzMTYJzsjTXoW+2cGUQxIYk8v/wBVJvyY1
RWaGdjhItKMio921E/ziiy6/C8g7lW7W6LMpoFNLzQLBWuaienLTd0zIu0Tm0tnw
XD+b3iYGeyHVAb3PYlAPuJzUvRybwUM4C0ftdqysQbKON1NcgH1Ao8MYF4pNxcXv
i7Fi5GcUUBtjQmVBzzQpe+ejz9ZBQm2StfS9aG33TmcTZX4XPSR0mKwlts+qswQC
ZOG5NIBV5dQzCWxu1rhz/BmZtWPP69oQPucdqcgv6JYOHLVdrc172mFfsce4PU3B
HjSSHKQLVJSw7pjrtuh5FqQtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2Ak+ox
5lCfc9GfMm9DNsl04qtDMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE
MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l
Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmW6up1+vFqD9CP8Mhu5SJlaOEdnXDOJiAhDsEGpObe1f6ERTEi+hs
qkPiEpP1kqFjFgxTL4gT0ct5eKvyo1D5K/y0Gc84ux82fHlyWAnhzAI50KSO1vrX
YfUrt83zo9gZcvUIODeiQKkjULlS1gevPrfNiw9wpmOXaFABu0lM98ZBSujH6hgc
Amc/5xtcP9mAKF1qZwvrtm29HGUr3NaYeZ0+yvGMOkgyu8b+IAo0qgcnmhoh0AKq
Jyip2qli68+FukPvbLnaA7SCtUy4Y2q8BON5L/3+5j6YSjKh4v/A7wyEN4D5tEnp
MM4z4lmwMZplyny5/WywXAqqdS5/TLto
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:33 2025 by rpki-client