Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json)
Hash identifier: QkPl186XCZQsgsq0rMBMKRLdbFhxa9n6qYXc0JwaG+8=
Subject key identifier: 87:3F:C9:F8:00:37:F9:53:79:FB:68:73:35:F8:F6:6A:E6:13:97:2A
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 07CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
Manifest number: 11C9
Signing time: Thu 30 Jan 2025 19:56:06 +0000
Manifest this update: Thu 30 Jan 2025 19:56:06 +0000
Manifest next update: Thu 06 Feb 2025 19:56:06 +0000
Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: 0PGIzHU3e51VN1Gs7+fSRZoefSCEb/xJ+iGiSsYA8pA=)
2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: m9vtjIJIq2t72L0Goc5PW0dIrS3vnSSj4P2xta8ZeoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: Jan 30 19:56:06 2025 GMT
Not After : Feb 6 19:56:06 2025 GMT
Subject: CN=679bd956-03a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:a0:37:2b:67:5b:c4:a1:bd:3b:fd:7e:ee:
78:6f:32:87:18:da:95:98:aa:a4:bf:f6:d3:5a:68:
87:d0:1d:3a:c5:f5:ce:3b:8f:24:5e:6a:cd:53:91:
e1:cd:da:9f:26:65:bb:a9:4e:b0:a4:6c:0d:c9:45:
34:9c:b0:4c:53:d6:21:b3:68:65:32:01:4f:9e:cc:
b9:5c:91:c1:a5:04:3c:f0:37:de:a4:a2:d7:86:bc:
f5:d6:16:a8:f8:ad:51:e7:42:9d:7d:2c:3f:13:3d:
cb:7a:f4:d8:0e:71:62:0f:9a:31:08:f4:9f:fd:4d:
dc:dc:e8:35:fc:b0:24:7f:dc:b7:32:e9:3f:cf:d8:
13:10:a0:38:1f:7e:af:d2:82:42:8b:2e:62:8e:b1:
9c:58:f9:02:a7:b5:3e:52:e6:01:f8:b9:5d:0c:2b:
30:42:e8:b6:3d:80:dc:fa:37:9d:70:79:80:ad:5f:
71:41:85:ab:4a:5f:cc:08:2a:81:d6:ce:5a:7b:2b:
3b:73:74:4d:ee:14:00:56:36:31:3f:40:3f:94:f7:
e5:07:c6:13:c8:f2:59:7a:bd:65:13:31:7b:56:ac:
ff:fc:f5:2a:da:b3:c7:98:aa:0e:3f:f1:3e:fc:a3:
c1:9d:5e:03:dc:99:8c:13:52:7e:ff:89:52:b9:ce:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:C9:F8:00:37:F9:53:79:FB:68:73:35:F8:F6:6A:E6:13:97:2A
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:bb:fe:26:46:a1:04:4d:5f:e8:de:99:41:99:82:98:5b:
37:5e:91:97:a6:ac:f6:2a:79:5b:fe:ef:c6:75:18:ff:b6:a9:
83:ed:38:dc:26:9d:7f:6a:44:7f:d9:14:13:15:ce:84:96:e2:
f5:d3:82:62:82:3b:58:1e:6d:37:6b:59:87:cf:7e:fb:3c:bc:
a4:1a:86:c7:87:79:cc:a1:00:2c:3c:37:e8:9a:f0:3c:5b:f3:
49:8e:94:c2:52:4d:32:82:1b:5f:4b:49:e7:d7:28:a1:91:c5:
21:ed:51:f1:48:13:b7:f5:51:0f:b2:ce:a6:de:85:fe:69:a5:
e4:a3:06:d1:05:76:d7:54:b9:57:b9:ed:24:8b:74:39:60:79:
67:b6:11:97:60:3d:41:c4:61:e9:20:dd:f1:9b:74:38:c9:94:
be:8a:b1:3f:3b:97:07:cd:07:06:18:08:a7:97:b0:fa:ea:a8:
7c:cc:7d:df:70:d6:f3:0d:e6:ea:d3:56:d4:aa:26:ba:00:e0:
b9:bc:67:6a:a6:93:51:79:f0:7e:4e:93:1e:38:b5:2e:35:82:
11:e6:5a:1d:fc:be:d5:fc:56:8f:4c:c0:b1:06:de:1d:2d:10:
e3:d4:1b:9c:60:15:e6:77:69:9a:81:d2:e7:66:d3:0a:21:f6:
e2:3e:bc:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw
MzQ5NUI4QjMwHhcNMjUwMTMwMTk1NjA2WhcNMjUwMjA2MTk1NjA2WjAYMRYwFAYD
VQQDEw02NzliZDk1Ni0wM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqB6gNytnW8ShvTv9fu54bzKHGNqVmKqkv/bTWmiH0B06xfXOO48kXmrNU5Hh
zdqfJmW7qU6wpGwNyUU0nLBMU9Yhs2hlMgFPnsy5XJHBpQQ88DfepKLXhrz11hao
+K1R50KdfSw/Ez3LevTYDnFiD5oxCPSf/U3c3Og1/LAkf9y3Muk/z9gTEKA4H36v
0oJCiy5ijrGcWPkCp7U+UuYB+LldDCswQui2PYDc+jedcHmArV9xQYWrSl/MCCqB
1s5aeys7c3RN7hQAVjYxP0A/lPflB8YTyPJZer1lEzF7Vqz//PUq2rPHmKoOP/E+
/KPBnV4D3JmME1J+/4lSuc6f1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIc/yfgA
N/lTeftoczX49mrmE5cqMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3
OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0
T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGG7v+JkahBE1f6N6ZQZmCmFs3XpGXpqz2Knlb/u/GdRj/tqmD7Tjc
Jp1/akR/2RQTFc6EluL104JigjtYHm03a1mHz377PLykGobHh3nMoQAsPDfomvA8
W/NJjpTCUk0yghtfS0nn1yihkcUh7VHxSBO39VEPss6m3oX+aaXkowbRBXbXVLlX
ue0ki3Q5YHlnthGXYD1BxGHpIN3xm3Q4yZS+irE/O5cHzQcGGAinl7D66qh8zH3f
cNbzDebq01bUqia6AOC5vGdqppNRefB+TpMeOLUuNYIR5lod/L7V/FaPTMCxBt4d
LRDj1BucYBXmd2magdLnZtMKIfbiPryk
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:54 2025 by rpki-client