Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json)
Hash identifier: 5Bv2hw+6z55+5il6A7jvU51OmmDwuflnUUQ1arm2uXU=
Subject key identifier: 6C:B9:44:DC:56:57:D5:46:62:4C:39:B8:69:B4:B6:29:EF:91:6D:99
Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
Manifest number: 031B
Signing time: Fri 31 Jan 2025 01:19:17 +0000
Manifest this update: Fri 31 Jan 2025 01:19:16 +0000
Manifest next update: Fri 07 Feb 2025 01:19:16 +0000
Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: Zu9pLY+t3U7IfgW56Ncah/JIH5jRHd+rTMsXR50XsRQ=)
2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: JR7LS1ouMF/pgWOplxOG9d3c0ZB+eqWjp+ug4VCz69I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Validity
Not Before: Jan 31 01:19:16 2025 GMT
Not After : Feb 7 01:19:16 2025 GMT
Subject: CN=679c2514-6ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:d4:57:4d:fd:4f:ed:3f:56:3a:b5:e0:2e:
66:a7:98:6a:8a:ff:c8:8d:d1:af:c1:a7:cb:fd:8f:
97:b0:a0:bb:f6:df:ed:6a:1e:18:af:b1:3b:f9:4f:
34:cc:83:cb:99:98:c4:8e:ef:ac:3e:ab:2b:21:e6:
47:e4:9a:8d:90:05:bd:3b:7b:a8:32:b2:4c:1f:91:
d0:4c:d3:99:05:af:ed:42:b7:34:f5:59:b5:28:9f:
73:af:60:bf:f7:57:eb:cf:9f:c9:51:9e:d0:ed:2b:
fd:31:b4:57:2c:b8:03:ac:3d:23:b0:93:eb:7a:59:
5d:e3:2f:5b:a2:49:7f:93:4a:ea:be:18:78:ae:b1:
70:a9:88:f1:7c:6f:51:ff:9f:da:f5:ed:8a:e5:22:
3c:18:90:fa:33:69:b9:41:73:4b:61:d8:24:93:4a:
80:e0:05:e9:dd:af:4f:8a:f9:d3:7e:3b:53:11:bf:
56:cc:c0:e7:f2:76:d8:08:22:8f:73:ca:bf:55:a0:
44:99:20:d3:40:ae:04:4d:56:db:e8:88:71:eb:04:
78:8d:36:4f:6e:86:c0:5d:3e:b7:bd:85:d1:ff:08:
09:02:41:12:50:26:d0:0e:1d:07:a9:26:21:9c:f5:
4c:75:0d:76:9c:4e:08:5b:3a:2f:bc:27:65:10:d7:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:44:DC:56:57:D5:46:62:4C:39:B8:69:B4:B6:29:EF:91:6D:99
X509v3 Authority Key Identifier:
keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:fe:46:fc:51:2c:2f:c0:70:e6:8c:9f:75:c1:25:0e:e2:
c0:8a:bc:d7:cd:30:f7:59:1c:61:67:71:1b:f7:e2:7d:62:71:
fe:53:94:89:26:19:fc:04:0e:74:90:82:35:9b:fc:c8:c2:ba:
8b:7f:cf:0d:87:cb:0c:e6:76:e1:75:5e:76:4d:0e:b6:40:d2:
5c:d3:93:5f:a4:03:1e:b4:e7:6f:df:60:07:91:3a:30:63:b2:
e8:9d:1e:30:6a:3b:52:cf:85:f6:58:0b:3d:f7:b3:85:af:88:
f4:5c:ce:43:4b:ac:ab:4e:e3:28:d7:ec:5c:24:47:d4:21:91:
3c:c5:00:76:3f:8b:b6:2c:40:60:8e:e3:93:63:6f:17:2d:81:
db:94:97:23:ab:ec:11:ba:b8:cb:74:19:15:fe:77:2f:40:aa:
ec:15:ec:8c:78:45:3e:59:a3:6d:26:d4:b3:32:7c:a2:97:b3:
a5:18:37:4a:4e:f5:15:2a:5f:0a:63:ec:60:90:1c:25:99:31:
c5:26:e0:67:03:8d:f6:4f:d4:22:57:22:d1:67:6d:07:99:21:
d4:43:01:20:b9:89:9c:5f:47:76:8b:e6:08:f2:27:5e:e0:05:
40:1b:d3:36:96:54:80:d8:98:e2:44:44:66:33:ca:ea:68:e2:
ef:a9:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:15 2025 by rpki-client