Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json)
Hash identifier: hitXGravhqYlWBYUjKmqZQQ8x62Bfl3wZZd7l3ZxzRQ=
Subject key identifier: 15:8A:2B:1F:33:65:25:EA:5A:29:FE:0B:65:54:7B:E9:D6:B4:8C:BA
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial: 1A25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
Manifest number: 1A1C
Signing time: Fri 31 Jan 2025 16:22:46 +0000
Manifest this update: Fri 31 Jan 2025 16:22:45 +0000
Manifest next update: Fri 07 Feb 2025 16:22:45 +0000
Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: H5pEVNjL//g+K1FMhezjPvdQxpePj0wyZVrnZswlu/8=)
2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: bh3z16gZ2VSFsHisnqXivod3jWj16xVb8JpTHoh3XV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6693 (0x1a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Validity
Not Before: Jan 31 16:22:45 2025 GMT
Not After : Feb 7 16:22:45 2025 GMT
Subject: CN=679cf8d5-0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:61:77:06:b6:80:8f:ac:85:d7:79:ac:3c:
14:77:8f:63:7c:31:ab:ac:4d:fe:50:25:d9:28:0d:
d1:d7:a6:07:8d:b8:b1:38:e2:a9:00:26:d8:79:ab:
65:8b:2f:6d:47:68:58:1c:a8:62:0b:1c:03:dd:f2:
a5:2e:13:3e:eb:fa:d5:0a:2d:75:5a:65:c3:ae:2f:
e6:99:99:a5:1e:ec:98:f8:57:70:57:7c:35:b8:00:
7d:76:2f:d0:f8:c0:09:68:31:b1:d9:66:53:6d:2f:
fa:20:d8:48:a3:a7:5d:ff:aa:dc:36:84:c3:5b:03:
ea:44:82:45:45:8c:d0:db:31:a8:4d:e0:0f:0b:c5:
b4:67:43:2a:86:ac:00:23:e3:31:51:c4:fc:1a:25:
72:21:8e:1f:fb:b6:f9:e5:66:b0:1d:13:8f:50:4d:
e2:2a:d5:bb:8c:b2:f7:1b:b1:77:aa:5d:2b:69:da:
a0:c3:a8:15:4c:f3:fe:9f:75:e6:3e:2a:0c:a4:2b:
b6:f4:bf:11:a9:f3:b2:b7:9d:28:96:b1:f0:d8:2d:
57:55:46:56:0c:ef:5d:90:6c:f9:60:a6:b0:2d:7f:
5c:e7:17:c8:cd:b0:da:8c:14:e4:fb:08:4a:58:bb:
6d:de:4d:39:e6:87:33:b7:4e:02:d4:bd:03:50:a7:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:2B:1F:33:65:25:EA:5A:29:FE:0B:65:54:7B:E9:D6:B4:8C:BA
X509v3 Authority Key Identifier:
keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e8:36:1a:88:2a:70:46:86:2e:10:89:58:74:d7:41:4e:77:
0c:1d:3f:4b:6b:f7:86:1b:4c:4d:af:99:61:9f:be:21:d7:33:
32:82:83:f9:96:4c:3e:db:36:c0:62:6d:4c:80:0a:f1:31:5c:
83:cb:39:39:94:c8:b3:ef:d9:2a:26:d6:54:20:ff:fa:2a:28:
df:c1:9a:a8:de:8d:fa:d0:35:d4:7a:40:f5:5f:8d:f5:48:34:
3e:c5:f6:fc:57:9f:c5:92:3d:01:a8:6c:d5:a6:21:ce:ea:c6:
a7:0f:d5:de:7c:f6:09:bb:e0:06:94:eb:8c:1b:43:e8:11:67:
42:cc:a8:77:19:22:02:1f:8c:b3:4b:06:ff:19:ce:28:17:f8:
fb:15:38:3d:15:4a:60:88:14:c1:46:c8:ac:af:39:9f:58:9f:
6e:b9:b4:da:dd:23:9c:d1:a0:04:6c:6b:2a:3b:48:f6:7d:5a:
fb:8c:a1:3a:69:8f:28:a2:80:8b:b5:df:20:53:71:7c:e7:ad:
33:7e:14:6b:78:12:ca:25:22:b8:7f:68:3f:06:1f:fc:ed:3d:
dd:0b:3f:2f:60:c9:c4:85:c5:0d:87:b8:27:b2:fa:a1:c0:48:
8c:5f:1a:7c:f9:c1:c8:ac:2b:38:ce:2d:f4:a5:4f:3c:35:7f:
2b:d2:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:31 2025 by rpki-client