Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
File: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json)
Hash identifier: sLMXus4dRl8HqDoIXF93WI3n1eGbic5JaR8jFrhNMIg=
Subject key identifier: 69:76:B7:81:59:66:07:3B:0C:D9:1E:FD:15:8C:50:11:22:96:8A:A9
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
Manifest number: 0476
Signing time: Fri 31 Jan 2025 00:11:32 +0000
Manifest this update: Fri 31 Jan 2025 00:11:31 +0000
Manifest next update: Fri 07 Feb 2025 00:11:31 +0000
Files and hashes: 1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: X3pJuyr9NGXUHjN3yB16cTokPZxU4HhhT0GjA4j5elQ=)
2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Jan 31 00:11:31 2025 GMT
Not After : Feb 7 00:11:31 2025 GMT
Subject: CN=679c1534-5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:d6:76:c6:e0:65:21:b3:e0:cb:13:22:7b:
b9:05:f2:66:fd:00:7a:7f:f1:86:21:f4:ac:2d:54:
b8:4f:15:b1:ee:6f:ce:ca:8e:b9:b0:07:48:8c:21:
a9:03:d2:12:10:12:af:34:69:3d:d5:7d:a4:6a:35:
e7:d3:4d:5a:95:98:db:c6:76:9f:a0:07:a1:2f:b3:
74:e8:44:51:81:64:df:28:87:75:4e:82:72:91:31:
43:56:7a:39:92:87:7c:0b:ca:05:1c:81:de:cc:28:
e5:50:80:9b:f5:b0:1a:fc:7c:91:5f:a0:02:1e:01:
cb:b1:04:8f:9c:fe:7f:bc:9b:55:a5:12:b4:1b:6b:
8f:ec:23:f2:f4:ab:c0:1b:41:f3:15:c6:a5:c9:c1:
a9:88:f9:c2:41:d6:04:9b:6b:31:90:11:f2:03:87:
ad:5c:19:92:87:1b:b9:42:47:9c:77:49:45:08:69:
ec:b1:5a:3c:24:83:56:d4:77:f9:53:fe:4c:e3:b3:
a2:0b:40:13:48:85:f5:86:10:33:58:26:92:e4:cf:
53:82:91:af:f1:47:7e:8e:6e:26:5f:68:86:99:22:
af:7b:3a:da:1c:9f:14:1c:7e:3d:55:ce:ed:43:34:
be:95:b0:d9:01:e3:ba:14:16:59:e7:de:5f:c1:26:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:B7:81:59:66:07:3B:0C:D9:1E:FD:15:8C:50:11:22:96:8A:A9
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:60:c3:b7:fb:95:51:4f:31:a9:1d:11:f6:69:a6:80:a2:0a:
a2:98:23:6a:db:18:8c:d8:bc:a4:07:cd:15:3c:93:2c:68:67:
4b:c1:61:e1:34:47:67:55:f7:77:42:ee:d9:9d:79:d1:55:7f:
a7:3d:0b:95:25:2d:87:ab:1e:f2:f6:11:4d:df:56:8c:a2:de:
97:69:bd:af:a3:eb:64:ab:fd:d9:1d:69:2d:a3:a2:82:2a:0c:
88:5a:99:9a:7d:11:9e:59:a1:a6:89:03:ac:c8:53:47:52:a5:
95:4d:95:8e:ed:ad:80:e9:88:e2:35:7d:6f:04:7a:55:19:85:
40:d1:ab:1b:34:77:4f:6c:8e:18:8c:f3:94:89:e1:b4:d0:65:
80:81:78:b4:8c:83:f6:07:6c:17:6e:7d:00:cb:68:48:58:4f:
ee:f7:ec:47:ad:25:8b:e5:c0:af:c8:6c:de:f6:27:38:02:40:
57:b3:2b:2d:c5:09:18:63:bb:7c:3e:fd:62:2f:d9:eb:23:4a:
3f:23:56:25:ac:ae:6f:22:27:e4:f2:93:61:f1:f6:1f:e6:7a:
57:f4:d4:6a:fd:be:84:a9:be:75:5d:46:4b:f4:73:0b:09:cd:
90:ec:80:14:4c:21:c2:c7:4f:9e:56:97:f7:f8:79:35:0f:c1:
53:d5:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:36 2025 by rpki-client