
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier: a0y79AebIDEX2rnGyJ79BsucR+6kRJ2pcWFX138/YgA=
Subject key identifier: 70:4B:FC:32:D2:BC:25:59:78:CA:4C:8F:51:63:7A:4D:02:BD:BF:6D
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 0666
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number: 064E
Signing time: Thu 30 Jan 2025 22:31:57 +0000
Manifest this update: Thu 30 Jan 2025 22:31:56 +0000
Manifest next update: Thu 06 Feb 2025 22:31:56 +0000
Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: 8Umb2jWbzYLB8896+LJ4ETbfHTQD+UpeN/hADFMzFVQ=)
2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Validity
Not Before: Jan 30 22:31:56 2025 GMT
Not After : Feb 6 22:31:56 2025 GMT
Subject: CN=679bfddc-d21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:7a:d7:7f:76:33:34:a1:31:81:51:e9:35:
dd:09:9b:80:83:d7:d5:30:89:02:11:94:5f:f1:f5:
8b:bc:30:68:af:86:70:aa:dc:f2:fe:a0:94:6d:78:
62:36:05:9e:3d:52:55:9a:36:74:34:ea:51:69:d3:
c2:ab:2f:87:2c:a5:66:e3:a4:ac:d2:d7:0a:6a:10:
da:75:3b:25:76:df:0a:a1:8c:0c:7d:c6:89:08:0a:
a8:b5:31:70:5b:8d:fd:4d:a6:7f:f1:1b:ee:2d:f8:
ed:79:ae:4b:41:7a:e0:de:10:78:0e:23:f9:f1:c1:
cb:4b:49:33:72:d7:1f:09:33:a4:7b:f7:7a:b7:eb:
f2:7a:28:5c:04:54:e1:fb:75:70:90:87:1b:27:34:
8a:11:1e:b6:69:fa:bb:00:b2:12:d7:f0:23:4e:4d:
33:1b:db:88:ef:26:7a:bf:96:66:b5:d8:27:8a:56:
12:42:ff:3a:13:70:57:e1:30:4a:59:c3:ea:3e:d6:
03:b6:2b:8c:23:05:13:24:8f:3d:11:d1:cc:67:e2:
90:ca:a1:ff:2f:5f:ab:17:ed:4a:f3:44:01:70:dd:
ea:1e:24:5e:d1:6e:bf:67:8e:d2:a6:ed:12:73:c9:
22:26:d3:4e:21:a1:b7:08:c4:e9:fa:9a:da:ea:1f:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:FC:32:D2:BC:25:59:78:CA:4C:8F:51:63:7A:4D:02:BD:BF:6D
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:5b:41:96:3d:5c:d8:95:27:69:9f:3c:ca:3b:8f:8c:6e:
bf:44:ea:c5:4e:33:1f:58:5d:18:62:0a:b0:1f:07:f4:5e:16:
e5:09:59:42:74:7e:ad:e3:f7:b1:15:d4:4f:da:1a:dd:3d:de:
15:13:d9:74:e5:c2:ca:d2:34:03:a1:b3:c5:22:2f:42:06:be:
ad:cf:a2:a5:7b:b7:25:d8:2f:1a:d9:41:46:3a:b0:a1:fd:44:
aa:dd:2f:fc:ae:36:c6:a8:47:51:8d:46:87:bc:7e:cd:8c:ab:
e9:dc:0b:c4:6a:8d:59:9d:9a:fb:e9:e6:b8:a4:4c:86:c5:1c:
6f:fc:61:62:6f:46:c9:d1:94:1d:10:ed:78:89:0a:8b:ae:fe:
0a:3f:e3:b2:c9:f6:ff:52:fb:0d:ac:40:e2:c2:60:fc:3e:64:
27:29:39:b7:30:d8:90:f9:20:03:0e:21:e0:37:32:1c:92:c6:
6b:e3:b4:a7:ce:96:13:1c:6a:51:26:5d:33:70:90:20:a8:ce:
f5:78:ea:31:a0:97:2e:ad:b7:1f:19:3b:18:18:c4:96:f5:c5:
cc:fd:85:bc:e4:f4:61:eb:d2:2b:84:56:17:ec:c0:cb:b6:ee:
94:44:ab:11:98:20:48:e5:a8:f1:06:ed:bc:6f:2d:6c:7e:ce:
19:fc:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:23 2025 by rpki-client