Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json)
Hash identifier: ooXZbpZ6GzD17IaSO10L8H6OBCS/xeR4QO//qJFZMQI=
Subject key identifier: D2:EF:7C:22:86:FE:46:FD:E8:2F:38:03:FB:EE:31:17:43:9C:E9:D0
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 02DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
Manifest number: 02BC
Signing time: Fri 31 Jan 2025 01:45:02 +0000
Manifest this update: Fri 31 Jan 2025 01:45:02 +0000
Manifest next update: Fri 07 Feb 2025 01:45:02 +0000
Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: txXlx/ex+zU4XEs8CFsnRZNRJwyxvfD1/Iae9Y4yWCk=)
2: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=)
3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=)
4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=)
5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=)
6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=)
7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: docAZ119rvIYt44KFg788YAzxfuQ+rC6VLlFkEWoZnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Jan 31 01:45:02 2025 GMT
Not After : Feb 7 01:45:02 2025 GMT
Subject: CN=679c2b1e-f49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:37:72:6f:e5:01:77:ad:a7:49:32:9b:ba:
4a:24:1c:78:07:e3:34:11:7f:98:e9:28:17:ff:b5:
8c:ea:a0:95:f9:d5:1d:b7:37:51:07:87:2d:11:d4:
2e:10:18:2b:58:19:51:c6:e4:33:a5:ff:58:ca:7a:
38:f8:b8:ca:a8:0b:13:01:e2:6e:87:02:d8:12:be:
7b:a2:17:df:69:61:a7:b7:36:35:cf:08:ca:da:7b:
18:a7:ef:ae:ef:95:36:8b:b0:66:53:60:65:57:93:
87:b8:f1:66:27:88:ee:63:38:c1:57:7e:fb:97:40:
05:9c:23:9e:42:4a:1c:c4:18:88:ed:36:02:d6:0d:
60:db:8b:69:85:8d:ba:b9:29:b1:d0:e6:70:6b:3c:
0b:d8:6d:ff:a2:53:19:17:f0:49:a2:2f:ea:72:ac:
79:6d:88:8f:43:c4:49:18:5c:e6:6b:90:a8:a8:b6:
a1:8c:da:ec:ab:6a:43:a7:6d:a4:44:01:16:12:db:
12:d3:d8:93:0c:96:00:41:48:40:37:bf:6c:ad:f8:
52:7a:97:dd:8b:06:41:f6:48:fe:60:56:2a:f1:c6:
23:1e:77:1b:4d:5f:26:0b:39:9a:cc:8f:2a:ab:46:
8e:64:87:39:13:56:57:32:08:89:75:06:92:0a:87:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:7C:22:86:FE:46:FD:E8:2F:38:03:FB:EE:31:17:43:9C:E9:D0
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f5:b9:70:21:1b:9d:db:33:86:eb:e4:51:dc:15:fa:c6:4b:
5f:13:9e:c6:d5:b1:6e:39:e2:c7:59:b8:87:10:c4:e0:9e:b9:
3e:a4:98:41:0a:0b:5f:03:80:f0:1c:07:7c:a3:55:a7:32:91:
cd:8f:c8:80:41:f5:7d:d8:9e:85:34:0b:2a:e7:c3:76:e0:dd:
b7:6d:7d:71:41:90:3f:c6:19:dd:82:dd:80:12:e2:e7:64:57:
14:44:17:50:ba:b8:a5:98:59:9f:c5:32:26:1b:a6:26:59:98:
30:0f:28:89:95:b8:a6:cf:24:34:ba:38:4e:0c:29:01:b6:8e:
f4:ad:a5:8e:b6:d7:e6:bc:49:35:8a:c8:82:48:60:67:42:0a:
b7:10:9d:31:a8:25:21:0b:5e:14:6d:c8:8d:e2:69:2e:b3:73:
a9:f8:34:8b:63:f8:5f:af:e2:72:ba:18:52:a2:03:35:cd:7c:
07:ca:7e:22:f0:fc:4e:ba:93:e6:49:88:12:61:28:a3:30:49:
4a:54:11:a1:d3:4b:e4:64:ac:46:58:79:3b:8d:25:83:66:41:
55:84:c6:c1:0a:e2:a5:fa:06:89:4a:b4:a8:23:9e:36:26:ba:
8b:33:88:b8:d1:67:f3:28:56:00:91:89:69:a2:a2:22:31:b0:
49:ee:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:43:33 2025 by rpki-client