Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
File: JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json)
Hash identifier: HjRRBc6y8WA9VWbnjbbaElyVwk2ya/TynqcsHNtfJu4=
Subject key identifier: 7C:57:F8:34:62:0A:39:05:FD:4A:2D:0B:A0:26:9D:C2:FC:20:42:7E
Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
Certificate issuer: /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
Manifest number: 0170
Signing time: Fri 31 Jan 2025 03:10:57 +0000
Manifest this update: Fri 31 Jan 2025 03:10:57 +0000
Manifest next update: Fri 07 Feb 2025 03:10:57 +0000
Files and hashes: 1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: C9bh1d+uTtMM9rlmimvhc+Bnb+EaMG8gBo/Vu4dcwhI=)
2: 761318C4BCC011EDA67EF02DC4F9AE02.roa (hash: eI5apWR0zMm4xnDILGv49LNX7IaWBYgGW0HW5FhcVfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Validity
Not Before: Jan 31 03:10:57 2025 GMT
Not After : Feb 7 03:10:57 2025 GMT
Subject: CN=679c3f41-aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:52:35:d5:a5:36:55:e7:d1:0c:ed:0b:22:
50:da:71:08:60:28:e1:36:d1:fc:05:75:ec:d2:10:
29:41:a4:1a:1f:0b:71:74:9a:a4:e4:d5:fc:ec:b6:
9a:7d:bb:f1:f3:09:28:d2:8b:3b:03:62:76:31:51:
27:ad:20:d7:08:91:2a:c2:df:14:f3:6d:6a:fb:bf:
c9:56:33:e9:78:2d:84:8d:a1:3c:d4:01:60:7c:90:
e3:0b:d9:92:bc:14:fe:e7:d4:ab:cf:de:56:c2:77:
f4:86:ca:14:e8:f1:5c:8d:21:fa:b0:70:e4:07:9b:
2a:3e:dd:d9:f0:e7:46:41:d7:f5:e9:f7:ce:59:06:
3f:0d:54:47:fb:4a:5a:70:80:45:8f:ca:2a:e6:05:
33:c3:78:d6:e9:7c:96:d9:0f:35:d0:7e:8f:92:d2:
d0:ec:3e:5f:59:33:8d:8a:ba:a3:a6:3d:25:97:b2:
82:b1:79:c8:5e:d0:5a:df:bd:95:0a:6b:c7:73:91:
70:ba:ee:14:6e:2a:20:00:ac:24:4a:3a:49:20:ba:
89:e2:e7:40:3d:67:f4:41:3a:64:56:5d:9a:96:60:
b0:4a:32:5f:7e:4e:24:af:0e:bd:e1:19:6e:c2:16:
a3:50:30:35:10:8a:ba:a2:90:ef:21:36:f7:ea:5c:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:F8:34:62:0A:39:05:FD:4A:2D:0B:A0:26:9D:C2:FC:20:42:7E
X509v3 Authority Key Identifier:
keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:10:81:ba:f5:91:2b:77:3f:2d:a3:4c:b5:3e:3b:e4:ea:60:
45:be:04:bc:8b:ac:7c:fa:50:29:1f:9e:4a:17:b2:fd:81:81:
99:bd:8f:fc:df:7b:6c:e1:a3:75:ab:86:2d:9c:59:4c:a5:37:
b6:da:3a:ad:76:f1:35:a4:6f:05:e1:4c:ae:5f:71:53:bc:88:
83:05:ae:c1:5e:b3:7e:76:d7:e3:58:2c:bd:1a:15:b0:8c:73:
10:e3:b4:63:f3:0c:97:4b:1d:9c:9d:89:41:05:13:68:ed:0e:
5e:2e:e3:b9:54:17:fe:7e:dc:31:d8:fb:c7:9f:c0:84:a7:d8:
28:f2:68:e7:36:f2:ea:5e:07:20:f2:2f:35:da:69:03:8f:b8:
9e:85:6f:63:b6:2a:89:5a:6d:ee:6b:ae:ed:b9:ee:73:01:72:
af:a3:1b:82:dd:fe:6e:e3:1e:e5:78:98:5a:ea:88:2f:d6:ea:
76:6e:25:43:82:0d:3e:cf:8b:b0:ee:0d:db:e0:fb:1d:cc:03:
ac:84:ee:cb:13:19:91:69:cc:59:6f:69:16:7f:48:44:45:cf:
bf:07:94:6c:f8:11:b2:7f:68:21:f6:e8:38:d0:ef:88:b7:d3:
ba:13:12:f2:3c:57:f3:8e:ca:de:b7:05:f7:e8:2e:d5:87:56:
89:d0:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:28 2025 by rpki-client