Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json)
Hash identifier: un6VUjq/5A2sDqBu63oDOL8neKoxGh8wskybw+5eTjg=
Subject key identifier: 5C:CD:75:62:F0:F0:77:CD:29:37:39:18:6B:1E:36:66:6C:D2:CA:EB
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 02:56:13 +0000
Manifest this update: Fri 31 Jan 2025 02:56:12 +0000
Manifest next update: Fri 07 Feb 2025 02:56:12 +0000
Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: sY2zRqOLNlaNhwMQXqXnynd9Ubx0MKdMvwip4mmoGak=)
2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ha8TSc6ylXlULsjvosE3YzdnyL+kFFYkOUZjNUZAybA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Validity
Not Before: Jan 31 02:56:12 2025 GMT
Not After : Feb 7 02:56:12 2025 GMT
Subject: CN=679c3bcc-b819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:a4:ef:89:7b:00:68:ba:58:09:1c:fa:dd:
0c:e3:f2:e8:a1:74:d3:c6:3f:75:9d:ac:e1:11:da:
1a:3f:43:4a:ad:3a:06:70:1f:d7:42:cc:52:0f:24:
d9:06:be:45:1d:70:b8:19:ea:cc:8f:e7:aa:c2:ac:
eb:66:78:ef:18:7b:02:ee:c4:a0:d9:64:17:1c:44:
94:a9:f3:7f:22:8d:9e:94:bb:29:91:2d:f3:69:2e:
d3:30:f4:b2:a2:64:a3:09:09:74:96:27:91:90:0a:
08:7f:43:89:b6:db:57:a9:ca:e1:22:09:62:32:be:
42:2a:8e:63:a2:fe:b4:c4:b0:eb:1a:fa:c2:66:15:
e4:d8:ea:70:f9:39:60:3a:4e:b9:01:aa:16:e5:59:
48:70:b6:63:f9:8f:71:5c:97:ba:d9:7f:f3:88:b2:
54:83:e6:94:ee:c0:74:17:4d:72:94:8f:ca:bc:13:
89:b2:12:42:4d:1d:36:96:e1:84:a6:2e:01:b4:e7:
78:b1:02:e3:de:f0:ba:02:4a:d9:49:94:68:23:f1:
d1:46:2e:5f:45:dc:f5:5d:53:5f:e7:6d:5d:7f:ff:
65:8c:43:f1:f5:c9:9a:1e:31:58:0c:f1:e9:b9:ef:
67:51:52:53:d1:91:3b:44:f8:e7:86:bf:bc:c4:4b:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:75:62:F0:F0:77:CD:29:37:39:18:6B:1E:36:66:6C:D2:CA:EB
X509v3 Authority Key Identifier:
keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:16:e1:1f:b0:62:0e:21:4e:31:58:b7:68:3e:d3:6e:cd:71:
6a:01:25:4e:ca:ec:fd:98:80:96:dd:d2:92:01:e5:15:6f:b9:
1f:27:fc:20:b3:ec:c3:76:5f:e8:10:51:b4:42:5f:4a:cd:0c:
29:36:d4:89:4c:1e:02:fa:78:f3:a5:04:5b:b9:d8:96:bf:6c:
bb:15:de:48:5a:ed:f0:af:e0:2b:97:7e:e8:2d:6a:05:76:7a:
0c:93:32:f5:f8:dc:a7:d0:9b:53:32:3f:8d:e3:fa:e8:d3:e9:
76:a8:0c:c9:fd:f8:5b:1b:49:60:3b:ad:80:53:16:9c:cc:95:
e9:9b:0f:8b:8a:b7:42:92:1e:87:2f:c7:36:3c:87:ea:ad:cc:
61:44:f4:e6:2a:d1:02:76:75:9d:27:33:0a:c8:12:33:65:80:
2d:af:5c:cc:59:f5:50:85:24:52:47:a6:2d:9c:fe:e9:a3:57:
4d:68:6a:d7:79:02:7f:f5:5f:1f:fd:45:45:4c:6c:69:72:bb:
e8:c3:ed:db:b9:fa:f4:1f:e9:f0:24:b1:1e:d5:58:6e:e0:53:
8f:64:ee:42:07:48:2e:2f:c7:bf:39:11:9e:f8:4f:ab:b2:9c:
5d:6c:25:7b:ec:9c:c2:38:13:91:ab:9a:32:fd:b3:f5:e8:2f:
ca:60:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:22 2025 by rpki-client