Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json)
Hash identifier: BuZQ8xjFRRoe/+mzH2Fhzx4mIrKiD3zrbkNMNQRYL+M=
Subject key identifier: A5:7C:9F:4C:C2:10:74:DA:02:DA:41:BC:18:2C:8B:6C:A2:26:BD:CB
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
Manifest number: CA
Signing time: Fri 31 Jan 2025 04:51:12 +0000
Manifest this update: Fri 31 Jan 2025 04:51:12 +0000
Manifest next update: Fri 07 Feb 2025 04:51:12 +0000
Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: FlvfCxgUmdfInyCw9KMjftNFbsZVycDhIGtj5QM41Dc=)
2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Validity
Not Before: Jan 31 04:51:12 2025 GMT
Not After : Feb 7 04:51:12 2025 GMT
Subject: CN=679c56c0-5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:d3:da:18:02:13:cc:63:52:94:5f:4d:ae:
56:ca:4e:62:0b:63:1a:42:4f:5c:ed:36:08:71:44:
c2:15:24:8b:bc:65:7f:76:85:6b:f9:8d:f1:2a:65:
9c:69:1d:bc:8a:9d:ea:71:f0:04:79:cd:19:3b:82:
6c:ec:89:90:fe:fa:f4:d5:18:35:7d:0b:5a:03:f2:
c0:70:86:6e:67:cb:a0:50:74:6d:68:2c:15:84:52:
12:d0:aa:46:af:c2:30:14:d3:cf:81:ed:5b:78:99:
8f:b1:59:7f:ef:31:17:30:29:12:0b:e9:91:c3:9b:
c2:be:53:b1:68:67:57:1a:9c:6d:28:01:2b:ed:43:
68:18:fd:92:bb:da:f2:e0:b7:bc:8e:34:9f:fb:72:
04:af:55:2a:75:98:58:63:9d:ee:2b:57:35:1c:ad:
20:78:e5:9a:d5:dd:c2:0b:5b:88:f6:c1:5c:11:f6:
e1:97:df:3a:d7:73:7e:60:38:6d:40:f6:62:7f:df:
52:2e:ce:56:5e:2b:ce:72:a3:d0:1c:20:4a:72:f4:
c7:47:a4:d8:ce:ad:ea:a5:19:28:3e:9e:63:d5:d0:
71:b1:1f:da:18:88:4b:b3:3a:44:85:40:f0:e3:40:
e6:43:66:25:f2:71:3c:17:38:ed:e7:80:17:70:c4:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:9F:4C:C2:10:74:DA:02:DA:41:BC:18:2C:8B:6C:A2:26:BD:CB
X509v3 Authority Key Identifier:
keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:03:09:50:cd:ea:28:46:12:e9:ab:b2:22:d0:dd:e4:b0:11:
3b:e7:4d:75:38:c1:85:35:d9:0d:01:b4:16:d6:51:28:17:d8:
2a:cd:df:13:22:93:89:65:03:f6:f7:15:fc:5f:02:4b:80:b6:
73:6f:38:b3:5e:61:ff:19:ce:0a:79:1a:ed:53:b5:fd:07:34:
17:ba:6c:85:55:03:94:02:f3:fc:63:82:5e:ec:8b:aa:12:ea:
2a:2a:76:c0:08:91:24:ab:21:86:fc:14:38:ae:69:65:31:b2:
a6:56:16:9b:9d:25:bb:2c:97:1b:e5:ff:c5:88:ae:a1:7e:7f:
79:b6:c2:21:77:4c:ce:29:2f:da:1a:45:d1:e9:9b:0d:f0:40:
29:a8:9b:04:ac:ed:f3:c6:6c:4a:2c:24:92:fe:b6:1c:36:a6:
71:f5:6b:a6:7c:e3:86:91:c7:44:09:1d:0e:7a:90:a1:42:e3:
9f:fe:ec:55:4d:95:96:17:d4:1d:93:97:3b:ea:6e:c5:12:ad:
1d:a7:d4:df:a9:8b:64:6e:8d:2a:f8:13:fc:c3:5a:c5:5c:fb:
bd:02:e6:00:71:4d:97:c2:96:df:8a:5c:9c:f1:17:f0:f4:1d:
94:c3:8e:c4:03:fd:95:b0:37:1a:55:e3:16:85:a7:ef:75:dc:
54:08:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client