Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: JHL3WTxVlrjfJm0+CneaestoFP62KnV1DxUce42rXgk=
Subject key identifier: 28:23:2B:51:9D:D7:29:E1:E7:F9:7E:56:9A:C4:20:C8:06:B1:D0:65
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 07:12:01 +0000
Manifest this update: Fri 31 Jan 2025 07:12:00 +0000
Manifest next update: Fri 07 Feb 2025 07:12:00 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: btdZ92xWSrj0F6zD5WOun0JQENbWKO2vGQZuD5hj2c0=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Jan 31 07:12:00 2025 GMT
Not After : Feb 7 07:12:00 2025 GMT
Subject: CN=679c77c0-00fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:a9:7a:f6:cc:cc:dc:ea:2c:0e:4d:3a:69:
1a:69:3e:43:f6:6d:7d:b5:8c:e8:e4:2a:df:c4:4d:
e7:93:fb:bd:c3:24:41:e3:0d:f7:3f:f5:96:b7:26:
c0:60:bf:fb:5d:5d:49:ce:9e:2b:38:08:aa:6a:0f:
94:62:66:73:42:da:08:f8:9c:d4:67:d1:c7:57:3e:
38:11:b7:90:00:ae:e0:e9:23:3f:23:d5:01:40:76:
25:94:70:b8:48:f9:48:6e:56:2f:ea:6d:af:7b:3a:
91:b3:7d:ce:ce:13:a3:7b:e9:a0:d7:d7:06:71:d5:
b4:12:e1:67:e8:c3:03:56:36:e9:1c:d4:94:90:ca:
35:8d:3d:25:6e:a0:5f:26:98:85:5e:89:8e:55:67:
83:58:b4:68:70:be:6a:0d:a8:b4:77:96:15:6f:49:
ec:89:95:08:11:10:63:2b:45:db:d4:2c:b4:37:c0:
18:9f:5f:63:fc:2a:5c:ab:87:a0:4d:7b:d6:21:0b:
bf:75:ad:ae:b1:f7:56:7d:e4:3e:0a:64:9a:92:c9:
7a:5f:cf:fd:fb:13:9c:22:45:df:5d:e3:fd:30:66:
b2:f4:0f:7c:66:36:c2:ba:29:4e:d5:f1:56:fb:90:
10:1d:a9:42:4c:d8:b5:fd:f4:d7:0e:6a:36:70:c3:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:23:2B:51:9D:D7:29:E1:E7:F9:7E:56:9A:C4:20:C8:06:B1:D0:65
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:42:73:b8:51:7c:a6:6f:ba:c6:9b:83:31:b6:be:c9:44:63:
a1:d8:8e:34:34:b1:52:c2:a5:b5:6c:b1:59:0e:ab:bb:f6:3d:
2a:10:76:fe:93:01:2d:2a:ff:d2:42:5d:3a:dd:65:cd:15:89:
14:3a:0b:30:72:5a:b5:98:11:e3:bd:f1:b2:09:a1:ec:51:78:
34:43:82:c6:0d:1d:f5:fb:7f:91:31:5b:12:40:65:54:56:ac:
d7:a6:79:41:6b:f6:33:94:55:51:10:bf:03:cf:f5:0c:b0:0d:
ed:24:43:27:e1:c7:a0:23:99:0e:ea:ad:7c:bb:49:ff:6b:d3:
b9:b9:5b:c9:12:b6:6a:e8:38:d6:42:4d:7a:52:6e:09:37:b5:
a5:82:34:0a:b5:d0:10:b9:ec:72:a0:08:c4:1f:29:26:dc:0e:
d6:18:25:72:35:60:da:4f:03:0f:03:b1:67:43:8a:6e:01:f0:
69:3a:f5:88:1e:12:e0:dd:73:8e:3a:ff:42:08:18:06:71:29:
de:fc:f4:5f:8d:7c:6f:29:59:ea:46:56:fd:3b:f4:0d:4a:89:
6b:9f:68:9c:cd:47:37:f3:b7:af:d1:13:dc:10:6e:ed:70:0d:
55:8f:7f:12:e1:45:b8:03:e3:87:2e:03:88:a4:35:07:01:9b:
35:2d:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:34 2025 by rpki-client