Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json)
Hash identifier: QWSAs8Qpqm6m0wiKtMuC5V0HDm5UKoh9yaNyUOajd04=
Subject key identifier: 17:CB:40:38:47:30:13:6D:87:73:38:73:6A:11:EB:41:2B:44:58:15
Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
Manifest number: 020F
Signing time: Fri 31 Jan 2025 02:10:33 +0000
Manifest this update: Fri 31 Jan 2025 02:10:33 +0000
Manifest next update: Fri 07 Feb 2025 02:10:33 +0000
Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: vH8oshhSavcPb3caiTBEdl1Z65+rYqy+pQ8jGgwK0Fc=)
2: E60CA9B06B3311EFB79B5F87C4F9AE02.roa (hash: xA2I3SK1LrwCNTYfAy8aXGaXpbqj6PnMmp3xWe4cBbs=)
3: 274B6ADCF15B11ED950C456FC4F9AE02.roa (hash: BiugR8dn8pnpzPHCg7eZaT65u46wR3tiYmJITlqhZck=)
4: 26C50D3EF15B11ED950C456FC4F9AE02.roa (hash: H9+at/H3w6hcTEAgzVR2r70qV9olS6sufdVX4JIUdXE=)
5: 285AD17A061811EEADC2405AC4F9AE02.roa (hash: WVJ4UwY6KypbKvk4Ln4sfzY4jnw/x07G6eZ4nvVHo1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB
Validity
Not Before: Jan 31 02:10:33 2025 GMT
Not After : Feb 7 02:10:33 2025 GMT
Subject: CN=679c3119-4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:bf:93:cc:39:34:52:ac:ef:d7:8e:0b:ca:
c9:4a:1e:1a:db:0c:1f:9a:2c:44:ea:b3:78:ff:0e:
00:30:ec:a0:3d:17:e9:1a:a7:a4:4f:dc:44:7e:2a:
9f:11:c8:1a:33:9b:d1:99:6c:ba:63:b9:13:01:3c:
82:da:35:f5:7a:6c:22:33:82:35:60:aa:ef:9b:27:
ed:f2:d0:6b:05:01:96:3f:0f:6c:8f:7f:fa:78:6f:
79:4a:ac:ae:83:44:7e:5a:cd:7d:d9:0e:88:e4:b7:
31:ae:bc:f5:83:dd:77:5e:26:46:cb:e3:a5:93:33:
f3:47:18:69:c1:05:f5:83:b9:24:98:5d:95:82:9e:
22:72:47:f6:9d:0e:05:80:d6:62:ca:8f:46:61:96:
91:82:26:e3:ea:8e:97:f0:08:25:84:aa:bf:7e:ab:
5f:ee:7b:ef:a3:9e:e3:f1:11:a0:89:23:5f:db:90:
5c:24:fd:3e:84:e6:1d:7d:99:22:32:66:96:8b:11:
ae:32:a1:a3:af:d8:c7:3a:79:d1:87:7d:89:d5:0b:
9e:cb:44:f5:cf:12:a8:34:27:84:a3:2e:27:e2:33:
d3:0d:75:9f:33:d5:13:d0:4c:99:67:ce:67:89:f7:
b1:80:42:39:72:a0:a3:b0:a2:ca:3b:30:58:eb:42:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:40:38:47:30:13:6D:87:73:38:73:6A:11:EB:41:2B:44:58:15
X509v3 Authority Key Identifier:
keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:61:85:b9:83:7e:1d:a2:2d:72:fa:51:95:0e:7c:3e:ee:
14:a9:ef:ed:7b:d4:d9:18:c9:58:cf:df:0c:1d:a6:f2:d1:9d:
3f:df:dc:c2:33:68:47:a9:d1:99:de:01:fb:f8:7b:87:af:16:
98:5a:fb:cd:6e:ec:c5:3a:65:ce:d9:9a:17:ff:21:e1:e6:a6:
a0:68:96:6d:25:7f:52:70:95:97:24:e7:f7:04:76:26:85:12:
07:1a:bf:e6:bd:bc:25:a5:c1:2a:31:eb:76:2d:79:42:ac:d3:
e3:ae:39:bb:64:7d:c3:68:6d:09:bd:bd:3d:86:25:b7:55:86:
93:c7:5a:7b:74:9d:77:67:21:6b:5a:dd:9f:25:99:c3:4d:36:
94:62:50:e5:f9:54:ed:e5:c0:8e:a3:ce:e2:77:2b:67:53:5f:
e2:d1:a3:0d:6a:c8:69:77:6d:8c:8d:f6:ec:5f:d7:81:8e:75:
e5:7a:ec:82:a6:94:5a:cd:b9:52:6a:00:a4:5f:7a:54:02:f3:
00:b8:98:be:d7:37:a2:ad:41:d1:58:8f:6a:20:2f:2f:31:eb:
25:d1:d3:90:4e:d9:88:48:be:74:3c:67:a3:40:35:84:59:a7:
ba:32:6a:00:e5:e1:06:ae:83:73:4f:80:ee:f0:4e:87:51:7a:
d8:19:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:31 2025 by rpki-client