Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier: wuUZhX9ZjbAW1arLDSyMZD39PYRBQj/8hYAEF9pgJUk=
Subject key identifier: 39:E8:A6:5E:E3:09:61:13:DE:99:78:68:B7:0C:C2:67:64:4D:AB:F4
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 04:08:20 +0000
Manifest this update: Fri 31 Jan 2025 04:08:20 +0000
Manifest next update: Fri 07 Feb 2025 04:08:20 +0000
Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: G9kpEt3qhOmKF/V5pmClpud7MOX7hUAymPDcjcJJsYI=)
2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: IyPWuZN2CAoAoTar84CaLcssRy+6sPvCVGhYj/lXGDs=)
3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: 8T3yBHmtCqlB+aM8ej4zblFk+WNFmZ0LxXxnA03WiR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Validity
Not Before: Jan 31 04:08:20 2025 GMT
Not After : Feb 7 04:08:20 2025 GMT
Subject: CN=679c4cb4-5669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:fa:e4:1f:72:1b:4a:c6:21:83:ed:e2:a4:
a9:f7:c6:3c:f3:3e:b6:f9:91:87:7f:fe:01:9e:8c:
1a:2c:a4:da:df:c0:96:64:ae:6f:bb:22:5d:ef:0b:
bc:da:ee:af:01:52:78:3d:85:a5:18:29:f0:c1:0b:
d1:36:10:c1:36:b5:9f:61:0c:d5:5a:53:2c:88:27:
9d:6d:ab:f8:26:bb:6f:e3:d9:25:5b:69:2b:39:53:
cd:48:d5:01:7d:6b:46:46:4d:9b:65:3b:0e:9c:85:
fc:2c:23:56:db:97:ce:d9:3a:8c:ca:13:82:c6:d9:
bf:ec:86:09:d0:4c:5d:9b:08:69:34:4e:80:d7:97:
f6:8a:a9:c7:ac:97:45:b2:d6:66:b5:84:0f:3f:35:
2f:05:58:80:7e:07:8a:ad:ac:77:9e:ea:8a:90:a2:
5e:fd:af:16:02:f0:d6:3e:bb:ae:53:ed:28:06:49:
00:72:8c:62:e1:65:87:72:28:87:93:3d:1d:3e:69:
a3:13:38:3f:e4:0a:41:a4:07:5b:fd:db:49:fe:7a:
6a:ea:fc:e4:50:a1:57:4d:8a:48:2d:0f:16:ea:6b:
1e:fa:5e:e4:84:d2:50:46:7e:ad:d5:5e:16:43:8b:
cc:47:5f:0a:d9:8b:c2:9d:2e:35:c4:e6:3a:18:bf:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:A6:5E:E3:09:61:13:DE:99:78:68:B7:0C:C2:67:64:4D:AB:F4
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:e7:58:49:77:ac:e2:08:14:02:86:a4:64:38:39:d5:4f:
63:d3:46:e3:b4:a0:37:4a:9d:c1:15:b9:3b:ee:28:c0:93:bc:
f4:8e:fc:ea:f1:6c:80:8d:ba:a0:13:57:d7:3d:27:12:7d:c2:
3f:f2:b9:6b:ea:1f:37:94:6b:ac:03:7a:f2:0f:0b:65:ba:10:
bc:29:26:c1:61:76:ec:fb:dc:76:fd:25:cb:8c:7e:b2:29:28:
f7:e5:c1:4f:59:4a:a7:f3:b6:d7:3d:b0:f1:64:a8:59:07:96:
c3:9c:85:b1:8e:ca:35:16:f6:46:33:ef:a4:b4:07:e0:e8:2a:
bb:3c:a6:33:bd:00:43:ae:40:ff:3d:db:3b:a4:61:a2:be:69:
34:d0:f3:65:09:a6:d8:f9:d3:b5:15:04:76:65:7a:40:53:66:
8d:72:e4:3a:fd:cc:51:5d:fd:63:cf:cf:a4:cf:3b:4b:64:bc:
43:da:65:e2:b0:44:a0:71:b7:bc:b6:63:e3:86:f4:70:ba:fb:
86:ba:59:fa:3a:3e:1b:41:3b:54:7b:9d:53:f1:64:86:b1:24:
a6:db:63:b6:fe:2a:f2:f0:40:8a:7d:e5:61:84:e1:79:35:b2:
b1:da:a5:95:4e:1f:76:3d:3e:cd:3f:b2:54:50:66:7b:fb:a3:
fd:c9:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:52 2025 by rpki-client