Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier: ax23Xo89hFA0S51c9BgRzruIL51YcvBlfAlrshTu0vk=
Subject key identifier: 15:3A:09:81:3D:9F:44:FF:2A:58:84:93:91:78:A2:4C:5F:B8:62:50
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial: 0F67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number: 0F60
Signing time: Fri 31 Jan 2025 17:32:35 +0000
Manifest this update: Fri 31 Jan 2025 17:32:34 +0000
Manifest next update: Fri 07 Feb 2025 17:32:34 +0000
Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: ujOxR4AAU9UxzFAVa2p+ppyMf3KAxW0rc9owPzSvKQc=)
2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3943 (0xf67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Validity
Not Before: Jan 31 17:32:34 2025 GMT
Not After : Feb 7 17:32:34 2025 GMT
Subject: CN=679d0933-63ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:28:27:99:48:d2:ad:84:28:5a:44:30:7b:
18:86:f1:14:ba:71:53:e7:b1:6b:09:55:55:e0:6b:
6f:ca:0d:92:e3:4b:21:1d:47:55:c7:0e:c9:ea:7f:
1e:3b:e4:3b:9e:48:12:a2:ee:7d:4e:a8:ca:24:cf:
bf:1d:d4:af:03:cf:c7:97:f2:48:47:6a:75:1c:4e:
a5:dc:25:5a:03:87:75:8d:85:6f:78:c3:0c:ec:09:
d5:7b:7f:3d:e7:76:10:5d:f8:a0:c9:5b:4e:27:52:
72:4d:dc:7e:7b:c8:c3:f7:9f:54:a2:cb:0a:a8:3a:
ab:2d:80:b6:bf:a7:84:75:30:9d:3f:eb:89:f0:7a:
24:6a:57:cd:8f:b0:89:3a:c4:96:67:d1:0f:0c:ef:
cb:41:fb:27:fd:6f:9c:dc:6c:dd:7d:19:fd:e0:a6:
25:cb:fc:c4:d0:40:88:d2:e8:a2:4e:39:8f:1c:9c:
66:5a:10:17:8f:5c:d9:bc:9d:ba:9a:f0:1a:57:d7:
60:61:f0:2c:55:9c:c2:ea:b0:15:28:39:b1:49:f8:
15:1f:04:a2:b7:08:4e:1f:bc:ba:6b:24:52:d2:e7:
72:9c:61:98:89:23:52:56:df:79:eb:1a:c9:27:cb:
7d:c8:45:4d:fe:95:c7:81:5a:93:15:b3:74:47:73:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:09:81:3D:9F:44:FF:2A:58:84:93:91:78:A2:4C:5F:B8:62:50
X509v3 Authority Key Identifier:
keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:a8:57:92:e2:93:dc:10:48:ed:48:58:70:c5:33:d9:c8:
69:cc:b5:e4:61:76:90:76:6d:d1:4c:b9:04:f1:18:ae:d3:e3:
31:46:cb:6d:ca:3b:d3:e2:8e:ea:63:db:a3:b7:44:7f:3e:3e:
90:ff:af:59:7d:76:4d:a5:2b:44:33:27:6a:4d:da:4e:1e:e2:
4c:d9:78:ca:22:9f:80:72:28:5d:7b:78:f5:b2:e3:cc:ad:ed:
b9:d0:f2:f5:d5:f3:70:7c:62:81:c4:0b:73:63:8f:5b:50:7a:
5d:f2:b2:e7:4e:2b:23:d4:df:65:23:e1:85:b8:b0:64:17:e1:
d4:14:de:3c:89:8b:cd:7c:63:dc:ad:af:6e:5a:0c:47:67:1c:
bf:82:6e:70:f3:3b:40:19:a0:83:81:2b:d2:74:f0:e2:35:3a:
62:4e:63:0c:b4:6e:eb:a9:2e:e3:41:d2:de:2a:7c:f7:7d:a2:
e5:57:d1:26:55:74:a9:dd:06:72:4d:07:c6:7a:a7:ea:62:bb:
31:10:a3:33:66:6d:26:d4:f2:ed:8d:61:d8:f7:5c:ba:a5:3c:
dd:b8:5d:d5:30:83:6e:03:79:bb:90:99:c3:53:00:a9:60:f7:
92:c1:2f:a9:76:29:03:f0:f0:1e:8b:e8:9e:51:63:a3:49:3a:
de:03:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:56 2025 by rpki-client