Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier: 4zPf8gUCo+nNgqLn2CCRDBAN3uWjksZEEJCm+3JcCTQ=
Subject key identifier: D9:52:8A:38:32:C0:11:C2:5A:D7:54:3B:28:5E:2A:F4:94:B0:0F:AE
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0BEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number: 0BDC
Signing time: Fri 31 Jan 2025 18:43:39 +0000
Manifest this update: Fri 31 Jan 2025 18:43:38 +0000
Manifest next update: Fri 07 Feb 2025 18:43:38 +0000
Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: sBM9AWGVDUFex7kpdT0SCdx2DfVR6JLkJaF/bZN3v8E=)
2: 996294F0F6F811ECB7D4B564C4F9AE02.roa (hash: mTvmOQDPJVukrnSSNdcqtgbN5ePeF9G67UQ1C4nmwgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3054 (0xbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Jan 31 18:43:38 2025 GMT
Not After : Feb 7 18:43:38 2025 GMT
Subject: CN=679d19da-3131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:f1:ef:2c:b2:aa:f9:0d:2f:9a:a4:17:cc:
02:0f:77:6e:3a:81:aa:79:33:68:3f:c5:fe:fa:22:
95:b8:f0:10:0a:c7:02:4b:1f:5a:6c:85:e7:ce:fc:
93:fe:fe:a6:ca:98:ab:7d:e3:85:d4:30:7f:61:af:
f1:53:21:b3:df:6d:f0:f2:9c:b6:6d:50:16:0b:be:
7a:cc:51:f8:f3:b5:66:20:02:23:82:ab:30:93:e7:
6a:53:09:29:b6:6d:cb:f1:bd:72:84:dc:47:14:6b:
5e:08:e8:44:a1:50:d1:78:23:18:1d:49:8d:d0:25:
2b:d3:bc:51:4c:93:7f:c7:0c:33:df:2e:e7:07:07:
49:9e:a2:31:3a:16:27:26:f3:88:f9:65:d8:b3:b1:
f0:b8:4b:de:65:e3:23:ae:46:e5:de:e8:59:cf:21:
ef:ce:7b:f1:f6:8c:90:18:91:96:08:bd:78:92:ac:
21:ae:10:0d:20:a6:17:65:a7:6a:c0:16:c6:8c:04:
18:04:e2:79:17:da:5c:51:5f:ad:0c:e5:8b:a8:c4:
82:bb:b5:1d:fe:1f:78:11:72:d2:6a:7c:0d:c6:55:
31:b4:08:01:ed:eb:e1:21:b5:90:29:7d:9a:ef:a9:
f7:4b:e7:db:ed:21:e4:8d:c5:58:56:7f:5d:a1:61:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:52:8A:38:32:C0:11:C2:5A:D7:54:3B:28:5E:2A:F4:94:B0:0F:AE
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:c1:dc:64:01:9d:71:d5:b9:9a:c3:10:90:75:90:ba:9f:
1e:dc:79:13:b0:85:fd:f5:6f:11:ee:c8:12:e0:b8:24:f4:cb:
c8:2a:a4:d0:f2:20:09:6e:62:c4:03:f9:ce:03:83:6c:e4:24:
8d:68:32:51:bb:37:a0:84:90:f5:99:57:a1:15:41:cd:5d:95:
09:9b:dd:dc:46:8e:68:33:23:6b:27:f2:4f:e6:26:ef:e2:71:
a4:f0:71:8b:47:dc:05:98:b4:b5:de:01:72:24:3b:78:c6:92:
16:f6:7a:95:42:77:56:9a:45:19:2f:65:fd:22:2c:2a:84:18:
65:14:49:06:7f:d3:ce:39:1f:55:f7:e6:dc:28:dc:40:99:d5:
23:dc:04:56:5c:c7:68:58:68:56:e6:f9:80:91:32:c6:e3:68:
66:a4:e0:63:7d:4f:f4:aa:56:76:68:d5:18:df:21:9a:81:16:
e2:d4:0b:22:f8:17:51:57:f9:90:ed:fb:df:1a:a2:ff:a4:fc:
5e:3f:37:0a:28:4a:b2:64:7a:45:bf:3b:89:e3:9c:bb:6f:b6:
ff:7a:22:87:a9:66:40:86:2c:8a:20:16:d6:37:89:7e:4d:4a:
17:cf:4c:a2:5f:ca:22:36:5d:10:8b:13:33:28:79:2c:c1:50:
e1:23:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:55 2025 by rpki-client