Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
File: jiZ6MV35Dplf9M1LLPj8TDMksts.mft (raw, json)
Hash identifier: UWsiW73qI9O7f3+zbNwCZXU85aXq9xfR7kI9hFtPVe0=
Subject key identifier: D5:2E:86:DA:A6:47:C7:EE:18:29:46:AF:EB:54:17:B3:E7:E4:59:3A
Authority key identifier: 8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB
Certificate issuer: /CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 07:15:43 +0000
Manifest this update: Fri 31 Jan 2025 07:15:42 +0000
Manifest next update: Fri 07 Feb 2025 07:15:42 +0000
Files and hashes: 1: jiZ6MV35Dplf9M1LLPj8TDMksts.crl (hash: 9J0SIkEvdUAF1U03IvwTzYN6o6a5trKe2UpE2am8BA0=)
2: EF714C70D89F11EFA1D2E672C4F9AE02.roa (hash: RQguTQm7u/HopEKGt5+xwJ/Yt9Fvm6tqRZ2uC++bhEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
Validity
Not Before: Jan 31 07:15:42 2025 GMT
Not After : Feb 7 07:15:42 2025 GMT
Subject: CN=679c789f-d6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:cc:a8:8b:d5:24:92:5e:2b:dc:45:0e:69:
01:ba:47:bc:da:63:81:04:4b:00:90:15:03:cb:45:
3b:66:97:6f:e7:6f:51:eb:1a:cc:fc:42:c2:c3:93:
eb:b3:e3:4e:4b:b4:45:16:f1:88:70:cc:47:3a:85:
a9:a4:3c:c3:24:9c:ad:d5:f8:5d:d1:2b:f1:db:75:
44:d2:04:8f:ba:45:f5:94:68:2d:57:c9:cc:c8:64:
9a:b4:03:cf:cd:ac:7f:44:29:38:7c:44:29:0d:b2:
59:c1:3a:6c:57:99:f6:c4:a9:54:ad:3e:13:37:a8:
85:ec:ec:e2:24:24:af:18:59:6f:1d:5f:1e:96:de:
46:12:ea:90:68:f4:94:6e:b8:42:97:69:3c:e4:cf:
6e:22:4f:77:f4:6f:3f:6b:0e:dc:3f:a6:42:42:ba:
9e:33:d1:f1:02:b3:32:66:d8:b1:11:e5:45:a5:69:
23:37:0c:18:80:92:c9:1a:01:4c:16:e4:cf:11:38:
1b:9c:b9:aa:c6:f8:a6:3f:e1:57:b7:35:9d:c2:c5:
2d:a9:02:d2:b5:34:b1:cd:d2:88:f4:83:6c:59:56:
07:29:21:14:4b:75:19:8d:6a:d7:f4:33:1a:06:5c:
ba:ff:dc:91:53:d1:0a:7e:a5:4d:b2:23:d0:28:c4:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:86:DA:A6:47:C7:EE:18:29:46:AF:EB:54:17:B3:E7:E4:59:3A
X509v3 Authority Key Identifier:
keyid:8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5b:7b:16:c3:8e:f4:e9:14:9a:c5:5f:86:67:a3:af:0b:79:
cf:85:f5:d6:c7:4f:93:c7:f0:f1:9f:77:e8:db:e3:0c:3f:44:
c0:42:f8:74:1a:6f:41:73:b1:18:41:cb:bd:b8:3c:7a:bc:8a:
e7:a0:57:76:ef:82:20:ec:c7:07:94:09:4b:b5:fb:ff:0d:e1:
22:82:17:c0:f7:b5:3a:e4:62:7a:cc:cb:4f:44:c2:a7:26:1b:
5e:94:29:1b:5f:4b:0e:ad:4e:cc:db:f6:98:aa:69:3b:02:cf:
12:5a:07:8a:4e:e4:d7:22:80:81:bf:59:ea:c4:d3:9a:fd:c2:
0f:a9:0a:0a:7e:87:45:f8:1e:aa:97:c3:42:d5:63:7c:bb:e8:
38:44:0a:f8:02:67:6f:eb:60:84:41:40:d4:28:f7:5f:13:45:
0d:7f:99:40:4e:92:0e:10:fe:94:0c:6d:f5:7e:aa:e9:9e:24:
35:84:a3:7b:ff:78:d2:dd:ec:9b:41:42:88:dd:7b:57:33:0c:
0d:c8:a3:7a:a4:6b:c3:4a:54:b7:dd:b5:79:ed:f7:70:4b:11:
dc:58:e9:b8:a5:e1:52:8b:8d:37:27:98:97:d5:53:c4:bb:df:
82:e8:cb:16:91:b1:30:f9:f2:6f:5b:5e:a6:b1:ee:60:b6:ba:
15:24:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:38 2025 by rpki-client