Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json)
Hash identifier: agBgz+hBlTLtxJWVlp9bVdn+yukSrTVvGF3GhX5jfTU=
Subject key identifier: 85:C4:5E:EB:7F:59:B0:CA:93:7A:F6:47:2C:A1:AC:B2:5B:7F:05:D4
Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Certificate serial: 0C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
Manifest number: 0C21
Signing time: Fri 31 Jan 2025 18:18:41 +0000
Manifest this update: Fri 31 Jan 2025 18:18:41 +0000
Manifest next update: Fri 07 Feb 2025 18:18:41 +0000
Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: p2dzqahciYKE7hPEOEIRUPo67rqBvpQqzxq7sbPLVtg=)
2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: uuWn9T24f2Om0t7b8gCBcBAECx+g28MfpKjTQARLOK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534
Validity
Not Before: Jan 31 18:18:41 2025 GMT
Not After : Feb 7 18:18:41 2025 GMT
Subject: CN=679d1401-f0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:5a:76:cc:9a:3b:a0:bf:93:b7:0c:27:cd:
4a:44:c1:39:d6:a6:52:fd:27:cc:2a:65:04:3a:0c:
cf:ae:7c:e4:39:b3:f2:bc:75:2c:85:f8:7b:69:43:
29:4d:c1:ca:68:eb:c0:35:76:1c:ff:11:8a:84:c7:
61:c0:52:e9:f7:ec:6e:ec:b6:93:57:08:9e:50:83:
5a:ab:76:12:37:fe:b0:7b:86:8a:9a:bd:36:31:21:
22:69:0e:89:69:72:49:8b:03:fa:3a:63:27:37:e5:
39:b4:75:8a:d2:31:0c:00:2a:2a:b6:85:f9:c7:4d:
1e:eb:89:4e:e7:83:1e:23:6e:c2:7f:36:1a:ff:9b:
60:6f:70:6d:8c:2e:c0:96:af:45:1b:f6:22:af:fa:
50:6a:5b:4d:94:b0:e3:2a:19:67:4f:56:a6:f6:4b:
67:a2:11:23:e5:c7:47:a0:56:d0:56:48:53:45:d9:
15:43:bd:b6:eb:ba:a3:2f:0b:ef:89:a7:00:45:55:
00:fe:b4:d5:4a:76:2a:cd:be:e1:50:9f:cf:83:6c:
b8:f4:18:93:3c:9a:87:c1:ed:2b:97:04:b9:a4:ac:
db:21:af:17:3c:c6:c6:3b:56:9b:03:3e:e4:91:7d:
e9:e1:0e:bc:be:4d:01:33:ae:24:c5:48:a1:87:d1:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C4:5E:EB:7F:59:B0:CA:93:7A:F6:47:2C:A1:AC:B2:5B:7F:05:D4
X509v3 Authority Key Identifier:
keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:fc:96:f2:81:a8:9c:14:c7:56:4c:7f:f9:a7:66:e4:8d:
c3:8d:46:4d:7e:0a:8d:c7:d5:c4:9d:88:cd:30:a0:93:e0:a1:
83:1b:49:cd:47:31:15:74:0b:bd:91:aa:f5:9d:1b:ab:ca:ba:
8c:ba:e2:4c:76:17:ae:43:dc:3f:65:95:9b:c6:65:10:bb:36:
45:89:44:cf:c5:1d:cd:14:48:c5:44:50:d0:a3:e2:16:b0:72:
fa:34:f0:a9:c5:b4:e1:96:85:b8:e7:f9:df:a1:60:92:dc:35:
18:16:70:b2:d3:07:cb:ac:0b:b7:be:9c:19:f1:b6:57:e2:4b:
f5:51:be:47:57:16:de:6b:0f:ea:83:43:a9:0d:13:93:27:8e:
86:f9:5c:78:fc:b9:f6:32:df:24:e1:e8:86:ff:19:32:c1:33:
2f:49:01:46:b4:00:72:46:2f:9e:16:69:0c:2e:9f:9b:b3:45:
f6:93:78:00:c4:13:e2:c7:1b:d1:20:ab:94:21:b6:75:46:8e:
b9:e0:78:4c:a9:66:55:f6:c1:31:0c:a4:01:8a:a5:66:d6:db:
38:1c:8b:11:0a:a0:bc:f4:3c:65:74:a4:c3:cc:b4:a5:9d:67:
8e:96:3a:83:f5:48:16:90:c3:09:3b:4e:52:a4:51:cf:85:da:
74:c3:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:48 2025 by rpki-client