Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json)
Hash identifier: waLsUZp+g+T4IW97zajlqZypjVFuhzWUGXP9JAIqpC4=
Subject key identifier: 9F:F6:57:F2:39:53:2C:82:AA:C9:05:6E:F2:0F:DC:5B:AD:43:E7:40
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 00:45:43 +0000
Manifest this update: Fri 31 Jan 2025 00:45:43 +0000
Manifest next update: Fri 07 Feb 2025 00:45:43 +0000
Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: hHha49ydKfRJELBlfPbD93VH7spHC293brSBMeHPwrs=)
2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=)
3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Validity
Not Before: Jan 31 00:45:43 2025 GMT
Not After : Feb 7 00:45:43 2025 GMT
Subject: CN=679c1d37-2aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:d5:cd:09:94:46:4c:65:ec:fb:a8:4b:bf:
88:fd:4b:fa:ac:48:5c:0e:79:fa:27:3d:d4:d1:df:
51:eb:74:62:52:1e:89:7e:13:c1:15:6a:de:e3:8d:
d8:89:7c:dc:68:ec:31:32:01:63:1b:a7:0e:13:04:
3e:bc:ce:95:bb:5e:db:ff:32:75:67:e8:67:b4:63:
5c:43:b5:fb:10:2d:90:cc:6b:db:d9:c4:c6:36:90:
53:20:81:5e:d2:eb:9e:50:67:cc:9d:68:68:c3:40:
c4:40:4f:9a:30:52:af:c2:a5:df:75:66:9d:6e:5d:
f9:0b:63:34:cb:0f:e9:1d:4e:a5:80:e6:78:ae:eb:
a3:a7:d8:40:b9:21:c8:9a:41:aa:6f:f2:3a:f0:a5:
c7:dd:16:64:fc:e7:2a:0b:32:a3:5c:32:77:bb:76:
01:c7:78:b9:a5:98:7c:cf:56:81:22:d6:34:1f:9e:
54:02:d5:34:43:46:94:dc:54:a0:1c:80:5c:f2:4a:
c5:4d:de:d3:93:b8:dc:e1:4c:0a:71:71:d5:3c:57:
27:29:76:04:b4:71:92:6e:c8:e1:0e:dd:be:61:0a:
94:d9:0b:a4:43:c6:c3:5f:35:2a:80:d3:e0:75:7f:
2c:a1:22:ac:2a:a2:a4:29:24:e6:21:dd:a1:ab:fd:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:57:F2:39:53:2C:82:AA:C9:05:6E:F2:0F:DC:5B:AD:43:E7:40
X509v3 Authority Key Identifier:
keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:9a:31:92:d8:a7:c9:65:78:a8:7f:5f:10:8f:d1:29:5c:f8:
2c:ed:9a:3d:4c:7b:a0:c1:ef:2c:6a:02:0d:a8:ac:0c:1b:2d:
83:29:73:87:a6:d7:a2:d9:d8:61:2d:ab:77:bb:8e:15:c9:dc:
7f:72:9d:b2:5e:52:b7:4e:42:96:56:d7:f0:9c:c5:4a:e4:0f:
77:7e:8a:73:a5:5a:6b:29:cd:f1:3a:76:f2:57:e2:2e:58:62:
c7:dd:ad:70:91:32:96:ed:70:dc:f1:17:66:a1:47:01:b5:84:
c5:90:ba:c6:d0:29:b6:13:fe:a4:87:46:af:73:55:00:5f:5e:
84:32:b0:fb:71:9a:ba:f2:62:3a:f3:3a:97:6a:66:ce:0c:42:
0b:40:fc:6d:04:7e:73:ff:a0:86:52:b5:8e:bd:64:1a:5d:72:
e4:3c:36:d2:19:36:b9:aa:6c:07:e7:01:cf:49:9a:b9:06:76:
31:f6:89:3b:b3:d9:df:9b:5e:68:48:44:ef:c1:46:48:30:a7:
0d:cc:65:cc:20:fc:c1:e6:86:81:b1:9e:c3:fa:f1:af:72:b7:
86:06:af:bb:be:56:ae:a3:ae:39:3c:eb:28:20:eb:df:7e:94:
b5:37:31:d0:d7:46:d3:92:38:b5:e7:c4:3c:08:27:d9:6d:e9:
1f:48:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:44 2025 by rpki-client