Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json)
Hash identifier: 7zvHTjwAwvCb1vzXd+4YznbNspQQMnqGU9Q+JwcIJig=
Subject key identifier: 56:9D:E1:36:D2:CB:28:08:C9:B8:F8:E1:8C:87:DA:C1:11:FB:AD:EA
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
Manifest number: 024A
Signing time: Fri 31 Jan 2025 01:55:31 +0000
Manifest this update: Fri 31 Jan 2025 01:55:30 +0000
Manifest next update: Fri 07 Feb 2025 01:55:30 +0000
Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: iP5zfKIdl8X29Y6lL+xbgzP9pDUnto2D0cKIX4k9GxE=)
2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: w/vd8cJquU/77tUydhBl7y4vX7K0tJ56IOJFeJTKQQY=)
3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: aWVOZdqCRpaD5wVJp7PQwGvmT4WvDuk+Zr3vN2zui6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Jan 31 01:55:30 2025 GMT
Not After : Feb 7 01:55:30 2025 GMT
Subject: CN=679c2d93-1101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:19:97:34:1d:27:ca:03:90:3c:82:5a:d2:
c3:2b:94:f5:f1:61:d1:46:00:08:42:a6:f0:d7:e1:
b8:da:2c:de:e5:56:c7:f8:91:2e:66:cd:38:11:0c:
9e:7d:99:7d:1c:c7:5c:ee:24:3f:a8:bf:69:a9:f1:
e7:fd:e0:d9:23:4b:be:03:74:dc:ed:a2:c0:a6:1c:
d1:a1:12:1e:e4:bf:f9:08:1d:6b:d1:89:8f:05:c7:
5e:29:bc:ea:2b:c9:3d:bc:05:97:a8:5f:a6:d8:fd:
d9:29:1a:d0:55:45:34:33:c1:e4:61:78:73:b3:3a:
89:ff:5a:ed:18:96:c7:49:91:d3:4a:48:0a:c2:2e:
02:76:75:f2:cc:6d:24:62:ff:86:71:5b:26:31:0b:
6e:38:9f:f4:5f:d1:66:f7:71:23:5c:cd:a0:90:3b:
5b:0f:01:4d:27:a5:e4:f5:4a:d8:bc:2a:ff:91:00:
80:36:39:b3:a4:28:4d:52:b9:30:5b:b0:e0:ba:26:
6c:01:4c:38:28:8e:d2:57:34:31:0c:6d:ad:46:df:
f8:00:1a:fc:7d:08:32:e7:f0:80:b7:4d:2e:2b:9a:
3d:04:bb:08:ee:d2:7c:1b:e7:87:ba:e5:8d:3f:b2:
0e:f2:68:cf:97:09:bd:85:d3:59:50:01:f9:1d:c3:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9D:E1:36:D2:CB:28:08:C9:B8:F8:E1:8C:87:DA:C1:11:FB:AD:EA
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:0d:6e:c5:04:5d:bd:9f:f8:9c:25:9c:d3:53:44:a8:69:
29:df:be:2c:33:c2:45:5a:6d:0b:ad:10:a7:11:69:a4:99:cf:
db:3f:8c:aa:dc:4f:b3:8f:13:38:80:59:48:0a:6c:f9:33:48:
51:7b:d6:99:27:30:fc:4c:15:0f:8d:f0:8c:50:af:a9:69:a9:
c5:eb:ef:32:a7:cb:f9:19:e8:e9:7b:e9:43:53:3f:ec:1b:6c:
90:ea:11:cb:97:83:1c:b7:9d:63:c6:b4:a0:dd:93:d6:b9:c0:
10:8b:7d:9f:ad:02:fb:07:3e:c2:ab:61:74:11:1f:dd:c7:ac:
d7:4b:3a:27:5d:3f:2f:89:3f:ff:2c:4c:44:dd:0b:46:39:66:
13:7a:c5:86:36:ff:b1:fe:6f:86:85:ce:e1:aa:c5:c7:16:db:
2a:e3:d6:6a:a1:ea:53:c7:61:20:21:b0:8a:58:a0:72:91:0f:
f7:c0:c5:bf:07:35:4e:b3:cf:6d:1c:90:bd:93:2c:14:f7:f5:
1e:0c:32:9c:44:5c:83:e3:ff:42:1e:cd:b2:66:58:86:1f:d0:
3d:5c:21:e0:aa:d3:72:ec:59:07:a8:0a:6b:0c:9c:4d:20:11:
d0:97:16:64:ae:00:0f:00:d7:45:a5:be:02:b5:4f:02:30:ee:
6e:ad:59:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB
QUYyNTMyNzQwHhcNMjUwMTMxMDE1NTMwWhcNMjUwMjA3MDE1NTMwWjAYMRYwFAYD
VQQDEw02NzljMmQ5My0xMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWkZlzQdJ8oDkDyCWtLDK5T18WHRRgAIQqbw1+G42ize5VbH+JEuZs04EQye
fZl9HMdc7iQ/qL9pqfHn/eDZI0u+A3Tc7aLAphzRoRIe5L/5CB1r0YmPBcdeKbzq
K8k9vAWXqF+m2P3ZKRrQVUU0M8HkYXhzszqJ/1rtGJbHSZHTSkgKwi4CdnXyzG0k
Yv+GcVsmMQtuOJ/0X9Fm93EjXM2gkDtbDwFNJ6Xk9UrYvCr/kQCANjmzpChNUrkw
W7DguiZsAUw4KI7SVzQxDG2tRt/4ABr8fQgy5/CAt00uK5o9BLsI7tJ8G+eHuuWN
P7IO8mjPlwm9hdNZUAH5HcNmvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFad4TbS
yygIybj44YyH2sER+63qMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4
RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC
T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4xg1uxQRdvZ/4nCWc01NEqGkp374sM8JFWm0LrRCnEWmkmc/bP4yq
3E+zjxM4gFlICmz5M0hRe9aZJzD8TBUPjfCMUK+paanF6+8yp8v5Gejpe+lDUz/s
G2yQ6hHLl4Mct51jxrSg3ZPWucAQi32frQL7Bz7Cq2F0ER/dx6zXSzonXT8viT//
LExE3QtGOWYTesWGNv+x/m+Ghc7hqsXHFtsq49ZqoepTx2EgIbCKWKBykQ/3wMW/
BzVOs89tHJC9kywU9/UeDDKcRFyD4/9CHs2yZliGH9A9XCHgqtNy7FkHqAprDJxN
IBHQlxZkrgAPANdFpb4CtU8CMO5urVla
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:12 2025 by rpki-client