Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json)
Hash identifier: DjIfEY/ZNS6BHvl/s2rijdXnZvRWgT78iswv4RL12Yw=
Subject key identifier: 7B:83:2D:B3:C5:7E:24:E7:26:D8:35:64:01:BB:AD:F9:C6:EF:64:D5
Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
Manifest number: 01B4
Signing time: Fri 31 Jan 2025 02:22:15 +0000
Manifest this update: Fri 31 Jan 2025 02:22:14 +0000
Manifest next update: Fri 07 Feb 2025 02:22:14 +0000
Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: WEMow1p4vgNMzaXzvMaPglqxaajyWC9dn+4iI/eYTCM=)
2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: HSOz9KJtzn5XtZJbkSZurU8JjbVu9jhgYH7lEouZYZw=)
3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: Qcs39Vrzh4Mv2HdysBKYGDoDMMoidhqC9JSfa2ecdPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6
Validity
Not Before: Jan 31 02:22:14 2025 GMT
Not After : Feb 7 02:22:14 2025 GMT
Subject: CN=679c33d6-9012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:56:ef:43:45:bc:4f:9c:cd:96:03:7a:e8:
4d:f6:eb:b5:f0:02:a5:50:8f:2d:5b:b7:2b:dc:5a:
c8:35:a2:9e:5c:18:b0:86:d2:f2:71:fe:7c:e2:f9:
f2:c8:d0:47:0b:0c:dc:c7:a6:d9:30:12:fc:7b:79:
1b:e1:87:02:51:3a:0b:a6:10:7e:53:f3:24:25:80:
35:08:ce:05:7d:5f:62:ba:63:68:99:3e:86:cb:93:
2c:2e:25:14:32:b7:2f:d3:ed:d3:ad:e4:35:39:ca:
b5:06:60:51:83:01:2d:c7:bc:41:12:d7:97:0e:14:
79:23:1c:dc:a0:8f:3d:26:93:e0:69:b9:d6:21:db:
83:57:65:3f:92:39:38:b8:7c:3f:ff:e7:78:53:d1:
83:90:90:e4:63:74:95:85:02:d5:86:6f:37:4f:41:
d1:93:f3:43:86:36:ba:79:61:86:a6:f7:bb:fa:ea:
72:6b:33:c8:19:44:b2:af:1e:fe:8f:2a:74:60:e7:
7c:77:f5:b3:94:84:13:c7:70:24:4f:6e:57:9c:d0:
09:6a:4f:c8:d9:8a:73:f9:f4:09:ee:1c:20:6c:ec:
a4:2c:56:20:a7:d4:26:8b:80:ed:6f:da:2e:6c:8c:
84:22:7b:21:ca:43:26:30:ab:1a:31:50:5e:15:0c:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:2D:B3:C5:7E:24:E7:26:D8:35:64:01:BB:AD:F9:C6:EF:64:D5
X509v3 Authority Key Identifier:
keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:60:32:eb:6e:ca:a2:81:ba:43:eb:ff:7d:8e:86:d1:28:07:
0f:13:6d:1a:cb:10:ff:62:b1:ce:de:49:b9:7c:62:60:07:f5:
21:4b:ed:7e:9e:c3:70:23:2b:5b:46:6b:3d:8f:f5:97:40:7a:
5f:d1:fe:0c:eb:73:52:9a:60:50:ca:ad:4f:42:91:1c:a6:e5:
5d:84:c9:ed:51:4e:4c:db:22:da:76:39:e2:2b:e6:87:02:62:
a2:56:49:8c:69:82:5b:18:f5:d5:aa:32:b9:10:5e:5a:e8:d9:
fd:30:ec:77:32:12:fe:af:03:73:18:50:2e:69:8e:78:c2:21:
c6:af:23:37:cf:a0:d2:5e:d6:6d:08:7c:0c:74:ef:0e:3f:a8:
19:e5:a2:d1:d8:13:e3:67:9d:62:a1:07:e2:64:fd:e0:67:79:
85:d4:58:a5:6e:4e:2b:f3:07:30:f0:a4:09:87:d9:6e:02:d2:
2f:8a:c2:0d:0f:3b:94:b5:ea:ea:44:a6:49:81:20:96:58:fb:
17:70:f1:27:a3:f2:b1:ae:95:ce:7a:5f:ad:c5:c8:c2:e6:17:
81:ea:21:9b:54:6c:65:a0:5e:82:5a:1b:4c:3e:c3:6f:ab:30:
37:a0:02:03:d2:6e:31:ba:4c:e1:9e:e3:0e:56:e0:a1:05:25:
ce:05:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:38 2025 by rpki-client