Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json)
Hash identifier: cuj/xx1iCZEvjZfLxQ6H9SsFyZ4Rkyg4th3lIh46PC4=
Subject key identifier: 3A:37:F2:20:1B:85:A8:E9:B1:5E:E6:CE:BF:E5:64:4C:87:B4:B1:B7
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
Manifest number: 0181
Signing time: Fri 31 Jan 2025 02:56:29 +0000
Manifest this update: Fri 31 Jan 2025 02:56:29 +0000
Manifest next update: Fri 07 Feb 2025 02:56:29 +0000
Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: l3OtQbz51d45NJqm++/SwrrPJ59aLkyvhWHyDk1G48c=)
2: 5CBBCAEA90B211EDB7A3471FC4F9AE02.roa (hash: cIYHqsIvScAQ+mY35yRM/LjPG+fPwvQiQvFIiEUmY0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Validity
Not Before: Jan 31 02:56:29 2025 GMT
Not After : Feb 7 02:56:29 2025 GMT
Subject: CN=679c3bdd-0c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:b7:dc:80:ad:a0:ad:59:c3:66:7c:fc:44:
9d:33:de:f2:da:0c:e1:a9:3f:a8:6c:20:0d:ee:d7:
04:77:00:92:79:49:e4:2d:e3:ff:9f:b8:20:39:ca:
83:eb:4e:c7:05:06:fd:eb:22:84:7a:8d:0a:14:a8:
7c:75:8a:d7:11:f2:0b:d7:6e:1e:af:13:a5:cf:e7:
17:5a:6b:56:32:9e:4f:4a:40:2f:8f:88:2f:84:00:
8f:af:49:57:dc:75:4b:d8:35:c9:23:0b:89:8c:f0:
16:fb:c8:fa:56:71:ac:8b:34:21:50:1c:4c:1c:87:
21:1d:5a:8a:8e:bf:6b:d6:fa:7e:af:da:72:b2:e1:
a1:87:1d:5c:5d:a5:47:ec:90:64:44:65:c7:d5:89:
1a:cd:c6:d4:f2:e2:66:49:56:fd:06:57:da:7c:2a:
0e:9e:54:55:c5:7e:42:03:70:e3:b0:e0:4b:1e:cb:
f4:7f:d8:10:2b:f2:71:ea:47:92:c9:c1:6e:f3:f8:
23:f5:80:39:81:3f:f8:6e:20:45:9a:58:17:9d:28:
c1:48:12:82:e0:56:a2:b6:cc:1b:04:af:e7:66:b4:
cd:38:a1:ac:5d:68:2a:df:0b:48:46:db:03:f4:63:
73:55:ca:68:6d:ad:27:b0:7d:02:db:89:bd:47:1d:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:F2:20:1B:85:A8:E9:B1:5E:E6:CE:BF:E5:64:4C:87:B4:B1:B7
X509v3 Authority Key Identifier:
keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:30:2c:ee:4d:dc:b3:cd:32:24:29:15:b4:da:de:27:3d:
e4:63:31:a0:1e:36:81:d8:e7:f2:fb:46:1c:d9:01:0d:e4:8d:
a4:03:47:c2:05:55:81:2b:bc:03:b9:a2:8e:9d:f0:12:53:77:
17:ce:4e:a9:af:10:e0:60:c5:57:73:23:96:71:c8:47:d0:16:
11:11:25:08:58:c0:f3:88:68:a0:91:35:4b:54:60:15:24:a9:
22:5b:c8:51:d2:80:6a:e1:5e:fa:a3:d6:9b:af:53:55:2b:a5:
1f:b4:df:e9:34:1c:fd:1b:bc:b0:76:1a:87:e4:f3:72:d9:3a:
3d:69:49:b9:a3:c4:59:4e:b5:fa:d8:42:13:71:12:4b:87:64:
e3:5d:1a:18:79:e2:c9:87:7c:2e:8c:5a:67:9f:8b:84:53:ea:
ab:e5:65:a9:f7:6a:5a:3d:8e:9f:32:85:6e:49:fe:57:25:5e:
a1:76:8b:f7:05:40:79:80:0e:93:47:4d:79:02:1d:9c:7a:35:
c8:db:1c:71:f9:8a:aa:9f:7d:94:d6:64:8a:e1:2c:c1:6d:fe:
8a:ad:d4:b9:4f:80:06:fc:ae:a4:bf:9d:c3:0c:c1:01:8f:c1:
d4:fc:a2:b7:e2:19:97:b1:2e:04:87:c5:bd:dc:91:a2:f0:bb:
ad:01:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:30 2025 by rpki-client