
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json)
Hash identifier: 5MttBd2/uN64xNJd1FrRWX1nIQ/J8DtRoXNkRFkcPmM=
Subject key identifier: 9A:63:F4:73:F8:76:F7:BA:DC:6E:C6:4F:CC:0B:89:6D:C2:A1:F7:F8
Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Certificate serial: 14EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
Manifest number: 14E6
Signing time: Fri 31 Jan 2025 16:49:37 +0000
Manifest this update: Fri 31 Jan 2025 16:49:37 +0000
Manifest next update: Fri 07 Feb 2025 16:49:37 +0000
Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: szbyMIGxAdMex7f+otVz4Yn/tKja37lElIe1rJ8wTWs=)
2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Validity
Not Before: Jan 31 16:49:37 2025 GMT
Not After : Feb 7 16:49:37 2025 GMT
Subject: CN=679cff21-0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:ff:8b:64:85:02:53:b3:2f:97:d2:cb:f0:
d7:a7:07:2d:fa:51:e2:d6:37:2b:21:c9:28:39:4a:
7d:28:3c:84:02:5e:4e:e8:a3:60:6c:8b:e5:ff:bd:
43:fd:bc:db:52:64:41:36:e0:45:dd:6e:a6:96:e1:
61:06:33:4e:62:8e:ba:08:41:28:a2:84:42:28:e9:
29:0d:0e:83:10:26:72:b6:2a:14:c2:7d:6a:92:a3:
a5:7c:bd:94:a1:c5:d7:6a:60:80:f7:ef:eb:46:61:
70:ce:80:bd:d8:79:8c:b6:2a:6b:99:6f:ef:f1:d2:
2b:8e:49:27:79:75:12:8c:ad:54:50:df:0e:e3:51:
82:2e:c0:6a:3f:a5:87:bc:cb:d4:67:cf:5f:e9:1a:
05:65:a3:cb:1d:7b:17:62:80:c2:3c:7a:86:be:41:
c4:ce:3e:23:02:37:2a:fd:c7:51:16:7e:2b:20:3e:
10:87:d8:12:db:f8:f2:93:fe:f6:f9:8d:97:6d:6b:
75:9a:6f:07:cd:7b:cd:e8:db:02:2d:81:79:cb:fd:
30:39:d1:0e:08:97:2b:bf:83:ce:60:76:2c:c0:0a:
14:c9:ea:55:60:24:34:ff:05:ca:a9:5e:c3:0f:0c:
9e:c2:b7:de:ba:12:22:f2:75:6f:13:a8:8b:df:6e:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:F4:73:F8:76:F7:BA:DC:6E:C6:4F:CC:0B:89:6D:C2:A1:F7:F8
X509v3 Authority Key Identifier:
keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:25:16:5d:13:e0:c9:2e:b2:08:ac:b8:4a:79:cf:c0:27:
87:29:23:60:12:f0:f7:8a:a7:22:a9:32:f8:38:d9:44:80:e0:
f9:5a:0c:89:4f:fe:91:a3:6d:48:64:a1:c8:29:b1:08:59:fe:
09:0b:ea:90:90:d1:a5:90:e2:7f:78:29:63:aa:f0:74:fb:fb:
04:ce:ac:c5:df:20:6b:b2:ca:06:2a:be:86:5c:55:65:54:26:
6a:e3:21:dd:f1:df:13:d4:9f:cd:76:4b:ab:49:f1:02:a1:ae:
0f:cc:5f:67:2a:9f:02:51:78:fa:d6:97:cb:93:6a:fd:ad:f7:
34:8f:76:09:04:64:7f:8a:4f:64:a5:85:5f:72:d6:cd:27:ee:
b6:fe:d1:05:b6:da:c0:e1:47:28:7f:4f:a0:77:df:fe:57:51:
77:d2:62:e9:df:a7:b1:c1:92:dd:ca:bc:68:28:23:d0:47:2d:
a2:11:85:99:0d:19:5f:2c:e9:e3:00:35:6b:76:f9:a3:b2:bd:
e5:ae:3b:1b:fa:56:c9:c4:19:80:08:2d:1d:f3:9d:ae:29:ce:
fd:f8:9a:29:2d:3b:4d:9f:a9:d8:22:31:7b:9f:ac:f7:1a:d2:
48:49:4f:44:f7:95:24:07:9f:f1:31:bb:ee:69:57:f4:46:d2:
61:16:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:33 2025 by rpki-client