Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json)
Hash identifier: k8MlfDyr1yJ0iajxATS8y+O07YpKU42jTLurY5RmYPY=
Subject key identifier: 3A:7A:E5:AE:35:4F:3A:E6:95:5F:4E:20:D1:A0:7C:DC:97:3C:CD:AA
Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
Manifest number: 0104
Signing time: Fri 31 Jan 2025 04:08:27 +0000
Manifest this update: Fri 31 Jan 2025 04:08:27 +0000
Manifest next update: Fri 07 Feb 2025 04:08:27 +0000
Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: q7zqNlR4MeqJIFrvW/rTMMRBIzMWESSdmtsB3041nDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0
Validity
Not Before: Jan 31 04:08:27 2025 GMT
Not After : Feb 7 04:08:27 2025 GMT
Subject: CN=679c4cbb-d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:c5:d8:30:d6:cf:0b:a0:c1:37:59:d0:98:
70:0a:83:99:de:46:bf:2a:b2:6f:16:01:d9:1d:45:
01:09:c3:6a:df:67:33:9d:86:a9:9b:7a:f2:c6:0f:
02:24:48:77:e6:24:c1:d1:0c:f0:f1:54:59:7c:ee:
d2:7c:2e:d8:88:7f:ba:eb:f1:9a:91:fd:38:d7:13:
25:75:4f:27:b6:2a:dc:fe:fe:04:6c:41:9b:2f:fb:
51:1c:b5:f0:34:dd:43:84:12:97:9b:25:5a:90:00:
9d:80:b5:12:31:02:cc:5b:1d:b6:e1:5d:d5:12:82:
01:c0:89:85:bc:fa:70:23:f0:46:36:d3:a9:05:af:
b2:bc:a1:f4:8e:09:b5:a7:c2:db:df:56:c0:bb:95:
7e:49:1c:85:59:05:b5:19:f1:1e:5f:a3:3c:0b:d8:
88:40:92:47:b0:dd:2e:5f:5f:d1:0e:77:de:6f:1b:
26:94:53:9e:5a:13:17:e1:b9:34:9d:33:4c:1d:7c:
40:a7:d3:e5:df:a2:55:3b:e2:33:61:12:10:a8:f8:
43:d4:fd:f2:a6:16:c5:97:a1:09:81:49:c8:3b:9a:
09:70:76:b7:64:d9:cc:5a:74:d2:53:61:cc:98:90:
98:4e:65:95:eb:23:0f:98:75:70:28:f4:ac:73:91:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:E5:AE:35:4F:3A:E6:95:5F:4E:20:D1:A0:7C:DC:97:3C:CD:AA
X509v3 Authority Key Identifier:
keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:32:1a:39:71:fe:2a:a2:1b:53:db:4d:c7:9e:e6:ab:82:
80:b2:45:8c:50:35:af:73:ba:f2:98:db:34:df:fc:44:14:01:
37:1a:22:b9:7f:fa:13:26:2f:df:d9:af:ad:ee:de:41:eb:dc:
13:c6:96:48:25:16:3b:64:4f:b8:69:ab:93:25:b2:b7:91:05:
e5:e9:fb:4d:7b:8f:08:0f:5c:10:01:b2:9d:e1:01:c1:2d:83:
8f:00:8e:9b:95:ef:7f:17:96:aa:49:95:b7:0a:42:ab:01:26:
db:73:23:ff:85:3f:28:62:8f:39:95:fc:e1:fc:91:7a:cc:28:
8c:c3:58:b7:46:81:83:d3:19:e7:ca:1b:be:8a:a9:ad:b3:99:
60:dc:b0:2a:9c:fb:ae:54:f8:b7:78:0d:00:ac:a1:28:f3:aa:
33:ed:5b:5e:25:86:d1:05:7e:dc:e5:32:4d:ca:7a:78:c8:67:
a1:a0:44:32:6c:86:e9:e5:6c:73:25:4e:80:7a:a0:fc:bd:08:
cb:84:55:9f:02:62:e0:ad:b9:cd:1b:33:a4:11:d3:ce:e6:a9:
f2:5b:80:27:47:2e:a8:88:b9:e6:fd:7e:ec:ab:ba:79:65:3f:
51:fb:4c:4c:47:5e:64:b3:e7:8d:86:62:43:2b:14:32:ca:d2:
42:4a:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:44:55 2025 by rpki-client