Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier: gl/r5w9obRvYZYrrqJ+dADZY/+oZeUQX+0AtV08m4Eg=
Subject key identifier: C0:43:37:0C:CA:DC:BC:64:30:EA:93:B0:78:9D:3A:A4:BE:12:D4:5B
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial: 1CF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number: 1CE6
Signing time: Fri 31 Jan 2025 16:09:49 +0000
Manifest this update: Fri 31 Jan 2025 16:09:49 +0000
Manifest next update: Fri 07 Feb 2025 16:09:49 +0000
Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: EGHKWdDRX9ljDItOM+3GlKpp/0DmN+SsyI70bAurTc0=)
2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: 5WitENJnrkIaDKSZdGfav4jBMV1MXsoOLjamdvAz9SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7412 (0x1cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Validity
Not Before: Jan 31 16:09:49 2025 GMT
Not After : Feb 7 16:09:49 2025 GMT
Subject: CN=679cf5cd-358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:d3:b5:3a:18:92:bd:f3:f3:36:b1:6e:e1:
f5:05:74:ea:27:d1:a9:67:71:b2:d7:98:e2:96:65:
c5:8e:c6:28:77:64:4c:04:69:7e:a4:02:8b:ee:6b:
93:17:f5:11:fc:da:1f:dc:da:9f:ef:9e:3f:ab:6f:
26:38:68:32:4d:71:20:43:f7:af:27:d0:2c:2d:49:
2d:d2:b5:39:f7:e8:d8:d8:74:db:3a:67:9b:13:19:
e9:ce:d0:40:19:a2:9c:15:e6:b4:4c:32:04:0a:22:
48:9a:7b:5b:09:0d:1c:8b:e1:36:f3:d6:27:1b:79:
82:05:78:91:04:bf:64:41:46:48:59:02:9a:09:9f:
0e:00:b0:23:b6:1d:33:90:bf:c6:ce:55:ab:3e:54:
bb:b5:27:10:9f:17:b7:14:db:28:0d:06:07:23:b7:
a3:3e:ba:88:5d:5d:f2:db:db:2d:d1:a2:52:95:bc:
67:88:02:3c:9d:6f:48:bb:59:9e:6d:b0:2c:c6:b1:
c6:44:96:62:d0:3a:d5:50:e1:fb:c9:2c:51:51:68:
0e:2d:fa:d6:04:10:20:41:ec:bd:72:83:fd:b4:85:
c0:a4:f5:68:7b:3d:45:2d:fd:18:fb:a5:38:f8:dd:
76:6a:aa:e1:c2:30:ba:60:4a:6e:3e:5f:9d:e7:51:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:37:0C:CA:DC:BC:64:30:EA:93:B0:78:9D:3A:A4:BE:12:D4:5B
X509v3 Authority Key Identifier:
keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:45:ea:7f:b2:bf:b5:82:b4:2d:59:02:0c:68:99:cf:a8:89:
84:8b:9a:00:4e:fe:b8:7c:86:ec:6e:fb:86:65:2b:61:e3:1b:
2c:62:eb:27:f9:23:fd:0b:f8:3b:67:dd:ee:6b:de:93:0b:ee:
a4:ce:db:8b:96:c6:d4:e5:a6:2e:4b:f1:a6:c1:ce:5f:8e:a9:
26:e3:0d:8f:07:c5:2c:c7:82:ce:d5:f0:e8:f1:9d:fc:69:17:
47:eb:7a:3d:ef:5b:03:33:ab:36:08:15:16:9b:6a:7d:59:88:
13:5e:a2:91:f7:76:ac:ca:a9:2b:51:b6:93:b4:b9:a6:a0:c9:
87:d2:78:30:7f:bd:cc:f8:1f:3e:73:9c:6b:9f:35:b7:8f:51:
5b:d3:3c:2f:2e:d7:9d:e1:17:31:39:d8:ac:c0:19:98:93:09:
e6:c3:22:b0:f9:bf:f2:62:b2:29:58:40:b8:52:ad:a3:50:f9:
ab:ef:09:16:f1:07:9a:13:ec:e4:6b:8e:59:b8:45:18:d0:52:
c7:ea:02:89:4e:bb:5d:87:bb:3f:52:65:ca:73:05:5f:26:cd:
0d:89:1a:3b:24:41:7d:c7:a8:d9:1b:ec:8f:6d:52:b5:88:dc:
b4:aa:fe:ca:98:7b:30:c2:ea:73:b2:46:31:e5:90:e3:9d:72:
b7:e2:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:58:46 2025 by rpki-client