Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier: g8RP4sZmSOrThYtnPzzWI3LVS5iTOFLIxCOyYnJDYiE=
Subject key identifier: D1:AE:27:B4:DA:00:45:F4:C1:23:D1:FD:D3:39:5E:AA:EF:92:B1:D2
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial: 1A48
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number: 1A41
Signing time: Fri 31 Jan 2025 15:44:23 +0000
Manifest this update: Fri 31 Jan 2025 15:44:23 +0000
Manifest next update: Fri 07 Feb 2025 15:44:23 +0000
Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: xXNxqLErcaCtQpsp2V9vbVBcNLHC0HXcLsA0BOa7hO4=)
2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: EvR5gfpmDfAVmSaNBVyf31LRk9wTqTU6OTSsCqxA5UQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6728 (0x1a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Validity
Not Before: Jan 31 15:44:23 2025 GMT
Not After : Feb 7 15:44:23 2025 GMT
Subject: CN=679cefd7-f7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:7b:b6:eb:42:04:af:71:ee:77:fc:31:13:
49:27:af:d0:09:6d:d4:07:76:ed:07:f8:3e:65:c7:
26:3b:e1:e4:82:36:ed:c1:ed:f8:ae:11:4b:66:7d:
4e:8d:64:a0:d9:ff:a3:72:34:d3:54:a5:e4:47:67:
1a:37:27:19:d2:59:be:84:01:47:f2:ae:ef:a8:54:
30:b1:8c:6b:21:5a:d3:d9:ff:c9:23:20:76:9d:8f:
fc:eb:19:82:4f:e1:09:f4:89:2c:0c:2e:c8:e7:3b:
d2:82:62:3a:86:36:da:85:21:d9:a8:2b:b0:45:2c:
ce:dd:d8:d0:2f:a7:a8:59:a9:27:54:a5:0a:8e:64:
2d:8e:f2:1b:45:87:3f:ac:c3:a9:08:da:27:8d:2c:
af:6d:6a:89:2c:67:c7:41:ad:cd:b0:5c:0c:b4:5c:
6e:7c:4c:43:8c:b8:57:31:ea:c5:44:ed:1e:2b:f5:
95:a4:40:cc:6b:0f:78:b5:67:9e:bd:05:dd:f8:c9:
0b:ad:69:34:f8:b6:e4:93:c2:3f:cd:a8:eb:ef:04:
ee:1a:ea:f8:bc:f0:76:f1:77:f6:c1:d0:e0:65:bf:
4b:fa:e1:2b:14:02:db:64:5f:3e:45:02:d1:73:fd:
a5:80:22:c3:3e:52:28:89:aa:19:1c:72:86:9d:1c:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:27:B4:DA:00:45:F4:C1:23:D1:FD:D3:39:5E:AA:EF:92:B1:D2
X509v3 Authority Key Identifier:
keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:88:fe:60:02:d7:22:f2:c7:20:b1:7e:f1:d3:42:10:d8:0e:
f3:e0:38:30:79:9d:dc:98:2f:ef:e0:df:90:c5:37:c8:9b:3c:
84:b3:86:6f:9c:ec:3f:ca:5a:0f:60:f0:6f:0a:0f:9a:a3:6d:
3e:50:dc:62:85:d7:61:c4:09:4f:60:49:05:67:cb:83:bf:7c:
3e:df:03:36:77:4f:25:c6:6d:fa:3c:7b:04:aa:cf:7e:32:68:
74:20:a2:65:d0:59:b6:1a:10:af:83:7a:65:36:90:5f:cc:d1:
dc:67:27:f2:04:ce:cd:c1:51:4f:23:72:41:7c:60:89:d5:b8:
77:da:30:39:10:d5:36:7b:15:96:3c:a3:84:a9:35:b2:8c:6a:
4e:a5:86:02:ea:de:72:f4:9e:42:e4:24:2c:3d:6b:42:5c:54:
2e:93:72:67:ae:13:c9:f6:12:a3:7d:06:21:a3:6f:56:c6:ed:
cb:d6:48:cf:cb:b5:0f:44:71:be:f9:c1:22:ae:32:6c:0f:b0:
33:ef:4a:66:f2:7e:cd:74:5e:51:25:47:d7:8c:1c:6d:b5:8d:
a0:49:46:5f:87:f6:04:93:0c:38:4a:c9:68:1c:2c:41:af:42:
61:6e:a3:f6:e4:d6:32:b8:e6:94:ea:75:ae:71:c9:77:21:9b:
e6:68:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:24:22 2025 by rpki-client