Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json)
Hash identifier: DtowEbgaH1N1gHOcCzX8tICRDnr68yf1wJda06459oQ=
Subject key identifier: 75:05:8D:FA:EB:05:43:F7:27:8D:D1:4F:CA:99:6D:1E:D0:88:B8:43
Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
Manifest number: DA
Signing time: Fri 31 Jan 2025 04:47:05 +0000
Manifest this update: Fri 31 Jan 2025 04:47:04 +0000
Manifest next update: Fri 07 Feb 2025 04:47:04 +0000
Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: TFPa2vcCDPlWVq/ipRgYncf4SJxbpxXXRlbtjrJgL1o=)
2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19
Validity
Not Before: Jan 31 04:47:04 2025 GMT
Not After : Feb 7 04:47:04 2025 GMT
Subject: CN=679c55c8-a75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4c:de:7e:3a:d8:0c:b3:47:ff:70:f0:88:f0:
de:61:d7:29:cb:f8:c7:a4:52:ca:c2:ce:a5:55:da:
a8:1b:9c:a3:82:0a:71:12:88:bb:2c:af:3d:ee:4c:
9b:a9:e7:89:f1:08:2d:d4:7d:a1:ee:fb:69:a5:15:
5c:d2:bd:e1:10:4c:b5:85:83:80:10:61:2c:13:c9:
9a:f7:c4:e7:7a:1e:d2:7b:d3:bb:00:e9:ca:34:11:
ce:1d:1b:b8:82:7a:cb:b7:46:88:d8:34:13:85:b6:
67:0a:fc:47:30:76:3a:44:9c:0a:06:5b:32:02:17:
9e:58:3a:b8:0e:19:dd:2b:25:19:b1:55:68:78:20:
05:7d:73:d1:e5:e8:3c:14:fa:9f:0e:c1:ab:b5:45:
56:82:7c:c9:f6:f1:be:ca:a1:30:cd:b4:8c:0c:f8:
d3:90:cf:01:cd:ed:67:ef:24:6d:8b:1f:69:e2:1f:
75:1b:e2:57:5d:5b:4c:4e:01:a9:9b:76:f7:14:cf:
d1:4d:71:06:e9:2e:57:e4:f3:67:3e:2e:67:ce:23:
db:9c:b3:34:9e:de:08:1c:8b:5c:9b:b4:b2:db:4d:
30:c7:b5:cc:7d:1c:ad:a9:19:ab:96:83:db:13:59:
7d:26:24:b5:5e:41:89:cf:5c:d9:b5:af:2d:0f:16:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:8D:FA:EB:05:43:F7:27:8D:D1:4F:CA:99:6D:1E:D0:88:B8:43
X509v3 Authority Key Identifier:
keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:6d:71:3b:a2:cc:a6:37:17:c9:f5:ab:ff:9f:88:5d:b3:
d9:e1:58:4b:f5:46:70:12:86:3f:67:f8:34:ec:8a:94:48:27:
63:51:2f:95:da:19:cf:26:83:8b:dc:93:55:2f:8a:01:a3:85:
61:8e:14:b0:52:b2:d9:32:4c:6d:3f:94:2a:d6:ff:15:78:ac:
ae:64:62:e4:16:d7:65:a9:b4:71:59:82:5b:46:5b:af:81:38:
04:2a:22:47:de:d5:5b:64:37:69:5c:5f:ea:94:08:d8:60:63:
b6:63:2f:5a:20:75:d5:0a:d3:fd:fe:ca:d2:e0:74:f2:85:d8:
bd:4a:00:ff:1b:af:8b:e9:22:3d:d3:d8:1a:6d:45:66:c0:1e:
cf:bb:21:61:06:0c:de:b7:9b:34:cf:c3:7b:e9:81:ac:d5:e0:
75:da:2e:62:f4:0f:70:72:fe:76:15:23:4d:9e:7c:43:6c:f1:
89:b2:5e:14:c7:1f:66:c6:48:dd:8b:10:bc:2a:55:67:fc:37:
45:b5:7c:ab:0b:ab:ac:dd:46:80:4c:ab:6c:b0:ec:35:29:5c:
6e:19:bb:8a:e4:cb:c0:04:17:b9:80:63:df:ff:50:0a:db:74:
b9:31:dc:d4:97:2b:af:79:f7:f8:d6:63:c1:65:e5:09:94:5f:
2b:29:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:57 2025 by rpki-client