Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json)
Hash identifier: QLiE83oVeJY0SRdIc6H2xOXyWPMF2to3vwi/cyA62wk=
Subject key identifier: A3:C1:86:E2:50:F3:39:A5:E6:A5:E7:09:CB:D8:F7:B7:01:55:25:33
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
Manifest number: F0
Signing time: Fri 31 Jan 2025 04:29:25 +0000
Manifest this update: Fri 31 Jan 2025 04:29:25 +0000
Manifest next update: Fri 07 Feb 2025 04:29:25 +0000
Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: v9OSWo79QpVz6fmfA5tKvIllLhRrOXaavf77701rCvg=)
2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: voOu3FS6atcTzQMFzUe36XFmwRTAVJhuDBd+mVShCxg=)
3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: BA5CliOHfNpPWNOYw+bi2ZaU/a9tMNZNL0MSCuu6uM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Validity
Not Before: Jan 31 04:29:25 2025 GMT
Not After : Feb 7 04:29:25 2025 GMT
Subject: CN=679c51a5-cd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:1c:6b:26:c6:86:e4:c4:8f:91:63:95:b3:
14:21:f7:25:98:45:e8:0e:e6:b6:ea:45:c9:80:77:
7f:ac:31:e2:7a:4e:ae:85:6d:26:e3:f2:b5:9e:fc:
83:30:72:aa:65:ea:42:41:67:70:b3:4e:4b:d4:2e:
76:d7:d4:6e:73:ee:e6:14:0f:72:46:f1:a1:ae:ad:
44:b4:16:b0:65:bb:ce:26:59:90:ae:98:e5:e0:89:
39:fe:5d:6c:8d:45:33:d0:88:b2:1e:97:2d:dc:51:
ee:b0:4e:f7:b0:16:24:1a:e5:aa:9f:9f:c3:f3:d5:
5c:ef:16:ee:77:cd:ba:a3:3c:d8:a2:50:38:6a:3a:
8b:b4:e7:72:4f:be:ad:6c:c6:aa:db:27:79:18:3f:
31:7e:dd:01:a3:d5:61:5c:c4:0a:83:78:32:9f:b9:
61:b8:18:57:1b:30:6b:95:58:da:9f:cc:7e:e9:7b:
a9:a5:7f:e1:1d:34:88:30:8c:c6:41:cd:41:59:67:
10:a9:e4:c2:39:2f:61:fd:73:32:6c:aa:4c:f1:77:
d2:4c:85:7c:bb:2d:70:04:92:a3:83:2d:7b:9a:fb:
cf:5e:e3:d5:f8:d5:6c:f2:92:5e:ab:62:45:bb:19:
46:c6:64:c3:0f:9c:72:44:59:7a:69:80:c8:73:05:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:86:E2:50:F3:39:A5:E6:A5:E7:09:CB:D8:F7:B7:01:55:25:33
X509v3 Authority Key Identifier:
keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:f3:1b:e2:18:82:5b:a2:fd:5d:53:93:63:c3:a9:0e:24:
f9:67:26:7a:b6:f7:25:50:f9:1c:41:95:56:90:fa:6e:4d:dd:
61:14:06:2c:68:4f:4b:41:dc:d1:09:21:e8:34:56:fc:21:d3:
13:1a:02:33:f9:25:ec:b9:04:a7:98:70:1d:73:a2:02:78:0d:
a6:52:fd:5b:4f:47:22:d2:bd:a3:af:3a:e8:c9:b5:60:d3:be:
48:fa:aa:7a:67:24:d6:82:0b:8d:44:23:9e:a8:ea:4b:ad:fd:
1d:10:12:45:41:4a:7b:f9:c8:da:e4:97:19:50:bc:3c:ce:91:
92:3a:8d:d2:5a:75:44:5f:a4:aa:2f:24:c5:8c:ae:cf:2c:12:
31:4b:90:fd:93:c7:62:98:e0:fb:d5:4b:c4:d6:62:b8:d9:ec:
08:2e:c2:21:57:8b:dd:9c:f4:d6:39:98:a2:ea:c5:85:b9:c9:
1e:08:f8:c4:9b:2c:91:af:50:eb:20:0f:15:dc:fb:5c:66:7c:
42:b8:dc:2f:b7:48:aa:e7:cf:91:a5:16:0f:f9:21:b6:b3:81:
5d:dd:36:dc:63:cf:4a:cf:61:2a:5c:c4:3c:31:b8:c7:3b:f7:
7e:14:37:f3:dc:df:17:c7:85:41:72:d2:a2:a1:d8:53:11:f1:
b7:b6:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:12 2025 by rpki-client