Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: muxhTd7cK5ev/q5CIbhFN6+sVxfNvA3qRRLYvG+m5FI=
Subject key identifier: 8F:1E:08:FC:EC:2C:2B:09:8E:E4:5C:37:6D:BA:7C:F5:C1:EA:E0:1D
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 2E
Signing time: Fri 31 Jan 2025 06:44:23 +0000
Manifest this update: Fri 31 Jan 2025 06:44:23 +0000
Manifest next update: Fri 07 Feb 2025 06:44:23 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: dWizuzUHII1NimfJv4DJj9YOpnTs1V7PGsTCukVHHsc=)
2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: jqs0ABnXsd8cXcdu4xuE6qRkZ64UI3BOhOOWWgnZ0J4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Jan 31 06:44:23 2025 GMT
Not After : Feb 7 06:44:23 2025 GMT
Subject: CN=679c7147-d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:cc:e8:b2:16:63:8d:14:bd:eb:f0:40:6f:
42:28:2e:25:ce:3b:df:e1:22:67:9b:f4:12:c6:fc:
27:35:54:25:9d:f6:66:fb:70:07:87:14:13:10:86:
47:e3:15:15:89:02:78:ed:ac:ce:0d:c7:24:d6:61:
20:e9:3c:b2:dc:e0:13:41:0c:27:0b:63:5e:3b:6a:
05:5c:51:e4:7d:c2:64:4c:84:4c:d8:29:12:a5:52:
fe:07:e4:ec:f4:9a:91:08:3d:05:54:39:f7:fe:55:
a8:4d:a3:f1:4f:10:5a:9f:f0:53:39:eb:e9:f2:c2:
e8:54:19:06:b3:2f:9a:e4:8b:1b:93:44:b9:d3:93:
72:f4:70:53:f8:00:ab:cf:2f:9a:7c:10:13:4c:50:
bf:1d:b4:e7:af:69:f1:7f:c5:52:0b:71:6d:61:85:
0c:56:95:b4:ee:1b:c0:78:d0:0e:9d:e8:04:a1:bf:
0e:a6:4e:77:0e:63:cc:99:5a:b3:80:8c:57:a0:85:
56:4a:bb:68:43:6e:4b:a3:b8:63:d7:a0:4b:c9:19:
ef:de:6d:24:bb:ec:4e:c0:00:62:c1:d5:22:07:36:
a9:0a:05:78:5b:1d:5b:19:3b:f1:2c:8a:6f:eb:ad:
71:ff:64:67:8e:cf:99:ea:65:99:e1:b0:31:aa:ef:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:08:FC:EC:2C:2B:09:8E:E4:5C:37:6D:BA:7C:F5:C1:EA:E0:1D
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:60:c1:ba:80:4c:5e:57:3a:97:13:0a:51:fe:9b:84:a2:
36:8a:e9:a4:0b:d2:93:1c:cb:fe:12:3e:8a:95:3a:45:a3:1e:
5f:87:3e:69:ab:46:af:f3:ce:fb:d0:f2:30:ac:d4:1b:77:d8:
7d:a4:8c:e2:e0:03:42:73:7f:7d:98:ec:80:c4:90:4f:f9:f6:
7a:cc:72:de:bf:45:93:68:66:73:0c:e9:97:4f:27:7f:e1:34:
dc:05:6e:51:2a:16:5e:2b:16:ab:7f:24:bb:ba:c3:ba:cb:56:
87:8b:95:45:f3:a2:85:a3:64:09:31:11:8c:f8:63:e9:c6:b8:
c2:1d:6f:2f:ff:88:f7:d8:57:64:80:a1:58:d5:8c:a5:9f:b9:
17:c5:4f:0b:43:c4:92:c9:6c:34:9f:2d:5b:52:bf:fd:9a:8c:
48:f4:7f:3f:b6:cf:25:1a:cb:e8:68:eb:92:c0:58:18:5f:b1:
fa:bb:21:48:a6:4d:2d:5a:1e:a4:9b:e1:88:6f:1c:35:8a:f5:
5f:17:b9:de:95:1b:bb:ad:76:60:8a:8b:f4:4c:ae:94:21:35:
f3:c6:48:82:e8:cb:e2:42:fa:5b:af:10:e1:0e:05:6b:da:47:
5f:f2:53:0e:84:75:58:5a:20:3f:1f:18:8d:65:7f:31:de:8a:
16:f0:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:10 2025 by rpki-client