Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json)
Hash identifier: wuy8UsJkG4GVEn/VK2N+OZRBgEB8HQViFyNmwp43gyc=
Subject key identifier: 20:5C:D1:03:3E:27:36:6B:07:D5:F7:17:A0:74:66:4D:68:2F:E3:DB
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial: 0644
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
Manifest number: 0640
Signing time: Thu 30 Jan 2025 22:29:02 +0000
Manifest this update: Thu 30 Jan 2025 22:29:01 +0000
Manifest next update: Thu 06 Feb 2025 22:29:01 +0000
Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: tsf+i+rGeCAr5r80BICMQEJspVXOgyWgzStHGfs7Chs=)
2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: tM5cOEWMEd0sLoIcIi9ESrDIgitlKQxWo6V/toAmfzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Validity
Not Before: Jan 30 22:29:01 2025 GMT
Not After : Feb 6 22:29:01 2025 GMT
Subject: CN=679bfd2e-8f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:c7:0e:e4:3c:50:73:f8:48:15:7c:4c:cf:
47:1f:c3:84:16:32:b5:46:32:dd:a1:8f:bb:da:27:
35:de:90:48:37:f9:bc:14:67:26:50:e5:33:95:01:
9e:75:fc:89:30:67:16:c1:a2:d9:c2:db:e8:06:bf:
76:5f:cd:bb:a2:7e:84:ff:1c:58:8b:e5:23:1b:44:
4c:e1:5c:ae:87:4b:ce:11:f5:a2:60:53:24:0a:30:
e2:07:4f:18:fb:b7:83:72:46:25:04:b2:7e:22:5f:
35:58:05:96:11:36:bb:ec:23:95:6e:35:53:07:3a:
d7:16:6b:e3:9d:57:66:59:6e:bc:04:c1:6c:6b:4f:
31:9b:1b:2f:17:8d:9a:ba:81:75:1e:0b:57:e5:43:
8b:7f:b8:8e:c2:cf:ea:de:9e:ba:98:d7:18:c4:45:
83:28:2e:d1:75:10:90:59:19:85:9d:63:c9:2d:e0:
cb:74:0b:74:0c:68:ae:0e:0f:a3:81:29:72:2a:38:
af:df:bc:04:9e:e1:e0:6f:ec:62:70:e2:f1:ab:76:
0a:99:e2:50:95:7a:b7:f1:25:7f:53:80:21:c8:57:
16:f9:39:8d:04:65:66:93:15:56:be:5d:c4:fa:a4:
7e:a3:2e:5d:fd:b6:a6:a0:91:20:2a:b3:7b:05:a2:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:D1:03:3E:27:36:6B:07:D5:F7:17:A0:74:66:4D:68:2F:E3:DB
X509v3 Authority Key Identifier:
keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:b8:8a:8c:c6:bd:4b:89:c1:76:2a:ca:b8:2b:c6:98:5c:
6f:05:4c:38:77:20:92:75:3a:31:1f:be:5c:01:92:e3:1a:88:
bf:77:e2:12:58:2c:43:62:6e:30:a2:7a:15:00:f9:8c:65:ae:
44:ac:1e:8f:92:21:83:84:a1:b5:e7:bc:73:53:0e:cb:b9:dd:
81:1f:45:16:d0:e8:3d:ff:18:69:a8:6b:58:55:f6:3b:5b:a9:
6a:26:bf:f9:b3:af:41:d6:7a:e6:10:b3:23:95:2c:74:3f:3c:
64:99:fd:38:72:7b:ee:3b:54:c0:0f:9e:dd:5c:83:05:87:53:
7f:1f:3b:34:18:cd:7d:39:cf:4c:a0:e6:ee:ce:e0:d9:a0:5f:
f7:9d:2e:c6:7f:2b:b5:d3:5c:9c:08:f6:64:36:a3:68:9d:e4:
fe:4b:e5:d3:ff:2d:b1:ce:c7:e6:7d:eb:0b:a4:dc:47:97:a0:
d4:b8:14:b2:45:87:19:9c:f0:25:8d:5a:a0:de:5a:d1:d7:d4:
af:2e:e7:c6:ed:3c:25:5b:af:05:56:fd:45:c7:8d:91:32:39:
8e:b2:a7:3d:a5:f6:1d:0a:c1:1b:f7:d4:29:0e:d0:48:25:7a:
97:56:17:59:1a:1a:ea:a2:e8:a4:35:f1:8b:bc:6c:fc:4a:49:
ed:74:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:59 2025 by rpki-client