Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier: srtg29pjVmAW8y8r8QcrXCOZiIbuCP38lYurcYixj9Q=
Subject key identifier: A2:1D:AB:65:D8:6A:00:21:09:70:CE:40:26:D8:30:60:76:29:AE:CE
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number: 013E
Signing time: Fri 31 Jan 2025 03:35:29 +0000
Manifest this update: Fri 31 Jan 2025 03:35:28 +0000
Manifest next update: Fri 07 Feb 2025 03:35:28 +0000
Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: r74gfLWd9Md1NcklCcz85zgF3wC/ktrntc83fkK88Nc=)
2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: bEYOw16YffGMy8yneXxHr3Zrg83Aj3Be9wOSROcVCMY=)
3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: 43u6VU4uVf/bt9Gf14qd7/mI+N905JTL9noJWyloshU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Jan 31 03:35:28 2025 GMT
Not After : Feb 7 03:35:28 2025 GMT
Subject: CN=679c4500-60dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:bc:e8:dc:76:29:ef:cc:9e:14:c5:26:27:
4e:96:ca:e9:a3:ff:b7:0e:92:b9:7e:96:d4:5f:5c:
85:09:3b:62:5c:58:66:fa:76:dd:4d:5a:68:ef:59:
89:fa:9d:6d:01:95:87:74:5d:dd:aa:d2:09:f7:63:
d6:68:b8:4c:f0:79:55:f1:aa:65:65:69:91:0a:fe:
e8:31:cd:7e:6b:76:91:28:9c:fa:ab:7a:7e:55:6e:
ea:b7:98:a3:4b:fe:6a:f0:df:c5:52:86:5c:63:64:
ed:d5:ff:d6:50:61:5c:30:db:c0:fc:65:b3:ce:12:
b5:75:ad:2a:e1:dd:c9:d9:3c:a3:63:31:1d:53:b9:
cf:58:a6:19:34:9a:a5:4d:1b:52:6c:4b:5b:4c:96:
76:2d:78:c6:e7:8b:06:14:57:52:fa:21:e2:50:79:
8e:7d:ed:6b:1e:24:bb:19:9b:2b:7c:d0:29:cd:78:
bd:30:5b:00:03:06:80:af:31:66:73:25:fb:fe:a1:
71:1d:f8:c1:61:ed:96:3c:93:55:42:00:70:a1:00:
37:c6:10:4e:4d:74:b9:77:bb:63:20:01:71:5d:2f:
dd:f8:cc:8a:6a:41:bf:61:83:53:fd:21:00:87:e6:
3f:c9:81:1f:e4:67:d3:e1:d4:e4:7a:95:dd:77:40:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:AB:65:D8:6A:00:21:09:70:CE:40:26:D8:30:60:76:29:AE:CE
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:da:c6:3f:80:c3:a6:ea:b0:ae:8f:d4:91:80:34:ff:ba:
8f:89:ac:ee:b7:f9:e4:3b:d3:33:5c:a3:2e:e4:4e:0a:82:f5:
5d:d9:59:91:65:27:34:b6:e6:03:06:a5:dc:95:d1:79:08:c1:
84:b2:ce:ee:ee:eb:89:58:62:58:9d:01:4e:f3:64:19:f6:72:
51:4f:77:6c:91:1a:c8:2c:48:af:a4:b0:33:91:5e:58:76:7d:
9c:bd:50:3e:8c:6f:90:e3:d4:b2:91:3d:14:aa:c5:24:46:75:
3c:ac:50:df:91:6c:6c:a2:1b:4e:fc:45:d5:8c:43:ba:1f:71:
0f:ae:62:12:4e:e2:a8:61:36:1f:b0:40:48:00:ad:28:9f:ea:
d0:75:13:ea:10:23:16:dd:43:9f:86:3f:40:c5:3e:a2:1f:ab:
ae:7a:37:53:9a:8a:d9:6c:a0:67:a5:2e:0d:a4:5a:66:b5:74:
7a:39:66:68:24:7c:7e:2e:b0:52:2a:ae:45:a1:db:64:49:72:
fc:d4:14:a3:23:24:87:47:e3:d8:28:7d:05:da:cc:00:9d:13:
53:9b:cd:da:fc:db:89:f3:97:3e:b5:af:1e:10:54:c9:57:c9:
bb:59:1e:4e:fa:86:34:01:21:13:f0:f7:f4:8c:de:be:78:81:
03:ac:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:17:07 2025 by rpki-client