Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json)
Hash identifier: JPUCXZqiD0ds4BUjjQLZYNRnvvDJILBkZ4LjBOXJiFo=
Subject key identifier: 04:1F:67:1F:5F:18:9D:8E:A0:BC:7C:36:5D:65:59:75:D5:D1:1E:6B
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
Manifest number: 01EA
Signing time: Fri 31 Jan 2025 02:43:42 +0000
Manifest this update: Fri 31 Jan 2025 02:43:42 +0000
Manifest next update: Fri 07 Feb 2025 02:43:42 +0000
Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: o5lZZC4VOsEe8MTMh2bfMlcM8lxI8Yf/ymzxYnXpOPo=)
2: AB4BB622CE6111EF981AC77AC4F9AE02.roa (hash: 8+XeZ7gTs//qEFH1W7DiRKrnlw1RkeEDoAo1raNhxyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Jan 31 02:43:42 2025 GMT
Not After : Feb 7 02:43:42 2025 GMT
Subject: CN=679c38de-e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:89:3f:9f:48:03:f1:b6:76:69:d8:67:fe:
55:18:7f:e0:f6:fb:64:c2:ba:d3:f7:3a:fc:1c:29:
03:a5:ff:c7:da:bc:81:1c:e8:19:b2:93:6f:bb:93:
f8:b7:e5:31:9f:da:6c:d5:da:34:81:60:75:0e:1c:
40:91:d8:7b:e6:c6:a6:27:ab:76:eb:62:15:7e:40:
06:d6:89:02:01:7e:44:fe:e6:2d:c7:dd:af:dc:de:
43:a3:5a:e1:b9:11:be:53:ee:e8:94:e1:52:34:e9:
e5:37:65:53:c2:1b:0b:79:44:9f:9a:86:ac:2d:e0:
db:56:23:4e:07:c0:68:83:3f:be:88:c7:a5:90:29:
25:2a:f2:07:fe:10:9f:1d:3a:fe:5c:56:2c:ae:b1:
20:66:df:ae:60:4e:8c:22:86:5f:ab:d3:de:bf:9a:
79:5e:dc:da:31:1a:71:d9:bd:47:0f:28:5a:3c:ae:
48:8a:39:dd:bf:22:9e:37:fd:0c:3a:c5:10:d1:67:
ac:a9:a3:13:bd:03:6a:f3:f3:23:08:15:6e:59:40:
de:56:43:1a:ae:5c:aa:d6:11:72:1f:c7:12:3a:aa:
f1:48:65:12:75:82:79:9d:1a:b6:5e:3e:f9:3c:cb:
3b:04:82:06:4e:4f:21:29:63:1a:19:a3:9d:a6:27:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:67:1F:5F:18:9D:8E:A0:BC:7C:36:5D:65:59:75:D5:D1:1E:6B
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a5:0a:bb:65:12:07:20:fc:aa:8b:46:ad:d8:77:92:b5:6a:
ab:f4:79:f2:6b:6f:67:ed:38:aa:c4:b4:7c:ca:72:80:8f:8b:
9e:26:47:b2:13:b6:8c:91:0f:2b:ab:34:8e:bc:ba:8f:5e:71:
7f:4e:4b:83:94:e9:e2:37:15:f4:ed:65:5e:81:c8:c9:81:e6:
30:78:ee:91:15:7a:55:07:b9:ab:53:99:3a:d7:e1:aa:d4:20:
37:a8:ba:a4:9a:12:47:be:44:9b:82:8a:2e:a6:6c:db:0a:0b:
55:59:de:c7:b6:e8:52:b8:0a:cc:a1:43:05:e2:16:7c:ef:d8:
90:71:33:a7:52:a6:6b:8b:5b:66:b7:5e:fd:e9:1c:af:95:91:
4f:f8:ed:ca:02:de:24:f3:aa:47:30:05:1d:b1:61:c0:33:1c:
7d:bf:2a:9b:00:ad:78:aa:db:d1:5d:28:8d:45:92:38:29:f5:
c6:c9:3d:f2:ee:dd:57:9e:87:75:f1:ae:4d:d2:04:9d:98:05:
07:f2:54:34:1a:86:60:4f:8a:5e:c2:95:62:5d:51:11:fb:43:
22:6a:bb:91:de:c0:e1:18:ab:eb:ef:bc:20:69:db:0a:52:7e:
d1:46:7b:4d:55:67:91:e7:e8:97:a9:e3:aa:c9:df:fc:2e:84:
dc:e8:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:17 2025 by rpki-client