Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier: dt7ub8uW+GdoBNc6362NOODBxrVAyDmxnSpu97Ne8WE=
Subject key identifier: A0:FF:5E:39:8A:50:B2:3B:A4:98:CC:EB:82:7B:23:58:32:98:29:14
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial: 048C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number: 0484
Signing time: Fri 31 Jan 2025 00:04:38 +0000
Manifest this update: Fri 31 Jan 2025 00:04:38 +0000
Manifest next update: Fri 07 Feb 2025 00:04:38 +0000
Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: uPgALnhTFaYe+KvvzKEvLtl6TP4SoqhWhdHuIIl75TU=)
2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=)
3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Validity
Not Before: Jan 31 00:04:38 2025 GMT
Not After : Feb 7 00:04:38 2025 GMT
Subject: CN=679c1396-3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:18:00:fc:f7:01:2e:02:59:b4:11:fc:43:
a0:cf:1c:96:e4:52:14:02:ca:8f:33:66:99:62:d2:
38:60:a1:3b:65:51:3b:f6:4f:52:08:8e:1c:00:ec:
27:6c:9a:eb:87:0e:ec:ae:14:a3:e1:1b:39:00:45:
3f:8a:9e:cb:ed:af:63:86:65:9f:c5:06:6c:29:0b:
3d:9c:3a:ab:a7:35:1b:75:28:f4:ff:85:83:77:65:
50:44:09:e2:79:1c:f4:67:1e:0e:0a:35:fd:4a:ed:
a2:f9:8e:5d:9e:1f:83:db:62:69:e8:e8:9b:19:28:
c1:86:b6:b3:f2:7a:14:51:87:fc:a4:75:c0:16:d6:
0c:db:a3:4a:e0:38:83:0f:cd:ca:53:75:40:de:55:
4b:29:85:aa:f4:ff:a2:81:ce:c3:42:cd:43:4d:a1:
99:9e:77:c8:6b:8e:20:70:d6:d8:c9:c7:84:a5:d0:
3b:41:17:34:4f:27:30:73:9f:e6:bd:6e:2c:05:17:
70:ce:60:0d:5b:5d:c5:19:68:77:50:94:42:da:ec:
36:0f:ba:83:70:1b:48:0e:a6:fd:3a:ec:41:ff:e6:
4a:8a:a2:0f:ac:95:35:16:97:b8:09:4d:e5:e6:a4:
b3:cb:85:af:e5:0e:13:00:5c:e6:61:eb:d4:b8:96:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:5E:39:8A:50:B2:3B:A4:98:CC:EB:82:7B:23:58:32:98:29:14
X509v3 Authority Key Identifier:
keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:00:d9:f8:55:e9:9c:d7:41:36:80:3c:3c:a7:29:cd:54:
6e:80:3d:72:ab:3f:e3:bf:3f:8a:fb:34:f0:8d:a0:a0:f5:8f:
be:36:31:d6:f2:cf:f3:b8:b3:ec:3a:2f:60:b6:27:8b:5c:6f:
f7:fd:b8:2d:06:62:fd:ef:e0:15:68:e2:93:61:a1:38:48:9d:
93:7d:10:97:7b:82:97:49:b3:81:1b:d3:f1:6f:c2:6a:35:42:
a2:ad:7c:1b:aa:60:67:3f:cb:45:6d:c0:cf:41:4b:35:ef:7e:
49:88:6a:40:50:ea:b6:7a:00:2f:9a:2e:58:f2:43:59:36:f5:
f0:9d:0b:b4:25:00:30:9d:b7:49:fb:14:e8:61:61:9d:63:51:
e2:33:b9:a4:6b:7a:4e:1d:64:55:7e:1f:72:39:10:24:b2:e0:
bd:3d:df:c2:8d:97:ca:f9:da:b5:9b:a7:7d:73:6c:2f:d1:71:
2a:54:0c:eb:d9:bb:d5:3f:20:27:3a:96:fb:68:f2:a2:b1:e8:
0f:76:21:90:15:73:cf:58:aa:3d:65:ea:a1:ba:b9:5a:17:39:
22:9d:9b:ce:3c:f9:a1:a9:cd:ff:78:39:06:2d:7c:92:21:d9:
c2:7b:41:3f:4e:b8:74:47:e2:b8:01:b6:f9:b6:4a:4a:52:04:
c5:34:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:23 2025 by rpki-client