Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json)
Hash identifier: KcmetbByait/7VirB4BlMJTIc+Jn0dvebKRFS2i8XbE=
Subject key identifier: 41:9A:9D:15:DB:0C:4D:36:27:2B:68:E3:53:F3:92:EF:DE:93:64:49
Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
Manifest number: 46B2
Signing time: Fri 31 Jan 2025 14:20:53 +0000
Manifest this update: Fri 31 Jan 2025 14:20:53 +0000
Manifest next update: Fri 07 Feb 2025 14:20:53 +0000
Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: /2OhRJtQyi7qlk7jlcx/9w7oC5E34jcsoiK+0YlJZqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Validity
Not Before: Jan 31 14:20:53 2025 GMT
Not After : Feb 7 14:20:53 2025 GMT
Subject: CN=679cdc45-51c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:f9:f7:52:68:ea:01:03:84:1c:da:0a:cf:
71:3a:3e:c6:94:02:ab:57:84:6f:65:ad:6f:eb:c6:
03:72:0f:88:b3:66:95:ac:96:0b:11:dc:64:86:b6:
bd:a2:69:a1:32:d7:ee:6a:90:ca:be:dd:2a:57:ec:
f7:72:ae:25:44:d0:05:26:40:b9:c4:48:88:4b:b4:
be:8f:cf:e2:81:08:c1:d6:76:23:39:d4:90:48:e5:
21:d7:df:e4:bc:85:6d:5b:b5:aa:44:58:cd:25:14:
6c:be:e5:16:98:2d:6f:75:67:cf:e0:9d:1a:86:d2:
42:52:a9:e3:5e:b7:c8:4d:e8:27:53:a5:83:28:f6:
9f:03:ab:b9:f7:4a:26:31:bc:95:57:44:e2:8a:22:
9a:57:c6:20:31:ca:18:f1:cc:5a:4a:c8:d8:48:33:
12:b6:26:34:40:d7:35:37:1d:bf:5c:2d:b5:06:cc:
2b:5c:e2:6b:fb:cc:99:b3:39:14:3f:5e:59:9b:bb:
87:64:d0:f6:10:8d:cb:ec:fe:6f:87:a3:b7:c0:d0:
bd:52:72:e6:4b:4d:1d:31:c3:b8:44:8b:ce:32:6d:
08:6b:cd:ff:e5:30:7f:d7:c4:99:fb:43:e6:dd:dc:
e5:0e:0d:07:be:50:c8:de:c2:7d:b3:08:9e:60:50:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:9D:15:DB:0C:4D:36:27:2B:68:E3:53:F3:92:EF:DE:93:64:49
X509v3 Authority Key Identifier:
keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:d5:6b:d7:2a:63:41:ce:c2:8b:61:9f:46:0c:b2:83:b8:
0d:c5:59:ec:39:85:70:06:2e:7c:41:e7:92:92:47:5a:f9:00:
4c:aa:ad:de:92:c5:21:b9:20:1b:33:ed:38:cb:fc:c3:f4:62:
1e:cc:90:c8:d7:e7:d4:05:e2:f2:2b:b9:46:e9:62:fd:ac:49:
a8:db:85:c1:b5:76:f8:b3:72:8b:68:e7:7c:0b:f7:14:70:ac:
55:21:be:1c:cf:5e:db:84:97:2d:e4:85:b9:2d:3f:1e:74:a6:
78:aa:f7:a3:77:83:c5:bf:0c:47:fd:63:59:2b:57:fc:e6:9f:
6b:f9:9e:ee:bd:1a:c3:f1:a6:81:76:c2:83:74:3a:c7:b6:40:
ae:a5:23:63:38:47:43:bb:ba:a5:ba:4a:22:db:e1:b7:15:87:
53:76:93:01:e8:90:c1:12:0c:86:cc:eb:6e:ff:75:a1:2e:51:
42:b7:27:b3:6c:c6:74:42:d7:0e:28:8c:ee:b5:17:55:1a:78:
4a:49:e2:59:21:05:9f:d4:0c:59:d4:3e:21:9f:7b:59:be:84:
3f:06:ec:00:9a:ef:6e:be:e8:dc:22:b0:7a:48:1f:e4:f3:29:
bf:91:f3:9e:f1:c9:d1:0a:59:63:be:bb:b1:2f:1a:44:88:ba:
79:34:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:12 2025 by rpki-client