Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json)
Hash identifier: IcxNXOHTWlAe0GnfPs46oL2GaWBWILo7YOznbAnGc/s=
Subject key identifier: FB:86:BC:43:10:FA:4E:F1:88:75:6E:A2:A6:6F:B9:AA:4F:4E:99:AB
Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Certificate serial: 347D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
Manifest number: 3460
Signing time: Fri 31 Jan 2025 15:19:47 +0000
Manifest this update: Fri 31 Jan 2025 15:19:46 +0000
Manifest next update: Fri 07 Feb 2025 15:19:46 +0000
Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: fSKcjbayi0qiKywLrzzhnvJ5qQfJz7KI/sYNVHhlfPc=)
2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13437 (0x347d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086
Validity
Not Before: Jan 31 15:19:46 2025 GMT
Not After : Feb 7 15:19:46 2025 GMT
Subject: CN=679cea12-97db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:5c:91:95:e0:9d:17:09:5a:4b:10:14:65:
49:ee:71:85:40:02:1c:c3:1c:28:e7:70:46:5b:bf:
5e:78:66:c5:72:f4:68:2e:da:92:be:2b:4b:4d:38:
6d:4a:c2:d7:b0:b4:9a:00:47:eb:68:8e:91:da:50:
41:56:34:1b:2b:fb:ac:2d:8e:be:ce:27:cf:c2:98:
92:42:3c:f2:ff:bc:bd:d2:ef:6e:8b:42:6c:e8:06:
98:10:fb:f8:e6:b2:e1:79:57:dc:f3:15:32:43:fc:
40:bc:ae:13:73:9d:e4:3c:4c:02:60:98:81:cd:0f:
8c:2a:75:c1:c6:28:c2:07:46:d9:f1:49:70:03:0f:
83:1d:9d:07:3f:be:e6:4b:ff:b4:78:00:19:cf:6a:
b1:47:f2:a0:bb:2d:85:41:86:db:e7:34:85:58:9f:
e2:64:fa:aa:10:d5:77:3c:fe:4e:bb:b0:fc:71:fd:
77:fe:c6:5e:a9:b4:04:a8:a0:c2:32:1f:e2:53:ad:
1a:20:c0:27:20:28:6b:48:5a:14:04:0d:d0:63:59:
78:5e:7c:b4:b6:2e:88:b2:48:17:cb:26:19:63:52:
4f:51:9e:15:63:c8:f0:4d:6a:16:81:39:94:49:11:
28:23:bf:fd:4a:9e:17:5c:64:06:89:d9:53:5b:1d:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:BC:43:10:FA:4E:F1:88:75:6E:A2:A6:6F:B9:AA:4F:4E:99:AB
X509v3 Authority Key Identifier:
keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:ac:96:0d:cd:02:2c:41:fe:84:47:63:5a:d7:8d:0a:b7:
26:05:da:f6:b8:96:9f:ce:fa:59:90:fd:be:4d:e3:c1:cc:51:
09:f8:99:86:75:08:9d:d1:f6:6f:70:da:6d:4f:33:33:ef:45:
58:cc:15:f0:9b:50:e8:52:94:40:ae:55:af:d8:0b:e9:51:1a:
fd:40:bc:07:19:3f:74:91:05:c8:dd:53:7c:19:0c:40:e5:f8:
3a:c8:54:25:b2:32:77:6d:6e:f1:a0:28:c1:30:7c:c2:c5:c0:
59:d0:1f:ad:6e:64:b9:e7:46:a4:64:83:82:5f:c7:85:98:8c:
24:ac:dd:fd:56:58:11:02:21:40:e1:40:f1:aa:e5:ed:37:94:
6d:d5:96:a2:eb:97:29:db:02:1c:3d:6d:2b:aa:52:91:d5:ff:
7d:7d:eb:9d:0a:e2:fe:32:04:52:72:80:d7:04:f9:d0:5a:48:
88:06:ea:e5:e6:1b:8b:d7:f6:f6:28:3b:05:5e:af:bd:e3:3c:
25:2a:dd:82:1a:4e:da:3f:f6:65:4d:30:93:b8:cc:36:67:38:
d9:33:f8:d5:0b:cf:62:fd:5a:53:3a:1a:15:81:b2:a7:88:2a:
ed:1d:2b:e3:c2:29:b2:7f:17:11:9b:fa:6d:1e:d8:82:ae:d9:
1c:c0:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:42 2025 by rpki-client