Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier: IeSyTYtdX3DAMiEWOS5Wq5aOVOsRKNv+XkAz+dopbN8=
Subject key identifier: 4F:DD:CC:C2:EF:8E:30:25:AE:0C:1C:89:43:01:22:31:3B:FC:FD:8E
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number: 017D
Signing time: Fri 31 Jan 2025 02:59:42 +0000
Manifest this update: Fri 31 Jan 2025 02:59:41 +0000
Manifest next update: Fri 07 Feb 2025 02:59:41 +0000
Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: W5EUR211tMaW4BYBhJRD46yHjpAD1ltxIXXo0+gvDUI=)
2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=)
3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=)
4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Validity
Not Before: Jan 31 02:59:41 2025 GMT
Not After : Feb 7 02:59:41 2025 GMT
Subject: CN=679c3c9e-c8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:4f:ee:e0:57:c2:28:2a:3b:1a:07:93:d3:
e8:40:55:39:6d:6e:3d:45:c1:05:67:d1:4b:6b:d0:
4d:40:98:f8:4d:56:c8:13:6b:04:d9:c5:b7:06:78:
fb:3c:7e:43:e2:ef:e6:b9:23:89:ec:ab:ea:98:cb:
cc:3d:67:51:25:06:0b:bc:f3:32:fe:90:cf:db:24:
dd:b4:05:b2:57:84:62:8d:60:d7:99:1a:1a:d9:99:
81:fe:b2:4f:c3:2d:c8:ff:dc:0e:b4:e7:50:94:a0:
c3:e8:38:31:25:54:80:74:ed:f9:91:96:f1:e4:37:
17:88:91:7c:d8:42:d7:81:1a:36:0a:3a:e6:a1:2d:
6b:54:96:67:08:6e:65:d0:95:4a:f3:37:f7:03:c3:
50:c0:1e:56:75:38:f0:d8:f2:48:51:8f:8d:3c:7f:
bf:36:64:2b:7f:79:91:5a:15:08:7f:53:92:f5:9a:
46:54:da:35:27:ed:b8:56:f9:00:92:51:52:d1:2a:
b4:68:11:0e:d2:57:1c:26:f3:bf:90:9e:58:d0:e1:
69:b7:4a:90:78:2e:68:e9:d8:6d:2d:d7:04:14:a7:
74:71:88:34:d0:e5:e4:b3:b0:8c:f7:e4:1c:ea:76:
be:42:2c:77:99:a8:a7:52:0c:0b:ab:fd:6c:35:ad:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:CC:C2:EF:8E:30:25:AE:0C:1C:89:43:01:22:31:3B:FC:FD:8E
X509v3 Authority Key Identifier:
keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:73:70:c6:c9:bd:91:1c:21:11:90:5c:a1:0c:9f:e8:68:ea:
b0:e3:8c:23:8e:af:ed:d1:0c:62:18:e1:05:d3:0b:d0:6d:58:
48:91:60:de:82:a0:14:82:7c:7e:7b:38:7a:ce:14:cd:aa:fd:
b0:43:29:70:ec:59:b9:60:20:96:b7:c5:ac:57:41:1f:c8:a5:
11:a9:f7:28:3a:66:49:4a:2e:38:6a:c4:67:3f:13:b8:77:de:
92:23:44:a6:66:2d:e7:af:e7:97:ce:47:f4:94:19:49:6c:3f:
a3:91:25:a4:9e:98:54:ad:68:f0:ff:21:8b:83:5f:de:44:2d:
44:28:14:05:08:df:af:46:f5:7d:58:d3:a6:2a:cb:c6:24:d5:
0d:20:e8:ef:b6:9c:79:0e:61:de:9b:5b:8e:8c:10:99:31:05:
4a:e1:1b:84:d0:5e:30:f0:ee:72:4b:73:7f:21:ed:1f:23:58:
09:4b:8d:62:9e:93:4a:b5:71:6b:6f:a4:5e:cb:77:77:4d:7b:
b0:7b:50:c7:47:7b:54:8d:d1:c5:69:35:1f:4b:01:39:80:bd:
68:7b:12:55:bb:e2:6f:72:07:31:49:89:1b:90:34:a8:dd:f2:
ce:52:34:e8:83:66:3f:70:f1:1f:87:16:0a:49:7a:9e:30:be:
5b:55:01:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx
RDE4MThGQUIwHhcNMjUwMTMxMDI1OTQxWhcNMjUwMjA3MDI1OTQxWjAYMRYwFAYD
VQQDEw02NzljM2M5ZS1jOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMBP7uBXwigqOxoHk9PoQFU5bW49RcEFZ9FLa9BNQJj4TVbIE2sE2cW3Bnj7
PH5D4u/muSOJ7KvqmMvMPWdRJQYLvPMy/pDP2yTdtAWyV4RijWDXmRoa2ZmB/rJP
wy3I/9wOtOdQlKDD6DgxJVSAdO35kZbx5DcXiJF82ELXgRo2CjrmoS1rVJZnCG5l
0JVK8zf3A8NQwB5WdTjw2PJIUY+NPH+/NmQrf3mRWhUIf1OS9ZpGVNo1J+24VvkA
klFS0Sq0aBEO0lccJvO/kJ5Y0OFpt0qQeC5o6dhtLdcEFKd0cYg00OXks7CM9+Qc
6na+Qix3mainUgwLq/1sNa2gfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/dzMLv
jjAlrgwciUMBIjE7/P2OMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4
QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1
UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5c3DGyb2RHCERkFyhDJ/oaOqw44wjjq/t0QxiGOEF0wvQbVhIkWDe
gqAUgnx+ezh6zhTNqv2wQylw7Fm5YCCWt8WsV0EfyKURqfcoOmZJSi44asRnPxO4
d96SI0SmZi3nr+eXzkf0lBlJbD+jkSWknphUrWjw/yGLg1/eRC1EKBQFCN+vRvV9
WNOmKsvGJNUNIOjvtpx5DmHem1uOjBCZMQVK4RuE0F4w8O5yS3N/Ie0fI1gJS41i
npNKtXFrb6Rey3d3TXuwe1DHR3tUjdHFaTUfSwE5gL1oexJVu+JvcgcxSYkbkDSo
3fLOUjTog2Y/cPEfhxYKSXqeML5bVQE1
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:13 2025 by rpki-client