Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json)
Hash identifier: WPvvPfNRM5LuxodcdJxMr76xiOHgplvDFGzGnrlBlFo=
Subject key identifier: 90:58:C1:63:83:F4:5B:53:C2:40:DF:F4:20:C7:1D:27:AB:A2:B9:CD
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial: 2EE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
Manifest number: 2ED0
Signing time: Fri 31 Jan 2025 15:30:58 +0000
Manifest this update: Fri 31 Jan 2025 15:30:57 +0000
Manifest next update: Fri 07 Feb 2025 15:30:57 +0000
Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: vYuCGxYV7B5ux84tAmVEBKI2vpwaDZsfnJ3zO5rpsG0=)
2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12003 (0x2ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Validity
Not Before: Jan 31 15:30:57 2025 GMT
Not After : Feb 7 15:30:57 2025 GMT
Subject: CN=679cecb1-6962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:31:dd:94:f0:1a:18:51:b8:9d:1a:2f:1d:
af:94:8b:41:2c:0f:09:59:a6:4e:c1:78:14:3b:e2:
a6:2f:47:19:dc:9e:0f:3a:6f:96:41:0f:bb:08:f0:
16:75:04:3d:a6:6f:5d:5a:ef:91:5e:dc:96:c5:da:
df:4a:6a:43:17:64:db:58:83:08:ed:76:f4:06:2e:
fe:89:73:57:97:84:6c:74:92:6d:28:e5:36:cc:94:
5c:84:e8:22:f5:48:df:c7:ab:07:16:4c:08:fc:c7:
1b:09:c6:a3:ce:9c:09:4f:e4:05:31:d3:b1:05:7a:
7d:aa:e3:7a:f1:6e:c6:3b:41:14:b8:12:12:c3:20:
74:8a:33:50:0f:d3:da:8d:05:a2:3c:88:b5:7b:50:
96:e2:5f:0c:97:aa:79:3e:aa:b8:6e:a5:1c:0d:eb:
8c:bf:f9:4c:24:08:05:2a:97:29:7f:53:b4:8a:e7:
46:93:5d:35:1c:04:85:a4:7e:b0:f8:cd:87:37:c8:
de:5a:d6:27:1b:70:06:ee:88:59:00:f7:12:29:24:
48:5e:ca:f5:b1:4f:25:cb:db:86:80:8f:89:c3:c5:
8f:92:a7:fc:96:80:f0:81:44:0e:e0:56:b3:ce:11:
e7:3a:7f:31:46:4b:8b:22:d4:2d:f6:09:39:60:7a:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:C1:63:83:F4:5B:53:C2:40:DF:F4:20:C7:1D:27:AB:A2:B9:CD
X509v3 Authority Key Identifier:
keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:c6:26:64:51:28:e4:06:f4:c2:5b:d6:86:7d:84:bd:7b:a0:
b7:76:48:ab:51:8c:51:ab:ef:8c:2c:9e:71:76:d2:25:c7:7f:
f7:32:4b:7e:44:8e:73:e3:53:a9:16:d9:e3:a0:7f:9c:9f:c6:
df:3e:be:3b:8b:91:73:05:04:42:0b:8c:61:69:34:ef:3c:37:
9b:35:8b:9d:6b:80:c6:23:38:76:4e:d4:3a:37:cc:a0:80:dd:
8c:92:d0:32:3a:d7:97:64:05:48:f0:1b:da:38:18:99:f7:b0:
a4:3d:b0:3f:79:69:c5:b0:b0:9a:dd:e8:d5:8a:43:37:4f:3f:
3e:86:32:12:e6:20:c3:96:68:9d:c4:f4:73:5b:8d:11:71:de:
e0:2f:f9:58:16:5d:ec:73:c2:4a:34:f9:2b:d8:96:eb:b6:44:
05:d0:52:0c:5a:17:ef:20:00:c6:d9:70:f0:5c:1e:ba:90:83:
e3:35:e5:16:ca:15:f4:4f:5d:9d:7d:71:85:50:08:df:2a:e2:
f0:d1:09:6f:7c:51:28:a8:47:bd:d3:fa:0e:84:a7:b6:95:3e:
c2:55:cb:d7:c8:e8:01:ee:2e:75:11:f2:2f:e7:7e:44:ca:35:
86:49:71:c9:de:43:5e:d2:29:b4:6a:93:b4:7a:45:a9:ba:9e:
07:af:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:46:19 2025 by rpki-client