Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier: 82DB1xD+fYCGaGuYS3TSrh3I+cGnYt0BQ+ZBYzP9+9I=
Subject key identifier: 2A:33:17:32:48:CD:2A:6C:A0:5B:A4:4D:B8:27:AD:56:58:56:F5:51
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number: 099E
Signing time: Thu 30 Jan 2025 20:08:22 +0000
Manifest this update: Thu 30 Jan 2025 20:08:21 +0000
Manifest next update: Thu 06 Feb 2025 20:08:21 +0000
Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: HVbVdFPhHQzaEWUXa826QNRqV7uRuhneGb9Zw+UZnOs=)
2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: 2nNnMwW7ScyaYHi8tlqpC8yOAW8NMr5phOvnAPCxu2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Validity
Not Before: Jan 30 20:08:21 2025 GMT
Not After : Feb 6 20:08:21 2025 GMT
Subject: CN=679bdc35-eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:83:14:25:f4:10:98:c6:5f:ff:bf:31:bf:
b1:5a:57:5a:f1:bb:69:e8:0d:0b:f4:a5:d7:5f:e5:
2f:a3:d3:f9:2c:68:2c:08:05:cb:af:8b:25:6e:ad:
7b:55:1b:45:14:93:1e:23:e3:10:41:95:c1:e1:6b:
6d:bf:29:8a:06:8a:73:78:90:54:91:90:66:b8:1d:
2c:00:83:ce:aa:44:a1:5d:0c:d9:c1:cb:43:f1:a9:
8e:e4:31:5a:37:a8:d7:70:8a:71:d7:d2:4c:6d:3b:
6c:79:5e:a2:8a:eb:d0:b8:34:b0:05:d7:51:72:63:
7c:4c:37:9b:b4:e5:f3:63:63:25:bd:db:25:fc:93:
3d:d5:00:fc:e3:77:3f:eb:77:b9:56:1d:84:3b:b6:
1c:7c:f8:94:95:22:b9:32:29:6d:ab:15:21:5a:b3:
1f:ab:52:d8:ce:b7:cd:3c:89:27:a1:81:6f:8b:de:
08:eb:3c:3c:c5:d6:6d:9f:dd:36:1a:bb:a8:73:e4:
fe:50:80:12:ee:ad:10:f8:80:2f:ad:65:62:bb:27:
06:a3:1f:3d:e6:72:b9:37:e8:a2:8b:f0:77:7f:38:
b7:3c:0e:b3:5e:e6:dc:70:33:ed:fe:80:cf:41:e5:
05:02:a6:b1:c3:f3:72:2d:dc:91:69:b3:7b:5a:ff:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:17:32:48:CD:2A:6C:A0:5B:A4:4D:B8:27:AD:56:58:56:F5:51
X509v3 Authority Key Identifier:
keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:67:dc:b2:65:d4:f9:50:dd:ea:15:3d:19:11:01:ab:61:83:
2c:8d:00:43:eb:5c:c3:c5:83:d9:12:ae:7d:09:11:a0:fd:04:
b0:af:34:09:9f:a3:38:36:66:a7:05:d9:85:64:e9:70:ad:ce:
fb:0f:44:d7:ed:58:6b:ee:a2:f9:a3:a7:bd:12:0a:62:89:a5:
51:e4:78:b3:d0:f9:17:f0:37:39:8b:15:46:fd:fa:7c:e4:40:
e9:0b:03:af:ff:cf:40:1b:78:8b:80:38:b1:12:6b:d8:b9:01:
3b:bd:e9:25:d1:df:25:ed:7f:31:6b:e2:f1:4e:20:99:91:de:
08:e1:74:a4:21:fc:22:41:77:27:a8:21:16:ea:75:10:b7:11:
03:ac:3c:25:05:4e:64:26:23:4c:8a:63:c1:69:e9:9f:c9:29:
ce:14:f1:7c:2a:b4:7e:41:b3:8f:e8:6d:59:1e:e9:de:f2:98:
2a:15:f9:71:6d:08:ca:fd:eb:3e:31:9d:bd:bf:51:2a:a7:55:
38:19:56:da:47:07:11:0d:52:a7:ff:d1:26:f1:30:8c:b9:58:
a3:db:af:f9:9f:22:96:c4:df:d7:d2:ce:56:30:47:58:9c:fd:
f9:a7:21:bb:4e:1d:24:0f:1e:dd:db:8a:d9:6d:1a:bb:45:b5:
32:b6:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:33 2025 by rpki-client