Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier: 2LUqGr7eewAtuulTBWBn7CwukfudVGwsploM60P/XHo=
Subject key identifier: 87:4B:FB:18:4C:2E:18:4A:D1:42:D9:D6:73:C7:E2:17:FA:B2:9E:54
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:51:43 +0000
Manifest this update: Fri 31 Jan 2025 06:51:42 +0000
Manifest next update: Fri 07 Feb 2025 06:51:42 +0000
Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: Z/AyU6xb+MgOsVqpojNz1xWEFZWgU724L8ZrodoQqiM=)
2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: Xemib6M0bFmPitrdt7WaDoKR6Tv2ExfXIfUVNhoPhD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Validity
Not Before: Jan 31 06:51:42 2025 GMT
Not After : Feb 7 06:51:42 2025 GMT
Subject: CN=679c72fe-8ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:3f:c6:ca:e0:7d:53:79:69:70:a6:2d:a8:
6e:20:76:b7:06:33:70:4d:e0:72:f8:ea:3a:c5:fb:
07:b7:6b:0c:53:82:96:98:0e:de:7d:d8:21:bd:78:
37:d3:d5:de:9d:c2:eb:8e:6b:94:46:d8:3a:99:51:
ef:01:fe:48:06:e2:11:ca:30:45:ad:e9:44:87:14:
db:bc:4a:2f:36:45:14:ce:a2:65:e8:34:59:61:49:
df:7c:c3:54:df:af:a1:11:5b:6a:b7:ff:e8:e5:2c:
2a:c4:94:b6:f4:db:cb:78:cd:df:5c:18:89:ee:b8:
18:dc:27:36:ed:21:fb:aa:f5:14:f0:59:f6:39:46:
c0:36:06:0c:2c:1e:03:ec:c6:e2:f7:ed:70:7a:80:
b1:5a:7a:c8:85:fb:0a:a8:dd:0e:65:22:4c:2f:43:
5b:ac:22:30:c5:49:99:a1:68:82:95:b4:a8:7c:1f:
b2:20:76:ba:5b:cb:54:0c:05:3d:4b:bf:45:5d:09:
01:0c:d8:fc:49:ec:2f:b8:71:fb:98:31:16:15:18:
16:c4:64:15:f5:14:9d:c2:32:e9:b1:19:6a:82:d5:
6b:8b:cf:21:0f:38:5b:0c:7e:e6:73:aa:57:e9:9b:
27:72:0f:a0:4c:26:92:0b:53:b3:26:56:cd:2a:06:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:FB:18:4C:2E:18:4A:D1:42:D9:D6:73:C7:E2:17:FA:B2:9E:54
X509v3 Authority Key Identifier:
keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:40:7d:e2:53:81:4f:56:5f:b8:68:49:91:1f:9e:b1:20:e6:
70:d4:db:93:57:ca:7e:96:b5:b5:24:94:31:65:bf:ca:5b:a6:
5b:bd:6d:bf:1c:83:d8:e2:8c:18:a5:fb:9c:64:c6:71:19:74:
34:99:14:d1:19:45:3a:df:57:b2:08:b0:31:d2:c6:91:9e:0c:
af:ec:10:e8:14:08:8c:9d:fa:9f:45:b1:f3:f1:03:7c:b9:04:
6f:3b:20:79:37:76:03:1c:f0:a2:1f:cb:5c:1a:d1:5b:3a:4e:
e8:8a:11:b3:27:0b:e0:a3:17:87:af:26:40:4f:ac:0c:b5:c3:
46:d9:bd:97:4c:62:b9:dc:44:f0:6d:50:ec:e0:99:e8:97:ec:
22:32:e0:dd:4e:1a:2c:27:72:b5:90:bb:25:da:23:05:f9:23:
62:cb:fe:b7:74:7c:5a:b5:c3:3b:8f:90:b5:9c:26:47:55:1d:
f9:40:05:81:68:ef:05:2e:8c:30:19:ff:ff:a5:74:42:eb:ca:
b8:5c:af:96:3c:ea:04:b3:21:3c:87:9a:a1:4c:9b:83:ef:0d:
02:32:54:c6:56:64:fc:9b:40:a6:07:02:ef:10:ef:27:49:af:
54:65:0f:28:35:d4:01:83:61:89:1a:f1:31:0e:87:e7:de:47:
26:00:b2:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OThENzExMC8GA1UEBRMoMjYyOEU2QTg5NENERkM5MzczRjNEQjlDRkNGQkM1MTQz
RkZBMkEzRTAeFw0yNTAxMzEwNjUxNDJaFw0yNTAyMDcwNjUxNDJaMBgxFjAUBgNV
BAMTDTY3OWM3MmZlLThhYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU3T/GyuB9U3lpcKYtqG4gdrcGM3BN4HL46jrF+we3awxTgpaYDt592CG9eDfT
1d6dwuuOa5RG2DqZUe8B/kgG4hHKMEWt6USHFNu8Si82RRTOomXoNFlhSd98w1Tf
r6ERW2q3/+jlLCrElLb028t4zd9cGInuuBjcJzbtIfuq9RTwWfY5RsA2BgwsHgPs
xuL37XB6gLFaesiF+wqo3Q5lIkwvQ1usIjDFSZmhaIKVtKh8H7Igdrpby1QMBT1L
v0VdCQEM2PxJ7C+4cfuYMRYVGBbEZBX1FJ3CMumxGWqC1WuLzyEPOFsMfuZzqlfp
mydyD6BMJpILU7MmVs0qBj9JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh0v7GEwu
GErRQtnWc8fiF/qynlQwHwYDVR0jBBgwFoAUJijmqJTN/JNz89uc/PvFFD/6Kj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEQ3Lzg2MjFBRTYyQTg3
MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmlqbXFKVE5fSk56ODl1Y19QdkZGRF82S2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5
OEQ3Lzg2MjFBRTYyQTg3MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pO
ejg5dWNfUHZGRkRfNktqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAINAfeJTgU9WX7hoSZEfnrEg5nDU25NXyn6WtbUklDFlv8pbplu9bb8c
g9jijBil+5xkxnEZdDSZFNEZRTrfV7IIsDHSxpGeDK/sEOgUCIyd+p9FsfPxA3y5
BG87IHk3dgMc8KIfy1wa0Vs6TuiKEbMnC+CjF4evJkBPrAy1w0bZvZdMYrncRPBt
UOzgmeiX7CIy4N1OGiwncrWQuyXaIwX5I2LL/rd0fFq1wzuPkLWcJkdVHflABYFo
7wUujDAZ//+ldELryrhcr5Y86gSzITyHmqFMm4PvDQIyVMZWZPybQKYHAu8Q7ydJ
r1RlDyg11AGDYYka8TEOh+feRyYAsqM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:00 2025 by rpki-client