Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: qdSXYvd0N8rvkhZitgJQOqyBcxVFAU63JkfLFTwKy+8=
Subject key identifier: 43:81:22:DC:2D:D1:FE:48:F7:07:4E:A3:16:C4:0C:78:99:E0:E0:A6
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 02:01:04 +0000
Manifest this update: Fri 31 Jan 2025 02:01:04 +0000
Manifest next update: Fri 07 Feb 2025 02:01:04 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: D5gWoRnS3rXBLgzh7Iz4aNt/K1sJdwOJXYVlMaX5pzA=)
2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=)
3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=)
4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Validity
Not Before: Jan 31 02:01:04 2025 GMT
Not After : Feb 7 02:01:04 2025 GMT
Subject: CN=679c2ee0-6056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:4b:8d:01:55:71:e8:8f:ee:7a:62:c9:31:
32:ec:b7:2a:20:b7:d3:da:85:75:bc:28:c4:29:2f:
4e:47:76:b8:a4:78:17:47:9d:1d:ff:24:b6:1c:78:
b9:18:7f:1a:48:58:f0:38:eb:39:ae:e1:36:2d:11:
13:91:11:a5:28:87:60:dd:2b:10:4f:0f:98:61:f8:
72:0c:d5:07:85:77:52:1f:94:7c:a3:3a:ef:2f:e4:
ff:62:d9:53:11:03:cb:50:27:77:fc:5b:90:80:4a:
96:26:39:d5:1c:82:42:a1:43:fa:7b:03:98:b5:85:
23:81:a6:49:d6:9e:0f:b6:01:ff:a1:66:6f:ed:65:
24:d0:25:5f:2c:9e:a4:cd:30:34:b5:77:6e:61:6b:
d6:b6:5e:b8:a8:00:69:45:46:cb:35:0e:3e:c9:1f:
61:c2:c3:37:f7:56:97:ca:15:c2:32:51:95:c7:4f:
a0:ca:88:53:13:c6:34:8a:10:aa:5e:07:9c:c6:19:
b6:f7:36:82:dc:55:e4:37:dd:67:bc:22:66:ee:ae:
56:74:bc:8d:3f:ab:f8:9a:81:c0:10:f2:47:a3:4c:
e5:35:07:c3:ef:c3:ee:16:8b:d0:44:b1:df:9d:d7:
15:1b:be:3a:07:b6:ea:9e:cf:1c:65:fd:55:36:52:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:22:DC:2D:D1:FE:48:F7:07:4E:A3:16:C4:0C:78:99:E0:E0:A6
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:83:3f:96:7f:f0:7a:54:02:c2:4c:d1:f0:95:4e:3f:0a:72:
a1:2a:44:49:65:a8:7a:3c:18:f1:03:4d:d1:c1:79:55:4e:d3:
70:ab:a9:a2:46:32:8f:ba:84:65:99:bf:32:10:21:1e:7e:83:
e7:a5:22:58:e0:86:86:35:b2:d6:de:2c:19:19:00:95:62:af:
63:e4:75:60:63:3a:77:75:50:2e:06:d1:00:27:12:fe:f7:8d:
03:7f:8f:e9:48:85:d0:99:cf:ca:b0:0d:db:ef:df:49:f0:1f:
40:6a:7c:18:4d:33:c3:e9:07:3f:af:47:d4:e5:a1:90:43:cf:
66:09:a3:ef:f4:df:fe:cd:30:45:a3:49:28:4a:54:fb:ef:e4:
43:b5:37:0e:06:33:74:ff:a6:18:f0:02:4f:95:e9:43:f9:61:
a5:45:31:4b:eb:8d:15:e1:20:59:79:42:a1:34:03:38:71:ad:
02:57:66:72:8a:51:58:24:62:0a:7c:4b:c4:15:2d:f3:ef:8f:
92:0b:77:02:db:29:9e:99:e6:f4:8c:67:b0:39:2d:31:70:9b:
35:aa:64:50:39:99:7b:09:9a:e6:cc:e7:ba:36:40:c5:15:eb:
42:43:48:6a:74:f3:66:aa:69:6f:de:f8:41:bf:13:c9:06:76:
06:4a:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:52 2025 by rpki-client