Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json)
Hash identifier: p3c3ehqhO02+j+6LxJXzQIj0PIWFdvtK+QZ/ZiKvVW4=
Subject key identifier: 40:F8:95:32:03:FA:6B:CC:39:5F:44:28:16:DB:E1:3E:E8:B0:2E:3D
Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
Manifest number: 9A
Signing time: Fri 31 Jan 2025 05:27:15 +0000
Manifest this update: Fri 31 Jan 2025 05:27:15 +0000
Manifest next update: Fri 07 Feb 2025 05:27:15 +0000
Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: nlVLnOyXFQoLtE7uFtcv1jPtZFwLBhPiqZ6SHe+E7fM=)
2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: m2sARVY1bYsl1KWknE2ii32pPqsgNqR/nyrCyyQr3Rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5
Validity
Not Before: Jan 31 05:27:15 2025 GMT
Not After : Feb 7 05:27:15 2025 GMT
Subject: CN=679c5f33-c3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:04:84:78:e4:68:17:05:d6:5e:e3:7c:64:ad:
bc:67:3d:40:00:24:5a:f9:6e:5d:bd:29:d6:12:bb:
d8:a2:6a:2e:74:76:85:28:57:bb:39:a3:62:11:44:
e2:3a:b0:ea:db:f0:ef:4a:92:c1:de:62:f1:a3:4f:
6e:e5:9f:6e:e0:c7:b3:6c:58:06:e2:6e:3a:11:d8:
9e:f3:70:c2:bd:75:35:5f:d1:74:fa:eb:ba:40:f8:
4c:eb:d9:a6:44:f8:66:d7:09:f2:20:a6:84:b2:7c:
23:ce:7e:c7:3f:4a:a2:ee:b3:65:4f:96:c5:44:34:
8a:d0:2e:39:2b:61:8e:0e:ec:8f:67:6b:ea:bb:94:
dc:d3:e2:4e:70:b5:d1:2c:e4:35:d6:15:60:b1:e8:
4d:0e:da:1c:58:8b:49:75:da:25:50:14:0d:9d:29:
46:60:37:24:ba:db:ef:4a:ab:94:d0:43:3c:61:8c:
41:36:fd:2c:19:88:4a:77:99:27:92:de:7b:30:2e:
e8:0a:eb:18:97:e8:80:cd:40:9d:cc:bc:9b:60:3a:
17:18:d7:e5:b9:0f:e8:e4:25:9a:c2:e8:a6:78:7c:
a5:67:87:e6:8e:ea:ec:b5:34:93:0a:e1:12:70:f7:
4b:db:c7:3e:ac:97:22:7c:66:e6:3e:d9:a2:55:30:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:95:32:03:FA:6B:CC:39:5F:44:28:16:DB:E1:3E:E8:B0:2E:3D
X509v3 Authority Key Identifier:
keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:9a:25:3c:7a:cf:9a:2f:2f:a4:c3:fd:cf:da:82:af:ff:
17:1e:be:47:c9:96:e9:81:81:97:5f:e2:d5:41:cc:55:1a:41:
83:c8:4c:e9:c5:2d:5e:19:f7:e8:6a:94:cc:19:a4:18:aa:4f:
a4:67:68:08:59:f0:10:37:f6:78:6e:7d:10:8a:32:16:9d:b6:
62:bf:9c:3f:69:f3:3b:ce:0d:fc:5b:f9:64:76:96:a5:20:34:
a8:1a:84:c5:86:98:b8:5a:fd:25:ef:34:27:97:2a:be:94:9c:
2a:1e:2e:33:88:12:e3:9b:fe:cd:d8:30:90:7e:5c:c1:40:42:
a9:46:5f:02:7d:fb:e7:01:5b:38:14:d1:5a:c2:24:cd:31:99:
30:88:e6:1f:99:e9:86:bd:15:c7:42:f9:7e:2e:e7:cb:1e:40:
1c:c9:89:b0:c3:de:33:ef:2f:af:c2:00:69:30:90:da:0d:17:
05:4a:9d:00:3a:57:95:b6:8f:b6:2f:26:16:89:6b:b0:73:ac:
e2:ed:66:a2:b6:ce:7d:3f:c4:d5:de:8d:45:47:e9:4b:0f:b7:
c3:ff:46:58:e6:d1:7b:93:71:a3:37:b8:40:f7:d9:83:06:70:
e3:02:70:bc:47:3e:00:d5:d7:3c:e1:23:cf:78:7a:3e:fd:6f:
84:f1:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:46 2025 by rpki-client