Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json)
Hash identifier: R0HWjqIHnQM0l3nIRceAiu6SHyrKmz7U2mHktTWkv7g=
Subject key identifier: 9D:56:52:C5:17:65:8F:DB:2C:99:37:1C:35:EE:29:F4:3B:6B:17:E8
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
Manifest number: 0673
Signing time: Thu 30 Jan 2025 22:22:35 +0000
Manifest this update: Thu 30 Jan 2025 22:22:34 +0000
Manifest next update: Thu 06 Feb 2025 22:22:34 +0000
Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: O9StD/T9QZFvgT+vrKzXbXwT3ISffjwLNePJs4VzXqw=)
2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: t7mfrUSDQrKIp8JEdIvGwr5fOfRSKBqvcJKp6zu78N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Validity
Not Before: Jan 30 22:22:34 2025 GMT
Not After : Feb 6 22:22:34 2025 GMT
Subject: CN=679bfbab-0dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ee:cc:16:1d:1e:77:db:c8:1c:07:48:f6:f9:
3c:a0:ea:53:d3:95:87:0c:07:a1:9e:a8:14:7b:a1:
4e:ab:c9:9f:17:67:12:8e:85:e3:84:f9:62:ce:3e:
b3:cb:31:d1:b8:79:b3:bf:91:84:b1:d5:8f:ef:0d:
9a:78:d4:ba:a8:1e:33:2e:c6:7b:8d:b8:36:79:8e:
1d:3e:52:d6:f1:83:77:cd:ca:0a:aa:6f:07:a7:46:
3e:02:be:9d:be:c1:96:4b:5f:d5:24:d7:4c:b6:94:
f9:92:0d:c9:24:d3:19:8d:4a:96:7e:22:d7:b5:98:
50:c1:b7:42:43:91:26:06:a0:75:51:c0:75:22:01:
e3:5b:53:5d:24:64:d3:39:fb:c2:50:bd:a2:eb:ed:
7b:0d:05:81:dd:da:f0:2a:09:12:63:62:fd:e7:4f:
d2:ab:92:88:d9:10:d4:e7:cc:39:10:6d:06:08:13:
ae:90:85:cc:16:03:cc:6b:f4:3d:32:3b:0a:b5:c2:
9d:69:b8:7c:54:22:45:d7:32:8a:71:00:69:ba:5e:
61:5f:3b:bb:2c:f0:0c:ef:a5:5c:e3:88:43:ee:93:
83:e2:2b:01:8e:b3:10:fe:62:25:7d:17:c8:5f:be:
e1:41:be:24:c8:ca:7b:6b:77:97:c7:3e:32:0d:56:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:52:C5:17:65:8F:DB:2C:99:37:1C:35:EE:29:F4:3B:6B:17:E8
X509v3 Authority Key Identifier:
keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:29:67:6f:98:70:63:47:d8:dc:0f:6f:1f:17:84:d2:9b:
e7:85:b0:13:3d:0f:fd:66:7c:d6:28:05:a2:29:af:84:71:e5:
3d:97:69:4b:b2:c2:a9:79:e0:49:70:bd:58:6d:5a:1e:66:31:
a7:ae:03:76:d1:57:58:13:54:83:88:70:64:4c:36:35:ff:b2:
62:17:a4:8c:74:75:c4:c2:0b:05:b1:62:bf:16:c9:2e:09:7c:
22:70:54:d9:5f:e6:b4:eb:6b:55:9f:2b:0d:20:14:1d:3d:c2:
dc:3c:0c:2e:5f:6f:e2:83:1b:a8:46:64:15:49:11:3e:61:07:
f2:b6:fb:91:87:6a:00:eb:46:3e:cb:a7:37:91:8e:41:00:54:
95:cd:40:04:d2:1c:4f:a4:6a:87:38:0d:96:c8:b1:8d:61:18:
d2:03:5e:6a:f6:8a:cf:a7:bc:a8:e4:5b:f3:ac:f2:77:ef:62:
55:7d:a1:66:ec:ee:a2:1e:ed:bb:75:1f:06:50:77:4f:7f:b0:
5d:ca:e1:a5:16:b9:63:8d:58:8a:f7:6d:a8:e2:7e:c9:77:1f:
a9:58:0e:87:4b:a9:d7:bc:1d:93:90:dc:7e:c8:39:06:6e:8d:
3e:92:fa:46:1c:31:87:bf:9f:f2:5a:46:3f:4f:e0:6b:27:97:
77:fe:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:28 2025 by rpki-client