Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json)
Hash identifier: GLePiD2YkuhvJ5/o5lqIuWYLloVyWzHYUDb31WZKDvQ=
Subject key identifier: 4F:9E:0D:60:00:90:99:1E:E8:CF:AD:6D:98:37:49:96:CE:0A:A5:1F
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial: 0349
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
Manifest number: 0344
Signing time: Sat 29 Mar 2025 01:17:40 +0000
Manifest this update: Sat 29 Mar 2025 01:17:39 +0000
Manifest next update: Sat 05 Apr 2025 01:17:39 +0000
Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: iB+GLA4S0oPj3GHhKzZqXR4GcO99NSLcbx3FH8KWYYE=)
2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110592
Validity
Not Before: Mar 29 01:17:39 2025 GMT
Not After : Apr 5 01:17:39 2025 GMT
Subject: CN=67e74a33-b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:d8:f5:64:65:ac:49:2f:a9:ef:2a:aa:ab:
da:b3:02:6a:3d:7e:ef:3d:c4:2d:d0:bf:82:2b:0e:
38:8a:34:50:52:b2:49:90:18:51:e1:2a:a7:cb:95:
c9:e1:a3:c7:af:4d:f3:47:29:42:49:14:5e:85:b7:
fa:ec:59:77:5b:f3:ab:e6:a2:59:03:48:f7:4a:55:
b1:4e:af:92:4e:2e:98:b4:ed:3d:87:b5:0c:cd:0f:
e6:99:88:f5:7c:84:1f:f9:ff:a6:8f:33:0d:d0:61:
78:6b:11:9c:87:38:10:77:f8:87:cf:a7:2f:90:65:
f0:9a:15:5b:43:7a:79:8f:71:ba:26:bf:90:5e:1b:
32:2c:ff:7a:1a:42:9d:1e:d8:63:4a:04:3f:8a:aa:
e7:42:ae:b3:e6:1c:0b:df:3a:89:61:53:0c:85:ae:
1d:79:8a:40:82:b8:96:72:e3:7f:6e:cc:6d:57:2a:
48:58:34:9a:7d:d4:d9:90:e9:bd:41:50:f2:74:67:
f5:bb:7f:b2:d6:62:80:01:38:d9:07:c0:b5:7b:5b:
ba:c1:f3:d6:42:b8:28:e4:a9:fc:eb:8a:04:cd:64:
e7:37:fe:a3:af:76:45:fe:0e:27:fd:16:61:27:6d:
a4:e5:54:87:ad:87:14:4d:28:1a:07:9c:81:2d:4d:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:0D:60:00:90:99:1E:E8:CF:AD:6D:98:37:49:96:CE:0A:A5:1F
X509v3 Authority Key Identifier:
keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:a3:9a:e1:75:5f:0f:45:af:c3:fc:84:88:55:ef:28:8e:
8c:85:00:75:e1:1f:96:51:32:4a:f0:9d:5c:7d:44:5b:ca:b8:
c7:60:94:2c:9a:8d:ca:f7:60:cd:96:7a:02:17:68:1a:b7:28:
c3:16:1b:1a:84:3c:77:5a:e8:6b:1a:e5:41:ec:02:e7:ed:d6:
16:03:36:6b:ba:85:4c:d6:fd:d3:71:dd:a8:07:e3:d0:86:ff:
24:84:50:34:72:29:78:13:89:b8:27:d7:48:32:fa:8b:f5:6a:
32:c2:75:a7:a6:aa:5a:86:d0:1b:6d:eb:40:82:15:98:0e:37:
45:c8:3b:45:72:72:e3:d8:7c:dd:26:10:91:bd:eb:9e:4b:8c:
6c:e1:af:94:8c:28:db:51:65:3c:df:c7:e6:d1:d3:e8:a2:1a:
e6:d0:09:c8:2e:57:d5:80:01:ab:ef:1b:ef:c1:e0:d4:20:70:
10:a8:5a:52:9c:05:5c:0b:27:1c:b7:60:bd:4e:a6:94:12:cf:
9c:a4:ab:a0:73:8e:37:8a:15:d3:97:8c:cb:15:fd:25:75:b1:
aa:8e:0a:ce:88:02:d2:c5:16:69:28:4f:b1:2d:ac:8f:f7:9e:
35:f9:2b:d8:db:54:96:25:c3:80:8d:e4:d8:e5:41:cc:0c:a9:
95:96:8a:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG
MDkwNzREM0QwHhcNMjUwMzI5MDExNzM5WhcNMjUwNDA1MDExNzM5WjAYMRYwFAYD
VQQDEw02N2U3NGEzMy1iNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5aLY9WRlrEkvqe8qqqvaswJqPX7vPcQt0L+CKw44ijRQUrJJkBhR4Sqny5XJ
4aPHr03zRylCSRRehbf67Fl3W/Or5qJZA0j3SlWxTq+STi6YtO09h7UMzQ/mmYj1
fIQf+f+mjzMN0GF4axGchzgQd/iHz6cvkGXwmhVbQ3p5j3G6Jr+QXhsyLP96GkKd
HthjSgQ/iqrnQq6z5hwL3zqJYVMMha4deYpAgriWcuN/bsxtVypIWDSafdTZkOm9
QVDydGf1u3+y1mKAATjZB8C1e1u6wfPWQrgo5Kn864oEzWTnN/6jr3ZF/g4n/RZh
J22k5VSHrYcUTSgaB5yBLU0fTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+eDWAA
kJke6M+tbZg3SZbOCqUfMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw
RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE
OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRa6Oa4XVfD0Wvw/yEiFXvKI6MhQB14R+WUTJK8J1cfURbyrjHYJQs
mo3K92DNlnoCF2gatyjDFhsahDx3WuhrGuVB7ALn7dYWAzZruoVM1v3Tcd2oB+PQ
hv8khFA0cil4E4m4J9dIMvqL9WoywnWnpqpahtAbbetAghWYDjdFyDtFcnLj2Hzd
JhCRveueS4xs4a+UjCjbUWU838fm0dPoohrm0AnILlfVgAGr7xvvweDUIHAQqFpS
nAVcCycct2C9TqaUEs+cpKugc443ihXTl4zLFf0ldbGqjgrOiALSxRZpKE+xLayP
9541+SvY21SWJcOAjeTY5UHMDKmVloqP
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:44:38 2025 by rpki-client