Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json)
Hash identifier: GCEkx0Xa8oWiQbAYBWFglW5nGD06TudYsBWJV++8azw=
Subject key identifier: F6:C4:19:FF:56:DE:8B:46:C5:2C:A4:51:BD:6E:3D:2B:00:09:51:AB
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
Manifest number: 06C3
Signing time: Fri 28 Mar 2025 22:27:52 +0000
Manifest this update: Fri 28 Mar 2025 22:27:51 +0000
Manifest next update: Fri 04 Apr 2025 22:27:51 +0000
Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: jRN7iJKBKCBArRk/Vc9q7qyMm3gVy8qtRf70HExMrB4=)
2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=)
3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=)
4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B
Validity
Not Before: Mar 28 22:27:51 2025 GMT
Not After : Apr 4 22:27:51 2025 GMT
Subject: CN=67e72268-2a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:3e:ad:eb:7b:bf:f4:ed:90:65:34:c1:9f:
e6:bb:75:9b:3d:2f:34:ef:37:ce:0a:88:23:9f:14:
07:28:58:2f:01:bb:0d:23:c9:96:0d:78:2b:c8:f5:
22:82:80:fd:8c:ff:df:da:9c:ab:7f:02:5f:c3:99:
07:91:17:c0:47:ae:bd:32:e9:03:68:a7:c3:9a:37:
da:56:86:f7:35:ed:68:14:b5:89:bb:54:38:6d:cd:
ad:f2:33:f5:a3:aa:7e:7a:8f:2c:2c:40:73:1c:d1:
67:94:39:40:de:ba:23:5c:a8:71:71:fa:b6:91:63:
f4:94:20:93:b6:45:b6:63:4c:e7:ca:90:6f:78:fd:
ec:6f:e2:d7:c1:7c:6e:82:e9:01:3a:c8:30:72:b1:
d6:6b:4e:06:7a:9d:c6:01:c4:01:9b:e4:d4:8f:75:
b6:d4:60:8b:f4:a2:d4:87:6b:32:4d:bd:2d:6f:f9:
4f:ec:f8:ff:6c:a7:13:c5:bd:20:7d:26:55:f7:79:
91:85:b9:bd:0a:69:a6:57:1d:67:78:85:17:aa:df:
91:d5:a1:69:b2:78:8b:14:ad:ab:ee:a1:85:2c:58:
f9:85:d5:8b:25:ba:c0:33:1d:23:99:d3:ef:a7:11:
ff:ef:be:dd:40:87:a0:75:93:6b:c7:0b:c4:ce:70:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:19:FF:56:DE:8B:46:C5:2C:A4:51:BD:6E:3D:2B:00:09:51:AB
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:16:79:60:4e:af:98:ef:bd:84:2d:2a:97:55:02:17:f8:
f0:66:b2:63:f8:2a:7a:bb:94:c0:09:e2:a0:33:78:16:6d:c3:
f3:9a:dd:7a:3b:af:a4:2e:11:61:0e:30:d5:5f:5a:bf:0a:bf:
18:4a:c1:22:fb:bb:0d:92:28:55:34:9e:53:7d:32:2e:a5:da:
4b:f5:a8:54:b3:19:a0:68:c1:d2:42:ab:90:98:c2:65:5b:13:
a0:11:f5:a9:cb:a3:09:3b:9f:79:64:26:fc:f7:f2:5b:a0:ff:
8a:35:91:36:96:5a:90:6e:06:ca:ad:66:7b:70:77:da:9e:0d:
16:ef:6c:d7:a8:28:1a:2d:a2:ad:35:24:93:f7:98:e8:03:58:
d2:9c:7e:13:43:19:a1:50:93:f9:2e:f7:78:d9:a8:7a:ce:ac:
53:b8:8d:15:1f:33:7e:f1:aa:32:bb:41:c3:a9:38:84:5f:13:
c8:e4:a6:31:6c:d9:39:c5:5d:3d:5a:36:7c:81:77:2b:c6:c0:
79:33:3b:80:98:96:6f:60:4e:ad:1f:3c:a5:6d:32:57:86:fb:
8b:4e:b0:b2:da:a9:d5:cd:7f:07:a8:90:05:7d:cd:73:3a:b0:
e8:d3:dc:40:1a:29:a6:77:19:9a:1f:22:79:e1:ad:e9:cb:85:
c0:ac:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:50 2025 by rpki-client