Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File: JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier: 6quYZU4EcO/M3utSloJ6j6Stk1xAGf3KsENHh3IebTY=
Subject key identifier: 03:EA:C9:4F:9B:D0:9F:07:9F:E9:6E:11:05:4D:D8:12:5D:65:83:25
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer: /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial: 1957
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number: 1927
Signing time: Fri 28 Mar 2025 16:32:58 +0000
Manifest this update: Fri 28 Mar 2025 16:32:58 +0000
Manifest next update: Fri 04 Apr 2025 16:32:58 +0000
Files and hashes: 1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: dTf+rO5bD6EYJE60BHwAlThZ+n8TPpjYVae3AfD3BiI=)
2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=)
3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: 3B1RpXRPYovGqaozvCJn8HvxK4358NVTnDJF2IMtKPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6487 (0x1957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914589A
Validity
Not Before: Mar 28 16:32:58 2025 GMT
Not After : Apr 4 16:32:58 2025 GMT
Subject: CN=67e6cf3a-a68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:4c:f1:f0:d2:d5:93:36:ad:dc:a3:82:9e:
fa:73:b4:b4:69:16:6a:df:5a:ec:f1:b1:52:80:39:
97:b3:5d:f9:10:48:e0:ae:40:6f:7a:89:67:3f:d5:
e9:4a:cb:d3:c7:58:be:e7:d1:a5:1a:39:0e:07:5a:
bc:a2:d1:30:90:5c:c3:44:b1:7e:d6:cf:ed:5d:9d:
53:2b:c1:cf:86:6a:cc:1e:a0:68:78:33:da:27:29:
14:f0:49:dd:67:f1:87:fb:0c:1a:18:1e:d5:65:a7:
7a:cb:47:8c:13:68:ea:5a:49:b6:f1:27:05:de:de:
a6:e9:1a:72:af:78:e8:15:a2:69:aa:a4:57:c0:1c:
56:20:e7:08:8d:59:92:4a:a9:fa:be:f5:fe:b0:53:
e8:eb:b8:95:3c:50:0b:0d:1a:cb:f0:8f:b3:a6:3b:
77:87:c6:1e:80:f5:92:6e:09:84:99:6f:63:a0:d3:
08:a1:eb:97:fe:f9:58:16:60:e2:44:17:ee:f1:e0:
1d:51:75:cc:aa:5f:c1:bc:3e:77:96:b9:00:f9:18:
dd:14:10:b4:38:e9:29:84:83:ec:e6:d6:dd:d9:b1:
e9:e1:ab:ec:01:f3:f5:07:fe:3a:87:8b:af:3f:42:
3a:2f:be:28:05:db:58:8e:9a:f0:82:e5:f9:57:48:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:C9:4F:9B:D0:9F:07:9F:E9:6E:11:05:4D:D8:12:5D:65:83:25
X509v3 Authority Key Identifier:
keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:06:f1:4e:16:e1:3f:23:fa:92:be:5d:80:e6:ef:f8:89:6f:
06:8a:15:31:f3:7c:10:3e:05:ff:53:d0:88:bc:a4:54:81:75:
d9:e6:fe:f1:d3:5b:87:81:08:8b:12:a0:92:77:66:8e:4d:42:
92:58:be:d1:0f:12:5c:78:54:4b:c6:82:a8:98:c4:b5:f8:51:
b2:d6:fe:9a:b1:83:80:59:db:ec:a4:49:12:bf:1c:7d:f8:3a:
1d:e2:92:75:49:61:2b:2c:64:7a:fa:57:c4:e0:d9:57:28:7e:
fc:25:0c:9f:34:01:74:56:62:5e:8e:ea:0b:58:63:54:ec:7c:
60:fd:e6:1a:d0:7a:eb:d2:4c:7f:1a:26:7d:d6:ff:fd:f8:c6:
bd:27:76:65:b1:3e:04:73:53:41:17:e7:5b:69:9d:ad:a3:13:
db:5c:92:80:ff:0b:eb:42:a0:81:79:cc:c8:29:96:69:04:22:
39:74:d4:af:10:82:61:58:c4:3c:68:bb:f2:d3:f5:c0:8e:ca:
cc:ab:21:63:25:f3:71:30:9b:6a:51:de:be:07:59:30:8b:1d:
55:a1:a2:45:46:f0:7e:f6:7a:a4:d3:7e:82:b4:d8:fa:70:af:
18:9d:c1:8a:ae:4e:3b:e1:46:f8:71:a6:b6:24:81:d8:64:b9:
ae:31:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:08:24 2025 by rpki-client