Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier: ip7rdXLCPHDyqGtSqCb2YfWE6gta0YC8HBO1RrOR2ik=
Subject key identifier: 97:F3:13:AB:C6:5C:28:9A:52:E9:6A:78:C3:AA:19:82:84:8D:FA:A0
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number: 0490
Signing time: Sat 29 Mar 2025 00:16:31 +0000
Manifest this update: Sat 29 Mar 2025 00:16:31 +0000
Manifest next update: Sat 05 Apr 2025 00:16:31 +0000
Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 99CSzu1JAtzb5dxitemkI/AWbM7Uz5hzZvTMeMBPKvE=)
2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145EFF
Validity
Not Before: Mar 29 00:16:31 2025 GMT
Not After : Apr 5 00:16:31 2025 GMT
Subject: CN=67e73bdf-29b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:c1:95:1e:02:36:5f:de:a1:6f:e7:f3:a5:
46:ba:eb:3d:4f:2a:61:2e:a3:80:dd:ea:6d:6f:c5:
25:38:a4:b0:a2:e3:d8:4b:3d:28:ab:48:bd:22:75:
c6:9c:f0:0c:a4:06:1d:5e:06:c8:0a:49:dd:a4:c8:
cb:25:ea:19:11:52:46:f5:fb:fa:50:47:5b:60:12:
fa:f4:c4:91:f9:ce:f3:18:62:56:c8:e1:bd:7f:cd:
50:7e:97:ca:87:be:1f:91:24:b8:d4:ed:72:a5:76:
60:b9:fc:83:3d:03:2a:03:c2:9f:51:dd:c4:28:d6:
30:2b:5f:17:f7:01:01:34:11:65:b4:e4:0f:2e:12:
3b:81:34:f6:2e:e6:94:ae:35:92:08:63:2d:23:fe:
74:41:23:41:e2:c0:66:c0:75:28:d4:bb:cf:5f:c5:
bd:43:0a:aa:94:9d:39:4d:2e:1f:a8:b0:a5:ea:ac:
5d:3c:08:30:21:01:3b:db:ab:cd:0a:48:db:1a:6a:
09:89:e8:a2:5c:c9:5d:fc:a5:8f:90:e1:1a:a4:bf:
32:81:e7:18:a0:4a:12:b0:c1:d4:7c:11:a6:d6:5c:
71:38:b7:b0:d4:96:a9:fc:96:15:d4:8e:53:1f:e6:
d6:02:de:54:f3:18:9e:a1:6e:19:ac:a6:33:30:29:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:13:AB:C6:5C:28:9A:52:E9:6A:78:C3:AA:19:82:84:8D:FA:A0
X509v3 Authority Key Identifier:
keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8d:a3:d8:6a:4b:4e:91:5e:a6:7a:86:0f:95:ae:70:73:30:
97:00:a9:b0:26:e5:19:37:6d:44:cd:99:66:62:36:7d:4f:7a:
ce:36:f7:ca:82:75:5f:f4:16:c6:82:46:c3:9a:99:41:d3:7d:
1c:03:7e:d5:d8:79:47:c5:2c:f7:98:f2:c4:72:ec:1d:81:53:
77:72:60:22:45:48:0b:be:05:64:2e:22:f8:c0:32:6d:a6:be:
72:b4:64:c1:67:ee:9e:b4:c8:33:58:f9:38:0a:7b:5f:4b:b4:
85:5d:96:05:50:77:49:c8:43:7f:24:c0:52:58:2d:5b:0b:dc:
4c:04:16:ef:70:1c:77:f4:0a:44:f4:d6:dc:d5:ab:4c:6c:0a:
f2:e9:c8:07:4e:ec:a3:6f:00:fb:ae:8b:a5:4e:1c:29:c4:b8:
55:f2:f6:97:70:06:d7:24:7e:cf:b1:70:65:bc:0b:0f:f7:3b:
31:cd:83:7f:85:7c:1f:a0:85:d7:a4:39:95:6d:50:57:71:6a:
65:ea:7d:27:88:ba:49:9d:d6:e0:a0:ea:e2:3f:e7:26:dd:1b:
6f:61:69:38:22:28:df:23:6c:cd:56:ad:91:e0:59:a1:35:1a:
12:5f:56:98:ad:70:d9:79:5e:fa:2f:ba:aa:64:39:99:c4:63:
d1:72:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:11 2025 by rpki-client