Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json)
Hash identifier: G54AzcSRTEEAaWMMc+S9j9NDV4oYXQbAsxlu4FUtVBs=
Subject key identifier: 67:67:B0:9D:D1:C0:E2:A3:C5:24:C9:88:3F:E9:4E:89:FC:D6:68:48
Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
Manifest number: 11
Signing time: Sat 29 Mar 2025 07:21:43 +0000
Manifest this update: Sat 29 Mar 2025 07:21:42 +0000
Manifest next update: Sat 05 Apr 2025 07:21:42 +0000
Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: fq4XuhrbIhhN+yvWsRQryjkpJoXF5hjgz4yP5P5ur0I=)
2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155FAB
Validity
Not Before: Mar 29 07:21:42 2025 GMT
Not After : Apr 5 07:21:42 2025 GMT
Subject: CN=67e79f87-f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:6c:76:e5:c3:8a:b9:bf:3c:84:d5:5e:67:
74:0e:0d:4c:fd:81:d0:7c:2a:c1:05:8d:b6:00:f3:
33:a0:81:c3:aa:44:b1:86:2a:a8:3f:65:eb:1b:51:
89:82:a7:23:d0:4f:ff:80:a0:4b:59:37:ed:f1:bc:
96:34:2a:86:3e:c5:cc:af:9f:22:94:fa:1d:55:ee:
78:41:bd:52:ef:60:6b:d6:cf:0e:de:d2:e7:e8:15:
f2:96:90:dd:c8:71:67:c8:ff:51:89:a4:4f:f9:ec:
dc:e8:77:f6:18:7f:cc:7a:f6:a6:25:8c:66:b2:03:
53:a9:27:06:0a:16:9a:b5:fa:21:a4:fb:de:28:86:
59:83:53:db:ee:82:d7:a5:37:40:d4:ed:f6:f3:14:
be:70:7a:12:49:44:5c:c8:50:1d:35:f0:11:48:59:
83:49:42:e3:0b:c3:90:71:21:cb:8f:20:44:f2:6e:
5f:55:42:8b:c9:95:02:76:98:a0:92:cf:67:ba:7e:
cb:e0:f7:a3:59:3e:47:9d:94:a5:0b:e0:9c:f6:35:
07:da:a4:69:67:4a:dc:09:1b:c1:ac:c2:55:17:39:
d0:49:44:df:b8:c6:58:6a:81:8d:15:27:eb:e4:d2:
1b:e9:49:45:09:43:65:7d:58:69:14:cf:3f:f2:c7:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:B0:9D:D1:C0:E2:A3:C5:24:C9:88:3F:E9:4E:89:FC:D6:68:48
X509v3 Authority Key Identifier:
keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:75:30:01:d5:f6:20:f4:ab:80:86:d4:da:37:f2:9f:ac:
f8:62:04:27:b7:4e:c4:14:5c:3d:8c:5e:92:a7:9f:f9:17:c8:
2e:25:19:45:b5:4b:96:cd:3e:cc:dc:45:03:34:07:23:a2:c3:
e2:23:a4:50:24:93:78:5f:f1:22:18:c2:ce:eb:a7:b0:9a:d1:
ea:4d:33:98:24:52:ec:64:9d:5a:99:00:af:58:f2:66:f8:88:
0c:12:ab:da:03:b3:22:6f:8b:27:c1:92:fe:b5:cc:62:bf:c9:
bc:31:99:2d:b9:2c:f5:32:61:1e:e8:3b:13:32:1a:07:34:20:
b1:14:94:b2:2f:9c:e8:d7:88:df:0f:00:e7:10:da:e4:29:3a:
e2:fc:c2:90:79:2b:fc:87:0b:04:4c:8f:0d:ab:c0:61:2f:f8:
01:2f:cb:84:b4:73:2e:66:4b:e8:15:c9:ec:2f:77:67:f2:ee:
1f:3a:ed:04:d8:41:16:85:38:1a:79:f4:69:72:b0:1e:dc:f3:
94:31:62:24:5e:f6:e1:57:19:e7:40:2e:52:b7:f0:b1:d3:41:
02:e7:7b:6d:da:9f:c1:0f:09:e1:a2:27:3c:bf:d2:5c:ce:c3:
e9:30:68:2e:ef:37:bb:82:81:5a:e4:39:9e:52:6b:96:2e:4b:
22:01:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:28 2025 by rpki-client