Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier: qAdE3QhWhq6zHK4OdjgUWnXh+T02B3dhBzAJs9quH2Y=
Subject key identifier: D0:FA:F4:02:4F:38:3B:4F:7B:31:9C:41:F1:96:98:1C:25:10:9F:7A
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial: 20A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number: 209A
Signing time: Fri 28 Mar 2025 16:04:12 +0000
Manifest this update: Fri 28 Mar 2025 16:04:11 +0000
Manifest next update: Fri 04 Apr 2025 16:04:11 +0000
Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: LoSZRd6UFqzSvazCt748A6GBqlpsRnhGLyxil74akvI=)
2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: RK88f3wdCzpNPguWSTl9nYVYkHw1B7h/b164CfD8hi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8352 (0x20a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915890D
Validity
Not Before: Mar 28 16:04:11 2025 GMT
Not After : Apr 4 16:04:11 2025 GMT
Subject: CN=67e6c87b-5233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:5c:41:37:f2:91:3f:22:69:1f:65:e8:f7:
99:bb:20:22:86:bd:71:a4:e5:4c:b1:fe:a7:cd:a5:
db:65:32:c0:55:d4:04:f8:6a:7c:fe:3b:74:9e:26:
62:68:32:52:84:4c:61:db:da:c8:d7:74:5a:21:a3:
78:83:39:70:8d:4f:f0:9c:b9:a8:60:71:19:a0:fa:
2b:1f:45:30:cf:d2:3f:a8:75:df:d1:2b:ee:41:c3:
21:af:bf:3e:ab:f1:dd:d9:06:ef:0b:b0:11:d4:91:
88:5d:e5:27:06:08:ae:04:6d:f2:83:cd:42:d4:8a:
84:35:50:28:16:38:d4:78:f1:95:5a:b8:93:44:19:
45:4a:f0:78:a0:a5:2a:8a:35:33:32:10:f1:f4:96:
44:53:ac:14:3e:fb:af:cf:ec:e1:3e:7f:b8:27:72:
b6:1a:07:39:98:6f:6b:ce:35:8b:62:06:49:1b:66:
22:31:05:dd:3b:01:4d:ee:95:ab:1a:8f:2c:eb:47:
42:82:20:30:83:53:2b:e8:e7:ac:c2:6b:95:9d:3c:
5f:df:5f:26:27:b5:c6:fc:56:b6:ea:30:31:ec:72:
73:8d:a3:a0:4b:2e:32:52:b4:12:8f:1e:0f:a3:3d:
98:c6:98:31:9c:d9:2a:84:cf:4d:fa:54:41:a7:f4:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:F4:02:4F:38:3B:4F:7B:31:9C:41:F1:96:98:1C:25:10:9F:7A
X509v3 Authority Key Identifier:
keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:9c:27:5b:cc:b4:11:2b:9a:59:44:be:c9:0e:4f:02:88:
b8:6a:7d:d0:4b:dc:53:f1:38:50:19:b1:75:c0:ca:ae:bc:73:
12:89:53:07:c6:e3:ec:52:74:f9:db:6a:1d:dd:0c:77:b3:75:
bb:f2:1d:28:e6:fa:4c:45:c6:8d:87:0a:25:df:43:c7:35:08:
4a:e3:e6:2b:0d:e1:d9:82:a7:ff:97:3e:57:62:61:85:c8:cb:
9e:86:6f:14:9c:2f:5b:07:21:99:98:0f:cd:4a:5b:48:84:e2:
0f:83:ea:9e:43:93:ce:70:d6:12:f8:4a:9e:8a:31:20:d8:fd:
e6:64:56:48:a0:30:b3:be:05:04:1c:8c:fa:0f:eb:f0:db:4d:
9a:70:2f:37:94:98:c3:91:8b:45:fe:76:0c:ef:65:ee:a9:7b:
ab:2f:94:15:8f:d7:6f:5a:fe:22:bf:b6:68:17:ab:f5:40:9f:
bc:ea:2c:a0:6b:2a:68:75:c7:77:13:77:ae:4a:cd:37:1d:38:
af:37:0b:ea:8c:6d:23:e3:64:d2:fc:a9:fb:88:06:e5:2d:9b:
71:78:05:63:4a:54:93:42:b6:c9:1d:7f:cb:80:6b:82:78:e4:
d3:a0:8c:4c:4b:22:17:66:c6:03:0b:f7:77:5a:da:46:a8:6e:
8c:74:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:24:34 2025 by rpki-client