Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json)
Hash identifier: tFjbvq2B6S6xkzVwmaWlRH3xMPBWDR5l5x01FXCSII8=
Subject key identifier: 2C:B3:89:32:EA:B6:61:1A:63:AC:9E:CA:D8:26:98:20:E4:16:BD:A2
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
Manifest number: 60
Signing time: Sat 29 Mar 2025 06:22:39 +0000
Manifest this update: Sat 29 Mar 2025 06:22:39 +0000
Manifest next update: Sat 05 Apr 2025 06:22:39 +0000
Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: QfLc14krpf/JRoCTXnAWnpblE4YTbnXNWoBjxdK07SA=)
2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05
Validity
Not Before: Mar 29 06:22:39 2025 GMT
Not After : Apr 5 06:22:39 2025 GMT
Subject: CN=67e791af-bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:fb:58:33:8b:d4:3a:6b:28:fa:be:14:50:
b5:77:f7:25:98:59:80:5c:e6:95:79:08:58:08:68:
0e:a3:39:93:22:6e:76:46:11:7f:8e:f9:2e:e0:19:
2d:b0:0f:5d:d0:a1:4e:71:84:a1:3b:1c:33:97:5b:
11:e2:97:3a:fa:11:1e:0d:37:17:fe:50:6a:36:7d:
54:72:97:79:1f:a8:b0:f0:78:18:d8:63:28:b6:1d:
76:06:3d:93:a3:97:33:1f:e0:a8:2e:f8:8a:74:09:
82:4a:a0:9f:c1:8c:9c:6e:20:3b:fa:e6:06:ea:fe:
2a:3b:93:d3:02:a3:8b:e3:3b:31:5c:b4:d8:42:6d:
2d:5d:df:d7:bc:26:66:bb:2c:5c:b1:60:f9:da:c7:
4c:1f:63:78:15:55:85:16:57:87:35:fe:7c:0f:db:
97:bc:fc:ae:15:b2:eb:46:ea:9c:a9:fd:de:18:7b:
6a:fb:46:7f:8b:30:3c:dc:c0:bb:5c:42:c3:76:47:
a3:10:c9:6f:35:73:7d:a4:ea:cd:c0:1e:3a:04:43:
49:af:a5:df:77:e2:5a:a5:06:08:e7:78:ac:2f:9b:
34:96:73:fb:95:3f:b7:63:a1:8c:a9:82:93:f0:98:
5e:ae:dd:4b:44:3c:ce:8d:a4:df:c4:c0:57:a8:03:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:89:32:EA:B6:61:1A:63:AC:9E:CA:D8:26:98:20:E4:16:BD:A2
X509v3 Authority Key Identifier:
keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e9:bb:b0:5c:cd:6b:d8:fb:0d:8e:4f:b2:7f:bc:03:bc:f1:
20:45:9e:ab:b4:3e:bc:a7:ca:06:ff:26:f8:a5:63:04:93:e4:
1f:02:c5:46:18:f2:73:2c:0e:89:ee:97:5c:10:08:5a:47:2b:
6c:c0:7f:f3:05:09:18:c6:e8:d7:8a:ce:c6:75:b3:39:58:69:
73:d5:dc:e6:83:4c:12:59:ac:ba:91:fb:06:33:78:f7:7a:0a:
05:89:f6:e3:e1:85:70:b9:5e:fb:fa:2a:00:a4:1d:86:55:80:
1f:5e:4f:ed:77:c6:24:82:d0:3a:1f:5e:f6:cb:85:e9:75:19:
67:fa:6e:3a:58:94:bf:0a:9e:d5:77:b8:e2:14:69:15:3c:fa:
dc:71:bf:70:3a:7e:45:8e:82:14:bc:4a:b9:96:00:ed:84:cf:
7a:4b:07:0a:c5:ab:27:2d:0f:9e:9c:ea:15:99:2b:2d:61:11:
77:8a:47:b1:58:bb:6e:42:47:e9:d4:89:da:25:8d:ab:47:b2:
43:a3:d0:e4:81:b6:cc:a3:66:64:87:da:8c:40:f9:14:af:10:
07:03:3a:0d:9f:02:79:fc:cc:e7:11:36:77:ed:a2:a4:9e:a9:
c3:53:d2:55:d7:0a:35:24:d3:a4:cb:6d:85:4d:93:ea:34:62:
13:7c:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:10:49 2025 by rpki-client