Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier: 9RPPdIIMwXObUkRz00lBmyM+YiUVpDIhZ5YUreoLu1c=
Subject key identifier: 79:B6:73:AA:AB:FD:CB:98:8B:C5:CC:50:E7:DE:58:64:37:46:42:EA
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number: 0109
Signing time: Sat 29 Mar 2025 04:24:28 +0000
Manifest this update: Sat 29 Mar 2025 04:24:27 +0000
Manifest next update: Sat 05 Apr 2025 04:24:27 +0000
Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: d5/IbxCRP4qisiqUrHe6GjPXfnaQAUUyJhXS8qAFyDE=)
2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: v+Dp0K1hdXxl3OPWO8uxhWsiC5bQl5Ff5tXnCdcq4MU=)
3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2A5
Validity
Not Before: Mar 29 04:24:27 2025 GMT
Not After : Apr 5 04:24:27 2025 GMT
Subject: CN=67e775fb-5966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:76:09:90:8b:57:4e:d3:e9:eb:69:09:a7:
e4:51:8d:c0:e2:6b:a1:75:8c:a0:40:f4:54:db:7b:
f6:ee:c4:0f:0f:9a:8f:01:c6:42:19:5b:9c:df:ab:
d2:83:34:09:cd:41:d1:57:39:64:95:c9:8f:fc:fd:
cd:4b:5d:5b:03:ba:cf:fc:c6:5f:a9:26:05:cf:0d:
9c:11:dd:d8:12:f5:98:0e:46:be:5e:2b:a7:81:72:
dc:c5:2e:8a:06:31:b0:7f:cb:dc:62:a5:49:57:aa:
0a:e3:df:f9:b8:20:a7:e2:2d:98:37:33:e3:68:ef:
3e:1a:0b:0d:84:99:b2:60:9f:33:18:48:27:98:8e:
10:8d:af:fd:70:e8:6a:bc:1e:a7:fc:b0:b9:64:66:
05:7f:47:e5:06:a9:07:97:3f:c5:5f:9a:89:60:c8:
75:ca:06:10:07:8a:4d:b7:8a:7e:ce:bb:cb:bd:7c:
33:f5:ef:a6:9d:ee:cc:29:b5:3c:7a:ba:9d:26:2f:
82:8e:6b:ea:5e:74:94:ab:2c:f7:5f:2b:40:3c:30:
48:24:99:ad:49:96:f7:33:17:48:13:8f:e6:13:b3:
46:93:9c:a9:58:13:24:b1:2e:10:18:06:06:75:f7:
6f:99:16:33:df:bb:f0:29:56:d4:6f:01:85:81:eb:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:73:AA:AB:FD:CB:98:8B:C5:CC:50:E7:DE:58:64:37:46:42:EA
X509v3 Authority Key Identifier:
keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:88:e2:a2:68:a1:30:2a:19:74:55:1d:8c:78:1c:6f:b2:
6b:75:cf:00:af:fa:28:ae:da:b6:c4:fc:d7:4a:b6:b6:0f:d0:
f5:1e:c2:fc:79:7d:8a:bc:62:94:99:b6:f1:24:09:9a:18:7f:
13:ab:08:06:7a:4d:cb:a4:06:7a:db:0a:d8:47:b0:c8:b6:64:
d0:a8:ee:1a:d7:9f:dc:02:45:03:44:14:c1:be:5a:8b:5f:d3:
c6:16:39:55:67:86:5a:03:bd:02:6d:44:2c:a5:0a:8c:b2:a3:
29:af:6f:01:72:27:71:a6:9e:9f:6b:4e:3f:19:4c:1f:cf:93:
9d:5a:42:b9:76:25:c8:a9:bd:4a:d0:56:88:e9:e8:57:19:7a:
78:bc:c3:1a:72:60:20:5e:3d:1f:48:1e:0b:bd:9a:9f:80:0b:
ed:dd:10:13:21:f2:d1:0c:ba:05:e1:81:60:85:98:b0:67:4f:
fc:2d:95:0e:98:e3:17:30:26:85:ec:ad:61:18:66:ef:1f:83:
19:90:01:78:5d:00:b8:43:24:ce:4a:78:79:25:20:a9:cd:f8:
16:26:27:70:b3:ab:96:76:ac:ad:6b:e8:4c:84:28:39:19:dd:
15:16:95:26:32:cd:aa:3f:b5:df:f3:42:8d:a8:8b:44:0b:1c:
f2:8c:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:16 2025 by rpki-client