Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier: vuJeN7DgumZMjFOinh4rd9LrpsCEoqDijU/rtuTyV0M=
Subject key identifier: 3B:8B:42:2C:5B:48:5F:D4:80:44:8F:BA:57:2B:47:C9:A1:FE:59:4E
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 3485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number: 3473
Signing time: Fri 28 Mar 2025 14:38:09 +0000
Manifest this update: Fri 28 Mar 2025 14:38:09 +0000
Manifest next update: Fri 04 Apr 2025 14:38:09 +0000
Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: vZ8TDcSIAAKmyEcJVNdNplvnmSj7ontbHg8chMMytA4=)
2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: BhE/Jm0W953o6GqpVqGr68PRcM13aAwM+4wkckGBTTk=)
3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: agsLtp5kqnZauUNHWHhsf5K29FDtzFJsgxVV1mP2HEI=)
4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: lP5NMv3I1CJOsA7UOND+xbg0rBaa2Avz8htJs1Lu9+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13445 (0x3485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C
Validity
Not Before: Mar 28 14:38:09 2025 GMT
Not After : Apr 4 14:38:09 2025 GMT
Subject: CN=67e6b451-3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:dc:8a:26:3d:44:5b:2d:67:e5:c9:0d:55:
8c:c6:26:78:14:6b:78:69:46:31:ef:af:f4:c4:86:
56:9e:6c:e7:a1:93:cb:1f:71:b2:68:c6:14:55:1a:
6a:23:e4:6f:c3:47:29:cc:f5:e9:ca:52:f5:dd:3e:
75:0f:8d:03:13:43:90:02:94:08:94:82:15:3c:c5:
08:4a:07:15:1f:40:3f:98:fa:c4:39:64:2b:9e:a6:
a4:db:a3:80:b9:65:7e:ed:c5:7b:d8:f7:f2:ec:ec:
01:b7:c1:d8:e4:7a:a2:30:71:49:ef:f1:91:f4:a2:
cf:8f:99:0b:49:82:7a:58:86:ad:6f:7c:b8:ef:ff:
e1:f4:13:15:d4:b5:be:5e:2f:59:23:0a:82:22:37:
e0:51:29:ff:70:f3:92:5b:77:dc:5b:ed:3f:9b:30:
c9:cf:62:f5:97:d2:d5:d3:d5:f8:87:14:eb:28:e1:
86:b1:27:fb:3b:d3:8d:4a:a9:89:37:55:45:2f:8e:
63:49:e3:fe:21:00:b9:b4:35:25:55:29:ee:50:5d:
a9:08:35:89:8a:d2:37:c9:a5:00:57:2d:14:de:27:
80:96:02:a4:98:68:36:dc:98:09:8f:75:0c:7e:23:
83:f1:ad:53:39:ed:3f:67:3b:25:da:4b:a8:bf:4b:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:42:2C:5B:48:5F:D4:80:44:8F:BA:57:2B:47:C9:A1:FE:59:4E
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:f1:79:13:ef:5f:17:d2:a5:45:e6:b8:77:53:81:2d:94:
cb:52:ae:89:f4:d9:84:3b:b1:de:08:5f:98:ce:70:ce:0c:c1:
18:57:d8:96:2b:0d:3a:3e:bc:71:7c:a6:5a:19:a5:c3:3c:78:
9b:4e:05:41:85:1c:ce:62:46:b2:4a:f4:15:82:d3:7c:94:fa:
31:8a:18:9d:8c:38:6b:2f:47:ca:29:82:f3:ee:ae:3f:eb:b0:
f6:c2:6f:48:48:b5:c1:7d:7e:1d:ba:ea:e8:9e:39:d8:92:e4:
9c:2e:ea:44:96:2b:f6:de:83:5c:bd:a6:12:92:5d:95:f0:d0:
64:08:e1:02:22:22:b0:40:56:97:ed:f1:d5:b3:06:9c:38:2e:
e2:ca:12:d9:95:73:c5:8a:09:d6:94:a6:d0:5f:f7:e9:41:19:
73:6f:12:6f:d2:cb:e7:75:b4:d9:6a:39:4a:92:f6:86:bf:a4:
d5:09:b3:d0:5e:46:dd:d7:66:0d:14:9f:33:38:21:7d:ab:c9:
c3:25:e7:f0:51:44:6d:6b:d3:54:d9:10:4f:99:74:80:d9:70:
35:7b:0a:3b:b2:d1:d6:39:5e:f9:0f:1f:2d:23:b6:16:1d:e7:
e2:09:82:e5:3a:13:9a:d3:84:a7:69:1e:2d:f9:4f:b2:f0:bd:
a7:bd:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:02:40 2025 by rpki-client