Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json)
Hash identifier: gVxjgSSwW3VB4CKXClKyfrhk9t/xhI2aYGn8XuZqCcU=
Subject key identifier: 19:36:6A:FF:3B:1E:F1:B9:7B:D4:96:0E:3C:34:77:17:21:A7:65:C5
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial: 045F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
Manifest number: 0454
Signing time: Sat 29 Mar 2025 00:28:17 +0000
Manifest this update: Sat 29 Mar 2025 00:28:17 +0000
Manifest next update: Sat 05 Apr 2025 00:28:17 +0000
Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: 66LaILQWnfGb+HyR0/43tzDF68/ShGGkuTIEH2qlH+E=)
2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=)
3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=)
4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: 3BgxAdDyFeIZJJ0Dw/3SwPKNjFpUaWYs6+OX1Rnlr5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919968F
Validity
Not Before: Mar 29 00:28:17 2025 GMT
Not After : Apr 5 00:28:17 2025 GMT
Subject: CN=67e73ea1-b395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:2b:c3:f9:d8:08:34:8b:02:44:5c:f6:01:
83:95:2d:a4:b3:ca:6f:5e:77:17:97:11:72:81:39:
6d:51:fb:41:88:56:4b:cd:e2:ee:ad:86:b9:dc:f4:
ac:5f:39:6c:d7:62:52:75:8a:db:82:58:04:d8:d8:
32:cb:06:77:5f:e3:8b:a9:07:a4:70:ec:4f:a2:69:
9c:d3:9e:b4:6b:cb:bf:f2:83:b6:40:91:20:c2:03:
eb:a8:50:b6:b6:a5:82:be:9d:e0:7b:c7:40:6c:ad:
dd:03:97:2e:e5:22:7c:08:8e:39:4e:47:c7:16:71:
24:f0:a2:e6:bd:97:96:41:f1:57:5a:94:e2:b9:c8:
98:ee:23:14:db:4a:fa:a4:a4:a7:09:bb:90:06:6e:
b2:96:f7:f2:b0:56:16:5f:3a:8d:3e:58:1a:21:a9:
78:6c:a3:d5:b6:e0:b7:2b:0b:b3:40:26:68:03:98:
13:18:00:4f:31:e1:14:a7:c6:7a:b9:3e:0c:78:6d:
cd:63:3f:3c:97:f7:1e:69:19:bc:35:a0:d5:f3:ad:
c3:e7:d1:4e:31:58:d1:d3:de:c2:f7:4d:19:ee:c7:
ca:f5:9b:03:e9:2c:5a:30:9b:a0:de:28:75:70:c1:
ae:98:eb:11:a2:98:19:a7:3d:41:d3:2c:d7:1c:41:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:6A:FF:3B:1E:F1:B9:7B:D4:96:0E:3C:34:77:17:21:A7:65:C5
X509v3 Authority Key Identifier:
keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:11:58:b0:43:14:09:9e:c6:93:0e:7c:a8:c1:ff:70:f9:
36:db:87:4d:93:0a:a9:6f:2a:74:53:a4:82:92:53:18:45:86:
b3:1a:04:8a:bf:5a:91:f8:3e:4f:21:eb:dd:ff:c7:42:64:cc:
f9:28:17:f1:33:9b:11:ba:17:29:9c:d5:80:5c:24:a7:d0:a5:
86:ab:7f:31:a7:c5:ee:f7:20:5a:f3:8a:c4:52:3a:45:91:de:
cc:a9:40:58:a8:c5:c9:3e:11:9b:c1:a7:02:ff:ee:bf:71:31:
08:55:1a:7b:95:03:cb:eb:79:eb:a0:73:b9:fb:02:49:3e:98:
df:45:91:76:01:97:18:0d:ae:a5:db:76:e8:1b:88:17:23:b8:
ad:8e:bd:a1:29:83:5d:91:a6:1f:fa:a4:90:a1:18:bf:b4:db:
27:ea:16:af:f5:68:b5:66:be:74:11:84:da:a0:00:d3:0f:be:
25:16:98:31:3c:03:23:05:97:36:9a:b9:13:2e:df:21:6b:4f:
54:00:47:e7:ea:37:38:6f:fd:d2:dd:d5:b0:44:31:cc:0f:94:
08:3a:38:46:00:d8:4c:0d:08:88:2e:79:0e:86:70:3b:b9:06:
b3:90:be:05:cd:fc:4d:48:c0:03:6a:95:79:b3:cb:36:7f:00:
c7:06:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:36 2025 by rpki-client