Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json)
Hash identifier: WZi+rSqEUVaAPrENMCsVDV9uVC77duL6yY+n3f7VM0E=
Subject key identifier: F6:ED:3E:85:34:74:95:55:66:71:84:F8:CC:F1:18:CA:06:92:C5:31
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 34A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
Manifest number: 347F
Signing time: Fri 28 Mar 2025 14:58:01 +0000
Manifest this update: Fri 28 Mar 2025 14:58:01 +0000
Manifest next update: Fri 04 Apr 2025 14:58:01 +0000
Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: N8623yj3OmK/bhbSggMCMv0tx/yPoYYuHF998TzLLfI=)
2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: XcDFXjlfUG7gat5Mn2G5GUkU6QTMu4zYAY0E0LcWZ/I=)
3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: PxQFBDt3MlLgfKc8KqwYwfOpnira0VBqCMOA9nowVeQ=)
4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: rZN8MBWyEzHwpv4iO0Yw1pt5Vq4fsdDOBU015oji+0s=)
5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: Tw8o51QsKWxSHOjK/psQ5MTWchWVnaRSIbAtlFB/kL8=)
6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: qoFcoGLH5rF61ICxkb9LlHSey20FafRf8pg6MY0OMrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13475 (0x34a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C
Validity
Not Before: Mar 28 14:58:01 2025 GMT
Not After : Apr 4 14:58:01 2025 GMT
Subject: CN=67e6b8f9-33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:76:da:d9:de:b4:3f:a8:51:da:37:72:7a:
51:cd:9c:d8:26:69:b1:95:75:22:20:30:03:4b:ca:
b8:07:68:66:b0:cc:b1:7a:86:4b:41:3e:3a:50:75:
57:6b:4d:1a:79:7f:db:17:62:a5:f0:b7:a2:90:59:
3e:24:a1:e1:ba:bf:c4:a9:32:ee:63:68:ac:fd:f7:
ea:61:10:7b:15:d5:51:b1:c4:d5:4c:19:f9:3a:0a:
ea:0b:8f:af:3a:51:cb:ca:a7:3d:af:6b:89:33:c2:
f1:de:ec:e7:2d:a3:cc:86:5f:32:fb:f9:cc:bf:d0:
be:b3:57:8e:ac:51:a9:42:86:c0:ab:5a:1f:4e:8a:
13:92:d5:25:03:f3:91:75:f2:1b:ea:67:b7:15:df:
d6:e5:f7:9e:15:ed:f1:41:15:fe:cc:19:9a:3e:50:
0b:f4:4e:66:51:4c:f6:f8:d5:75:02:b3:6b:18:c8:
1f:e3:83:47:06:bb:27:07:e0:a3:9a:af:2e:5b:aa:
58:48:d9:b3:45:e7:de:22:e2:f1:d8:4c:73:5e:e8:
8b:31:09:0e:db:3e:47:89:a9:79:6f:ab:b8:88:01:
c3:fa:d7:ef:8c:4b:9e:f2:a7:c3:6f:ff:a4:21:06:
14:be:eb:5a:3c:fd:28:e4:54:f3:83:f3:d4:d4:b2:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:3E:85:34:74:95:55:66:71:84:F8:CC:F1:18:CA:06:92:C5:31
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:c3:b1:b7:11:f5:ee:91:1e:11:dc:97:0c:54:cc:e6:00:
77:fa:c2:f6:65:45:d6:38:06:78:99:c9:71:71:e5:b0:ff:b5:
7d:59:ff:95:a4:b5:90:cb:cc:af:f0:18:f3:43:8a:89:da:e0:
d3:af:39:3f:0a:ed:b7:e8:01:74:d7:3e:ab:ea:e4:1c:aa:07:
d8:8e:84:cf:84:a7:bb:d4:3e:e9:32:6e:e4:61:e2:9a:a7:07:
4b:2b:bf:14:d9:5a:06:7e:6e:34:91:e0:ae:85:a5:56:f6:94:
f1:a2:aa:b3:c6:2c:e8:8a:e9:8b:3f:ce:59:79:b3:cf:48:ee:
3a:67:39:5f:d2:53:09:15:c3:a1:66:fb:b1:c0:1e:12:00:fc:
c2:5a:e0:13:4b:ed:2f:04:46:fa:f5:ba:46:06:f7:3d:7a:d0:
46:39:3c:36:11:58:5a:9d:f8:99:48:83:ce:78:3e:14:f9:0f:
6e:68:f4:64:24:62:cc:9b:5a:8f:c5:20:da:ed:9a:12:98:cd:
a2:b4:d7:f2:3e:e6:23:ae:d2:0e:ef:ab:6c:7e:c1:c0:d1:70:
20:47:be:47:92:30:4d:a4:af:42:4d:cf:47:f2:b5:16:6f:9c:
cf:ac:2e:9a:6e:f5:21:b0:a5:1e:6d:7a:c0:b3:0e:f2:17:e8:
84:30:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:09 2025 by rpki-client