Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json)
Hash identifier: iQgahdaplRoW1v+xVx5O3kvL2WY7+GIGhFQr7LE+5Oc=
Subject key identifier: BC:FD:97:BC:9E:15:B2:4C:43:18:8F:F0:E3:FC:D1:57:33:91:7E:8F
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
Manifest number: 7D
Signing time: Sat 29 Mar 2025 06:01:01 +0000
Manifest this update: Sat 29 Mar 2025 06:01:00 +0000
Manifest next update: Sat 05 Apr 2025 06:01:00 +0000
Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: iDmTuhxMPTE2uk0NOpjwknibkv83yenHpDLpEub5ltY=)
2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7B4
Validity
Not Before: Mar 29 06:01:00 2025 GMT
Not After : Apr 5 06:01:00 2025 GMT
Subject: CN=67e78c9d-ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:d9:da:9c:9e:bf:2c:cd:94:47:0c:7d:42:
24:98:f6:36:34:75:d1:2d:92:42:c5:4f:74:8a:4f:
ef:27:3e:2f:89:d1:bb:15:73:ef:f2:fc:6b:aa:87:
e9:77:68:73:8e:52:80:c4:63:66:35:ed:bf:4f:8a:
9f:a9:a3:9e:7f:e0:98:91:5f:5f:8e:7a:be:1b:1f:
dd:4d:28:ef:87:d1:d1:2c:3c:2d:b7:ca:01:53:1d:
d2:8e:49:8b:a3:9c:a0:d0:d2:6d:fc:bf:a7:7a:80:
a3:5e:a1:57:6c:78:be:45:09:2e:6f:01:d7:0c:39:
81:1e:52:99:15:21:b6:c7:95:99:90:20:fa:d5:ec:
a0:06:cb:07:a3:ad:d7:54:13:ef:d8:9a:75:5f:68:
e3:d0:1a:6f:90:54:f3:34:3a:a3:f5:47:4f:d7:3e:
74:07:3b:86:ff:fe:49:4f:2a:93:73:ba:f2:44:b4:
ab:14:ba:94:f9:05:ef:d0:83:5c:39:7e:29:ba:e2:
2b:06:e0:c4:c5:69:10:8e:01:e3:0f:78:88:99:f1:
82:92:ef:37:55:44:0d:3c:0f:10:28:42:fb:b1:5d:
af:5b:12:68:5d:65:5e:25:bb:9c:5e:36:f8:8e:3c:
ab:86:95:78:a5:e5:93:24:ac:de:49:96:40:43:f4:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:97:BC:9E:15:B2:4C:43:18:8F:F0:E3:FC:D1:57:33:91:7E:8F
X509v3 Authority Key Identifier:
keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:eb:5b:6d:61:5b:74:57:42:d9:ac:74:6a:c7:ea:24:9e:cb:
76:2b:49:94:ee:d9:d7:92:fa:b2:04:37:cd:6b:73:58:8f:1e:
c2:e9:d8:c1:de:35:23:a5:89:fe:89:e5:ed:b9:53:38:ac:26:
33:b9:8b:9e:c6:fe:1a:55:10:d6:2f:88:c7:ed:76:c2:57:d7:
d7:ef:87:51:d8:13:94:7b:a9:46:86:3b:ca:97:cf:4d:2b:35:
b5:a2:69:59:6e:e6:98:52:5c:e3:48:ef:35:16:cd:8c:11:0c:
9d:40:50:a5:c4:64:d1:93:e7:0d:c3:4f:c8:3c:82:37:2d:5d:
43:19:02:b3:86:09:f8:75:0d:7d:96:5b:60:16:97:45:29:bf:
2a:a4:3e:fd:98:16:d8:27:4e:63:5e:58:ec:e2:58:d3:18:de:
68:09:7b:58:4d:80:c0:99:e7:1c:e0:84:7d:8d:59:3e:eb:d5:
a5:35:d2:6f:86:30:76:ab:4d:6a:65:cb:2e:b2:87:5d:e3:b6:
86:19:c1:be:f3:31:b4:d0:a2:bd:a8:09:7c:70:c6:4b:13:81:
87:97:05:ad:eb:3b:52:db:d7:af:31:24:54:65:0b:51:b0:70:
71:60:95:51:19:33:d3:42:9b:d3:6d:ab:d0:3c:16:3c:80:c9:
89:42:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:16 2025 by rpki-client